[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.628517][ T26] audit: type=1800 audit(1559654415.656:25): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 57.673643][ T26] audit: type=1800 audit(1559654415.666:26): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.708960][ T26] audit: type=1800 audit(1559654415.666:27): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.83' (ECDSA) to the list of known hosts. 2019/06/04 13:20:26 fuzzer started 2019/06/04 13:20:29 dialing manager at 10.128.0.26:43931 2019/06/04 13:20:29 syscalls: 2465 2019/06/04 13:20:29 code coverage: enabled 2019/06/04 13:20:29 comparison tracing: enabled 2019/06/04 13:20:29 extra coverage: extra coverage is not supported by the kernel 2019/06/04 13:20:29 setuid sandbox: enabled 2019/06/04 13:20:29 namespace sandbox: enabled 2019/06/04 13:20:29 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/04 13:20:29 fault injection: enabled 2019/06/04 13:20:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/04 13:20:29 net packet injection: enabled 2019/06/04 13:20:29 net device setup: enabled 13:22:22 executing program 0: mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x86128) accept$unix(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="ff04008e12efffb28958fdd4fe6c37b3bf0713eb5ad35a0500000004"], 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x20060000001006, 0x0) write(r0, &(0x7f0000000000)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445e", 0x17) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000014d, 0x0) syzkaller login: [ 184.702493][ T8991] IPVS: ftp: loaded support on port[0] = 21 13:22:22 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={0x9, 0x9}) [ 184.871478][ T8991] chnl_net:caif_netlink_parms(): no params data found [ 184.938179][ T8994] IPVS: ftp: loaded support on port[0] = 21 [ 184.947673][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.955767][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.965388][ T8991] device bridge_slave_0 entered promiscuous mode [ 184.979484][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.988638][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.997151][ T8991] device bridge_slave_1 entered promiscuous mode 13:22:23 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0xf6, 0x9, 0x3, 0x9, 0x1, 0x401, 0x5, 0x5}, &(0x7f0000000140)={0x9, 0x9}) [ 185.057664][ T8991] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.076085][ T8991] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.154027][ T8991] team0: Port device team_slave_0 added [ 185.188219][ T8991] team0: Port device team_slave_1 added [ 185.201588][ T8994] chnl_net:caif_netlink_parms(): no params data found [ 185.237877][ T8997] IPVS: ftp: loaded support on port[0] = 21 13:22:23 executing program 3: shmget(0x1, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) [ 185.335801][ T8991] device hsr_slave_0 entered promiscuous mode [ 185.405690][ T8991] device hsr_slave_1 entered promiscuous mode [ 185.478772][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.486085][ T8991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.493956][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.501173][ T8991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.520683][ T8999] IPVS: ftp: loaded support on port[0] = 21 [ 185.555495][ T8994] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.564679][ T8994] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.573445][ T8994] device bridge_slave_0 entered promiscuous mode 13:22:23 executing program 4: mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b802c, 0xd02) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xfffffe91}], 0x1, 0x0) [ 185.616509][ T8994] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.625108][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.634392][ T8994] device bridge_slave_1 entered promiscuous mode [ 185.772248][ T8991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.782257][ T8994] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.853861][ T8991] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.864753][ T8994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.875577][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.888090][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.907347][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.919792][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 13:22:24 executing program 5: shmget$private(0x5, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) [ 186.011543][ T9003] IPVS: ftp: loaded support on port[0] = 21 [ 186.017928][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.032017][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.049504][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.056715][ T9000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.096416][ T8994] team0: Port device team_slave_0 added [ 186.106676][ T8994] team0: Port device team_slave_1 added [ 186.116457][ T8999] chnl_net:caif_netlink_parms(): no params data found [ 186.138487][ T9007] IPVS: ftp: loaded support on port[0] = 21 [ 186.164821][ T8997] chnl_net:caif_netlink_parms(): no params data found [ 186.181553][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.191853][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.200629][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.207740][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.284528][ T8994] device hsr_slave_0 entered promiscuous mode [ 186.363070][ T8994] device hsr_slave_1 entered promiscuous mode [ 186.429514][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.474045][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.500950][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.508969][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.516990][ T8999] device bridge_slave_0 entered promiscuous mode [ 186.526894][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.534307][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.541959][ T8999] device bridge_slave_1 entered promiscuous mode [ 186.557523][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.565082][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.573036][ T8997] device bridge_slave_0 entered promiscuous mode [ 186.606419][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.613790][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.621434][ T8997] device bridge_slave_1 entered promiscuous mode [ 186.634860][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.644993][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.654026][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.674840][ T8999] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.685940][ T8999] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.702059][ T8997] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.715059][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.723619][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.732009][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.740529][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.769092][ T8997] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.786464][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.796732][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.811572][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.831964][ T8999] team0: Port device team_slave_0 added [ 186.840082][ T8999] team0: Port device team_slave_1 added [ 186.895282][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 186.910193][ T8997] team0: Port device team_slave_0 added [ 186.944082][ T8997] team0: Port device team_slave_1 added [ 187.006117][ T8999] device hsr_slave_0 entered promiscuous mode [ 187.053498][ T8999] device hsr_slave_1 entered promiscuous mode [ 187.136330][ T8991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.225911][ T8997] device hsr_slave_0 entered promiscuous mode [ 187.263104][ T8997] device hsr_slave_1 entered promiscuous mode [ 187.356421][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 187.408643][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.416444][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.424853][ T9003] device bridge_slave_0 entered promiscuous mode [ 187.466947][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.474751][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.482461][ T9003] device bridge_slave_1 entered promiscuous mode [ 187.507615][ T9003] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.517094][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.530985][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.539460][ T9007] device bridge_slave_0 entered promiscuous mode [ 187.548000][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.555390][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.565551][ T9007] device bridge_slave_1 entered promiscuous mode [ 187.590757][ T9003] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.619768][ T9003] team0: Port device team_slave_0 added [ 187.632491][ T8994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.643099][ T9007] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.654260][ T9007] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.674600][ T9003] team0: Port device team_slave_1 added [ 187.744340][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.752154][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.774984][ T9007] team0: Port device team_slave_0 added [ 187.791688][ T9007] team0: Port device team_slave_1 added 13:22:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xe32, &(0x7f0000000240)="c0dca5055ea8f54d17287f0b251ddc44e90daf196fb5f5d5c611622efe6cd1712496acbb9b82e1330cbecaa710d3bf05854947a2bcbbc03eeb25e19e1dfb53500941e5262e307cac299d72b3d7030b30c6a66bb2485ac1c8bbcfa0f83a2a50709506b024e85e5999061caf9fadf7b43754e7ea5a659c05d548a4e3c39590ec2bb07fbac15afb154e475b1f80daaa0b60cbf3b6441e60e73e") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1110c080}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x36, 0x1, 0x70bd2a, 0x25dfdbff, {0x12}, [@nested={0xc, 0x92, [@typed={0x8, 0x17, @fd=r0}]}, @generic="db2baa90ec7fa2936055343bff12ab668a23edc3794fe2f12d1febb2b416365b41aebeabbd38ae8943407be3b4573ea950a192900bd67e7c9cac7f2217d6dbc94ebcfdec11dabae74cf646aa6107256aa841f7a71bfc3ce3f73010c51e364621bc66e86ea1a95fc55efdd9da07"]}, 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x20008000) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000000)={'bond0\x00\xff\x00\x1f\x00\x00`\x00\x03\x00', @ifru_names='ip6gre0\x00'}) [ 187.820402][ T8994] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.875754][ T9003] device hsr_slave_0 entered promiscuous mode [ 187.912958][ T9003] device hsr_slave_1 entered promiscuous mode [ 187.952267][ T9021] bond0: ip6gre0 is up - this may be due to an out of date ifenslave [ 188.024588][ T9007] device hsr_slave_0 entered promiscuous mode [ 188.043043][ T9007] device hsr_slave_1 entered promiscuous mode 13:22:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca5055e0bcfec7be070") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x48100, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000001c0)={0x4, 0x7fffffff, 0x1}) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x5, 0x80000001, 0x6ad8, 0x6, 0x9, 0x200, 0x4, 0x20, 0x9, 0xc50}, 0xb) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="1bd576b627cae7f851e5acd5a275a956eb8b7cc27f626fe90326a8b4d959ea61eba3827f88a3f37337fcf4653789ca3f74ce9f40ea653d1421b20606dd701db2e848ab6fdc72b52a513a0adfc00ff901d0a45c9644b0489df2fd79", 0x5b) [ 188.092853][ T9024] bond0: ip6gre0 is up - this may be due to an out of date ifenslave [ 188.144833][ T8999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.166748][ T8997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.180550][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.193786][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.202293][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.209430][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.217527][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.227576][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.236260][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.243413][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.257886][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.267441][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.276773][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.292906][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.301696][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.311233][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.320547][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.329409][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.338155][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 13:22:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file1\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040004,user_id=', @ANYRESDEC=0x0, @ANYPTR64, @ANYRESDEC=0x0, @ANYRES64]) fchdir(0xffffffffffffffff) [ 188.347019][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.379840][ T8999] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.394756][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.404333][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.419658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.429161][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.446541][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.454930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.469838][ T8994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.486793][ T8997] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.495102][ C1] hrtimer: interrupt took 24135 ns 13:22:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x16, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000080)) [ 188.526896][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.542156][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.561638][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.568830][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.583371][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.592225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.606592][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.613760][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 13:22:26 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x1001, 0x0) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x9cc, 0x10}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x4}, 0x7) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000001c0)) splice(r1, 0x0, r0, 0x0, 0x15, 0x0) [ 188.653915][ T8994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.678526][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.687582][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.708735][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.724011][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.737835][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.745017][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state 13:22:26 executing program 0: getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000000)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1, 0x5, 0x209e20, 0x8000000001, 0x0, 0xffffffffffffffff, 0x0, [], r0}, 0x3c) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x800, 0x80000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0xaf, 0x9c, 0x363a9731, 'queue0\x00', 0x1f}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() setgid(r2) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) [ 188.759503][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.769383][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.783714][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.792463][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.800469][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.818343][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.828625][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.848557][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.857787][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.873782][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.888149][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.897186][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.941554][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.955915][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.965765][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.974889][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.984001][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.992824][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.025951][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 13:22:27 executing program 0: getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000000)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1, 0x5, 0x209e20, 0x8000000001, 0x0, 0xffffffffffffffff, 0x0, [], r0}, 0x3c) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x800, 0x80000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0xaf, 0x9c, 0x363a9731, 'queue0\x00', 0x1f}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getgid() setgid(r2) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) [ 189.038693][ T8999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.073306][ T8999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.087891][ T8997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.099396][ T8997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.125979][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.143755][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.152062][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.163786][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.172428][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.181587][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.190893][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.205117][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.217289][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.227850][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.240750][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.251771][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.267886][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.282919][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.291676][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.306208][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.313397][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.362034][ T8999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.426286][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.442179][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.460715][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 13:22:27 executing program 1: prctl$PR_MCE_KILL(0x35, 0x1, 0x4) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0), 0x8) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000040)={0x6, 0x8, 0x1, 0x401, 0x3, 0x7, 0x5, 0x7, 0x0, 0x8000, 0xffff, 0x9, 0x47c0, 0x5, &(0x7f0000000000)=""/38, 0x40, 0x9, 0x353}) fcntl$dupfd(r0, 0x0, r0) [ 189.478917][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.486127][ T9000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.520807][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.530548][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.548590][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.557755][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.566965][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.576118][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.586839][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.601858][ T8997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.612014][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.621650][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.636828][ T9007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.657108][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.672471][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.681811][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.690933][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.699616][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.708071][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.735027][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.770289][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.797263][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.819782][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.826989][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.841489][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.850559][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.859549][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.866685][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.875568][ T3761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 13:22:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x38) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)=0x100000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x10) 13:22:28 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)={'syz1', "1dac15a1cf8732d802aeeabf02ff1e92d77a602868577c29c03c212cb916a120547d7f62fa1cd8f862f15e7ef57c83068a8dc7b5e71c83c98f8b5f8066095f6fa436b2b166512d73d92135d34d1b43f1d255c416aab70749cc16589c4f1a847109497146a19c296ade043f27b716c275272052f1071697e4bf3bdcaeda5404f46dd648fd1100e35e4389dfeedbf4eb7513dbc8d5a9c4c7a38ec4536becaeae40949542ccdedc7647122dd615380398e76ee5f4b709b6e61ccb37817642f92a11036a9481ac"}, 0xc9) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000000100), r1, 0x0, 0x3, 0x0) [ 189.946215][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.956608][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.977769][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.991014][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.015161][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.023930][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.042135][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.061972][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.085486][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.119521][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.128998][ T9000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.148020][ T9003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.231903][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 13:22:28 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x3, 0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x1ff, 0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=0x0) prlimit64(r2, 0x5, &(0x7f0000000340)={0x7d5}, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x2, 0x101, 0x7, 0x0, 0x0, [], [], [], 0x7, 0x3}) 13:22:28 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0xc, 0x4) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001480)='/proc/capi/capi20ncci\x00', 0x400400, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x4) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x408040) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001680)={0x7, &(0x7f0000000180)=""/5, &(0x7f00000015c0)=[{0xffffffffffffff01, 0xb2, 0x0, &(0x7f00000001c0)=""/178}, {0x56, 0xcd, 0xdfb, &(0x7f0000000280)=""/205}, {0x3f, 0x1000, 0x2, &(0x7f0000000380)=""/4096}, {0x4, 0xc5, 0xfb, &(0x7f0000001380)=""/197}, {0x1ff, 0x0, 0x3ff, &(0x7f0000001480)}, {0x3e, 0x29, 0x0, &(0x7f00000014c0)=""/41}, {0x8, 0xa3, 0x81, &(0x7f0000001500)=""/163}]}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) 13:22:28 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="6b38dd256e0565387cccf4df8547e7603b45ead08de5d4d25101f4613fe6615bb06d28c27e065cce23f9eb5ae9ab4f9211748d3b303958215f68d1de3f3e04be78954fa5c070eb0e34d943cff5b99d4b1ceeb4614c54356f8ae42cc42f4aa83946c6a878d213803feda553ed382a7743c3a34a1e37722966f216f610e726f91b2d3a0df36c51c28cd9d66d2a446295b9702ce59d", 0x94, 0x0) keyctl$get_keyring_id(0x0, r2, 0x8) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x4, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)='&@[\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x101) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x18bbd54d, 0x0, 0x0, 0x128c, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x3, 0x83eb, 0x0, 0x95, 0x0, 0x1000, 0x0, 0xe0000, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x20640, 0xe7, 0xf1c, 0x0, 0xdcb1}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x1) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000400)={0x2b, 0x4, 0x0, {0x4, 0x7, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bcsh0\x00', @broadcast}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) 13:22:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00001a9c54e71f3be48a2b5e050809b5409e6c0f2b053f620700000000000000000a3ef441fbab390a95024a6a6ad133a5bd7730a00998b9fcf6c9a311f8a893f42de22412f06ad93e6d81c4f61011810a5ee877f9ef398aafe192d37b1c2e9634b02c8e9234bce2cc06eef2c35aac"], 0x6f) r2 = getpgrp(0x0) getpriority(0x1, r2) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x41, 0x0) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 13:22:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x6, 0x4000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000080)=""/93, 0x200000000000}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0xa, 0x200000000000001}) 13:22:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000140)="11dca5055e0bcfec7be070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x1, 0xbfa}, 0xb) shmget(0x3, 0x3000, 0x0, &(0x7f00001be000/0x3000)=nil) unlink(&(0x7f0000000240)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x2, r1, 0x0, 0x0, 0x1}}, 0x20) prctl$PR_SET_ENDIAN(0x14, 0x3) rt_sigaction(0x17, &(0x7f0000000040)={0x0, {0xe2e}, 0x0, 0x0}, &(0x7f00000002c0)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000280)) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x0) 13:22:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1008008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) accept$alg(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffffffffffd43) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x2f5}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 13:22:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xd6) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x40002, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0xffff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x4f, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) exit_group(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0xf000}, 0x28) setsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000200)="25d3edd1e920defbbdb072279b71bc68f3bea09dfddf41a143dd19ca36609672d3c6a492c698032532a7a91e7ea058c33dd8d7d2878a74aec9a8dd91976ed924d672e38c8b5ce6c5de821d6dde6ffcc42737975b203e3cbf1f36f2b051854ec2f983c27278a821bf072b84fdd2873bd0ef421774b45613a6c91c297cdbf2692b5bde37a8a57a5752bfc7", 0x8a) 13:22:28 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0xc, 0x4) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001480)='/proc/capi/capi20ncci\x00', 0x400400, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x4) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x408040) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000001680)={0x7, &(0x7f0000000180)=""/5, &(0x7f00000015c0)=[{0xffffffffffffff01, 0xb2, 0x0, &(0x7f00000001c0)=""/178}, {0x56, 0xcd, 0xdfb, &(0x7f0000000280)=""/205}, {0x3f, 0x1000, 0x2, &(0x7f0000000380)=""/4096}, {0x4, 0xc5, 0xfb, &(0x7f0000001380)=""/197}, {0x1ff, 0x0, 0x3ff, &(0x7f0000001480)}, {0x3e, 0x29, 0x0, &(0x7f00000014c0)=""/41}, {0x8, 0xa3, 0x81, &(0x7f0000001500)=""/163}]}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00', 0x1}) 13:22:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)='X', 0x1, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='\x00', 0x1, r0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r2}, 0x0, 0x0, 0x0) 13:22:29 executing program 2: r0 = socket$inet(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 13:22:29 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101801, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) 13:22:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, &(0x7f0000000000)={@remote}, 0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10002, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0)=0x3, 0x4) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x1, 0x7]) 13:22:29 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80001, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x10000}}) getdents(r0, &(0x7f0000000240)=""/189, 0xbd) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a81d368856f583040f5de85a294e3856504c9c9f210f92028168366cd706547c06e6f636892b322627c00bd0ee2662c988784e1045f41a5aa2f401c45b16d9dca6b16f6235dda8dcbb5b5d7e74ca1fffd9a2a6974e9a23", @ANYRES16=r2, @ANYBLOB="180b26bd7000fddbdf250300000014000100ff0100000000000000000000000000010800050004000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) 13:22:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)='X', 0x1, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000040)='\x00', 0x1, r0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r2}, 0x0, 0x0, 0x0) 13:22:29 executing program 3: ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0xfffffffffffffe6a) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140)=0x6, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(r1, &(0x7f0000001200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0x80000000, 0x80) recvmsg(r2, &(0x7f0000000000)={0x0, 0x39d, &(0x7f0000000100)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x2dc}, 0x0) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000001240)={'syz', 0x3}, &(0x7f0000001300)="450d1f2eb523aae62916f02fb533bb75adf9118c4e04f7a6e1a4ab3765081935f2bd602757c521696c5c379138a1173adb02ed02c55630d029489ebf94b7a75301a92ca47595ec610c25041dff75530d1155449aab4e3e789727d72c20af7437599f4f26a9d699f4efb81a7b34d3e0d8f006a0dfc30a4ce959f093a5b43fad9901b82a77d57369df29f12c4e3954c801eb59c831ccb3ea6efbaf9c4abf5dac4a6183edbecba805b21b64c6b8b209de2c3bf2c03527ecfddfab99f90c2b63cb", 0xbf, 0xfffffffffffffffa) r3 = add_key(&(0x7f0000001280)='id_resolver\x00', &(0x7f00000013c0)={'syz', 0x1}, &(0x7f0000001400), 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000001400)='trusted\x00', &(0x7f0000001440)={'syz', 0x1}, &(0x7f0000001480)='%posix_acl_access^\x00', r3) keyctl$unlink(0x9, r3, r3) 13:22:29 executing program 0: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x208}, 0xc) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1, 0x5, 0x5, 0x7fff, 0x5}) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x840) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x1, 0x2, [@broadcast, @local]}) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0x1}, 0x4) 13:22:29 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) tee(r0, r0, 0x9, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x4, 0x5, 0x5e, 0x0, 0x3, 0x0, 0xa, 0xb73, 0x8, 0x9, 0x800, 0x4440, 0x1ff, 0x6, 0x200, 0x1000, 0x4, 0x0, 0x2, 0x7, 0x2, 0x1000, 0x80000000, 0x3, 0xfffffffffffffffd, 0x6, 0x2, 0x3ab, 0xffffffff, 0x4, 0x1, 0xd3f, 0x2, 0xffffffff, 0x8, 0x0, 0x7837, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x2408, 0x1000, 0xff, 0x9, 0x0, 0x5bc, 0x8}, r1, 0xa, r0, 0xa) msgctl$IPC_SET(0x0, 0xc, &(0x7f00000005c0)) 13:22:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080), 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x56, 0xa, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2b4}, 0x70) write$UHID_INPUT2(r1, &(0x7f0000000200)={0xc, 0xec, "cac361d1b2e62dfa63d351d1a056611ba4d019211efa1679166cbe8663169c30a1090b0d8f9e97aac84a9976c2974a63a762d351dd85fba09097f28e5a5f286a04dff9014a92d0c0559c4ef4fc206588535c75830c4ac42a965b346498e7784ebf0c179f793dbe0b3e37cf59e3c276a2c964392e80d0a5411b7f0f27c444d91148340e78a26b9f8bcbf47c55355f6172a73aab132011bbe687456d7cdd116dd3df76380554e7919c7457844109a6d790dca92b66994007ebd318f2cae9dd3af387bf3e52f62409a1a4aa933e8e4d27b3189d62a4d37ebba72a15a8546a01ffdc63a07fee28b557a646640e73"}, 0xf2) 13:22:29 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0x1004) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x38}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)) 13:22:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) perf_event_open$cgroup(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0xffffffffffffff58) getsockname$tipc(r0, &(0x7f0000000200), &(0x7f0000000240)=0x10) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000280)) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0x406}, 0xfdef) 13:22:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") dup2(r0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x6, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1}, 0x3c) 13:22:29 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x7ffff}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x6, {{}, {0x0}, 0x0}}], 0x48}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000080)=0x2) 13:22:29 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x20000142, 0xb, 0xfa00, {&(0x7f00000000c0)}}, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) 13:22:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x18) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setstatus(r1, 0x4, 0x42803) tkill(r2, 0x30) 13:22:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x64}, 0x3c) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00') lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 13:22:30 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x5, 0x200) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x341, 0x7ffffffff000) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x17e}, &(0x7f0000000100)=0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r2, 0x79, "408f32c217a3a53dc3458fefb3bf5daa3e92cc1238d115b33887a65a744cd76252a5402319a0273b2166dcb713b95067bf8fb76d805626b7c2bbff83ae0cbf632902cbf0c654193602d2ac3e319583928d42ce4e40d21f1b364f1a2575fdfd5c2533343d2b69f3751aed3ca9a1c7c5594329fba645d581ca99"}, &(0x7f0000000200)=0x81) r3 = shmget(0x2, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000002c0)=""/4096) 13:22:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'bcsf0\x00', {0x2, 0x4e23, @multicast2}}) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000008a80)=[{{&(0x7f0000008640)=@xdp, 0xf, &(0x7f0000008800), 0x2b, &(0x7f0000008840), 0xf00}}], 0x4000000000002e5, 0x0) 13:22:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x4, 0x0, 0x4) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) socket$netlink(0x10, 0x3, 0x5) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 13:22:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket(0x9, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 13:22:30 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0x1004) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x38}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)) 13:22:30 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100)=0x1000000000002, 0xfffffffffffffd36) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0x9b4d) sendfile(r0, r1, 0x0, 0x10001) [ 192.357712][ T9234] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 13:22:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x101000, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r3, &(0x7f0000000300), &(0x7f0000000340)=0x10) flistxattr(r0, &(0x7f0000000200)=""/85, 0x55) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x402002, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1ff}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000040)) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000380)={0xee800fd, 0x1bfc, 0x5}) dup2(r1, r0) [ 192.441364][ T9247] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 192.500268][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 192.500282][ T26] audit: type=1800 audit(1559654550.526:31): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=16292 res=0 13:22:30 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x0, 0x1, [0x100, 0x100, 0xffffffffffff0000, 0x8, 0x81, 0x8, 0x1, 0x2c]}) write(0xffffffffffffffff, &(0x7f0000000080)="2400000021002553e5e86e70afd5bb2602000020001c000080ff000c080017000a000040", 0x24) 13:22:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000080)="11dca5055e0bcfec7be070") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 13:22:30 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='hash\x00') splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x96d, 0x10801) 13:22:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x18) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setstatus(r1, 0x4, 0x42803) tkill(r2, 0x30) 13:22:31 executing program 3: mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x0, 0x1}) io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8100, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000280)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000180a43ba5d806055b6fdd80b40000000060003000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x7, 0x4a, 0xc7b3, 0x9}, &(0x7f0000000140)=0x98) iopl(0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r3, 0x7962, 0x20}, 0xc) r4 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 13:22:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr, 0x800000000000}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xcb, 0x404002) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x6, @mcast2, 0x81}, 0x1c) dup2(r0, r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "502b9fdf57dcfe21", "4efcf0cd78ac0fd9d43071201668cd682130965022e378a8a5a7f1e9e3f733bb", "cb5d5d48", "03c24f2867ca3439"}, 0x38) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff5d, 0x0, 0x0, 0x0) 13:22:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x8201}}], 0x30}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004000)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000004100)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000004140)={@empty, 0x0}, &(0x7f0000004180)=0x14) recvmmsg(r0, &(0x7f0000007240)=[{{&(0x7f00000041c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/183, 0xb7}], 0x1, &(0x7f0000004340)=""/103, 0x67}, 0x8}, {{&(0x7f00000043c0)=@l2, 0x80, &(0x7f0000004800)=[{&(0x7f0000004440)=""/151, 0x97}, {&(0x7f0000004500)=""/81, 0x51}, {&(0x7f0000004580)=""/119, 0x77}, {&(0x7f0000004600)=""/249, 0xf9}, {&(0x7f0000004700)=""/212, 0xd4}], 0x5, &(0x7f0000004880)=""/222, 0xde}, 0xee8d}, {{&(0x7f0000004980)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004a00)=""/87, 0x57}, {&(0x7f0000004a80)=""/197, 0xc5}], 0x2, &(0x7f0000004bc0)=""/244, 0xf4}, 0x2}, {{&(0x7f0000004cc0)=@tipc=@name, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004d40)=""/4096, 0x1000}], 0x1, &(0x7f0000005d80)=""/103, 0x67}, 0x8000}, {{&(0x7f0000005e00)=@sco, 0x80, &(0x7f0000007180)=[{&(0x7f0000005e80)=""/142, 0x8e}, {&(0x7f0000005f40)}, {&(0x7f0000005f80)=""/69, 0x45}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/167, 0xa7}, {&(0x7f00000070c0)=""/158, 0x9e}], 0x6, &(0x7f0000007200)=""/22, 0x16}, 0x5}], 0x5, 0x0, &(0x7f0000007380)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000073c0)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000074c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000007500)={@empty, @loopback, 0x0}, &(0x7f0000007540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000007580)={@local, @remote, 0x0}, &(0x7f00000075c0)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000009040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009080)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000090c0)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000091c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000009440)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000009540)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000009c40)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000009d40)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000009f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000009f80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000009fc0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a000)={'bond0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000a040)={0x0, @local, @loopback}, &(0x7f000000a080)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f000000a0c0)={@mcast2, 0x0}, &(0x7f000000a100)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000000a140)={0x0, @loopback, @multicast1}, &(0x7f000000a180)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f000000a7c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400008}, 0xc, &(0x7f000000a780)={&(0x7f000000a1c0)={0x598, r1, 0x10a, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x194, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3cb5}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x18c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x7ff, 0x8, 0x100000001, 0x4}, {0x8, 0x1, 0x8, 0x1f}, {0x100000001, 0x4, 0x80, 0x9}, {0x3f, 0x7b0d, 0x9e, 0x777}, {0x3, 0x100, 0x7, 0x51}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8e}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0xbc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x65e2ed19}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}]}, 0x598}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 13:22:31 executing program 4: r0 = socket$unix(0x1, 0xfffffffffffffffe, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/115, 0x73}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x35b) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x44) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) [ 193.138746][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:22:31 executing program 3: mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x0, 0x1}) io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:31 executing program 4: mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x0, 0x1}) io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:31 executing program 2: clock_gettime(0x8000000000000a, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3) [ 193.350184][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:22:31 executing program 3: mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x0, 0x1}) io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev, 0x1}, 0x20) 13:22:31 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000100)={0x3, "835abc4672327ae0d873c9991af13097704ca3952eb2a06c908e44f242a4f25b"}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'\x00', {0x2, 0x4e24, @loopback}}) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) epoll_wait(r0, &(0x7f0000000180)=[{}, {}], 0x2, 0x20) 13:22:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x18) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setstatus(r1, 0x4, 0x42803) tkill(r2, 0x30) 13:22:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr, 0x800000000000}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xcb, 0x404002) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x6, @mcast2, 0x81}, 0x1c) dup2(r0, r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "502b9fdf57dcfe21", "4efcf0cd78ac0fd9d43071201668cd682130965022e378a8a5a7f1e9e3f733bb", "cb5d5d48", "03c24f2867ca3439"}, 0x38) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff5d, 0x0, 0x0, 0x0) 13:22:31 executing program 3: mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f00000000c0)={0x0, 0x1}) io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr, 0x800000000000}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xcb, 0x404002) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x6, @mcast2, 0x81}, 0x1c) dup2(r0, r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "502b9fdf57dcfe21", "4efcf0cd78ac0fd9d43071201668cd682130965022e378a8a5a7f1e9e3f733bb", "cb5d5d48", "03c24f2867ca3439"}, 0x38) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff5d, 0x0, 0x0, 0x0) 13:22:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr, 0x800000000000}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xcb, 0x404002) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x6, @mcast2, 0x81}, 0x1c) dup2(r0, r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "502b9fdf57dcfe21", "4efcf0cd78ac0fd9d43071201668cd682130965022e378a8a5a7f1e9e3f733bb", "cb5d5d48", "03c24f2867ca3439"}, 0x38) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff5d, 0x0, 0x0, 0x0) 13:22:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabec2e15fc1772f184bc1b3f1000ff034017db9820000000003b08d450ffffb3560000080000ab31c357e3972f415ff5cb88b9ce837c797e9ce5cccf7942003606004079025f759e9f5d540763b47f0600"], 0x58) r1 = dup2(r0, r0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)={0x3a, 0x6, 0x0, {0x0, 0x0, 0x11, 0x0, 'cpuset,.mime_type'}}, 0x36) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="a84401e14c000000060000000000000000c695000000c84cfd70fa54cc60f9d2a6000000000000000000000af3be45f371b4067935bc"], 0x36) [ 193.799328][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 193.955752][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 193.969961][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 194.004644][ T9354] sg_write: data in/out 40/12 bytes for SCSI command 0x0-- guessing data in; [ 194.004644][ T9354] program syz-executor.2 not setting count and/or reply_len properly 13:22:32 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:32 executing program 3: io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0x5, 0x30d, 0x8000000001}, 0x3c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x400000, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='\x00', 0x0, r0) r2 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001340)={r0, &(0x7f0000001280), 0x0}, 0x18) chdir(&(0x7f0000000100)='./file0\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000140)="4a53b95488766615140b86840bb6612394ac40270f74446033cd75765d5a4c2d892b38213a0b39fab8961af18f896f127de402c3e6c7e07130f8b7afd9c835e457e168520c156b81fbd801b952637a5a9d0f6b332514bfe9f4c8c768b889c8ed191627ef3b60128bcd80a8d2c0ed71c03b3e9b3d64ddb63cde9c79363f60a08498294fbcb9f289a253485c9179f6d9dae1198eff150612e639", &(0x7f0000000000)=""/20}, 0x18) 13:22:32 executing program 3: io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:32 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose]}, 0x48) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x12000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xe, 0x8c1, @l2={'ib', 0x3a, 'vxcan1\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x204, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='\x00') 13:22:32 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)=ANY=[@ANYBLOB="818983dc0aba6a13baa40da0ae8110ce08c87b10cce1e6704a5100000003793f9b2775fff6008b1ea764fed847d172a5bd69d8000000000200"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0xa800000000009031, r0, 0x0) fcntl$dupfd(r0, 0xfffffffffffffffc, r0) mbind(&(0x7f0000668000/0x4000)=nil, 0x4000, 0x1000000000000000, 0x0, 0xfffffffffffffffc, 0x100000003) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x3) 13:22:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x18) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setstatus(r1, 0x4, 0x42803) tkill(r2, 0x30) 13:22:33 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x518, 0x0, 0x308, 0x308, 0x308, 0x308, 0x480, 0x480, 0x480, 0x480, 0x480, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@icmp={0x28, 'icmp\x00', 0x0, {0x1b, 0x10000, 0x6}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0xa2b, @gre_key=0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x100, 0x88}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x102, 0x200}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast, @port=0x4e21, @port=0x4e21}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1a}, @remote, 0xffffffff, 0xffffff00, 'veth1_to_hsr\x00', 'veth0\x00', {}, {0xff}, 0x16, 0x1, 0x10}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x7, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0xd3f0, 0xffffffff, 0xffffffff, 'bond_slave_0\x00', 'rose0\x00', {}, {}, 0x7, 0x3, 0x18}, 0x0, 0x118, 0x178, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x8, 0x9, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x7, 0x12a}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="12f36eb60c1f", 0xffff, 0x5, [0x4, 0x40, 0xd, 0x27, 0x3b, 0x19, 0x1d, 0x11, 0x2c, 0x11, 0x9, 0x2, 0x20, 0x2c, 0xe, 0x10], 0x1, 0x200, 0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x2}) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x28000, 0x0) 13:22:33 executing program 0: seccomp(0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x0) 13:22:33 executing program 3: io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)=@ipx, 0xfffffffffffffee4, 0x0, 0xffffffffffffff30}}], 0x1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) 13:22:33 executing program 3: io_uring_setup(0x56f, 0x0) 13:22:33 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x7ff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3f, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) write$FUSE_POLL(r2, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x80}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0xc000000, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local, 0x40}, r4}}, 0x48) fcntl$setpipe(r1, 0x407, 0x2) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) 13:22:33 executing program 3: io_uring_setup(0x56f, 0x0) 13:22:33 executing program 3: io_uring_setup(0x56f, 0x0) 13:22:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='syz', r1) r3 = dup2(0xffffffffffffffff, r0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000100)="fa8a238e533ef9d88b89dd2b4871c97fde33687ac1e6007434d075de505dfd1295e800cb414225f3c472cbf5098e907765bc169b77dd4c") add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) 13:22:33 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x7ff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3f, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) write$FUSE_POLL(r2, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x80}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x6, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0xc000000, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local, 0x40}, r4}}, 0x48) fcntl$setpipe(r1, 0x407, 0x2) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) [ 196.111393][ T9421] loop5: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 13:22:34 executing program 2: r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000002b000500000000648c6394f20c31d200050024584f315f110900050000f0b906de559a0877e618767627", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x40, 0x200) preadv(r1, &(0x7f0000003400)=[{&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/163, 0xc}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000002380)=""/128, 0x80}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x7, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000240)=0x2, 0x4) ptrace$setopts(0x4206, r2, 0x1ff, 0x25) 13:22:34 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2b8}) 13:22:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)=@ipx, 0xfffffffffffffee4, 0x0, 0xffffffffffffff30}}], 0x1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) 13:22:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x18) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) tkill(r2, 0x30) 13:22:34 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7913, 0x40) ioctl$KDENABIO(r2, 0x4b36) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="ff63616368653d667304006368650700"]) [ 196.111525][ T9421] loop5: partition table partially beyond EOD, [ 196.481869][ T9448] 9pnet: Insufficient options for proto=fd [ 196.522414][ T9448] 9pnet: Insufficient options for proto=fd [ 196.545540][ T9421] truncated [ 196.550350][ T9421] loop5: p1 start 1 is beyond EOD, truncated [ 196.556764][ T9421] loop5: p2 size 2 extends beyond EOD, truncated [ 196.567858][ T9421] loop5: p3 start 201 is beyond EOD, truncated [ 196.574223][ T9421] loop5: p4 start 301 is beyond EOD, truncated [ 196.580418][ T9421] loop5: p5 start 1 is beyond EOD, truncated [ 196.586514][ T9421] loop5: p6 start 1 is beyond EOD, truncated [ 196.592591][ T9421] loop5: p7 start 1 is beyond EOD, truncated [ 196.598602][ T9421] loop5: p8 start 1 is beyond EOD, truncated [ 196.605209][ T9421] loop5: p9 start 1 is beyond EOD, truncated [ 196.611230][ T9421] loop5: p10 start 1 is beyond EOD, truncated [ 196.611254][ T9421] loop5: p11 start 1 is beyond EOD, truncated [ 196.611264][ T9421] loop5: p12 start 1 is beyond EOD, truncated [ 196.611275][ T9421] loop5: p13 start 1 is beyond EOD, truncated [ 196.611286][ T9421] loop5: p14 start 1 is beyond EOD, truncated [ 196.611297][ T9421] loop5: p15 start 1 is beyond EOD, truncated [ 196.611306][ T9421] loop5: p16 start 1 is beyond EOD, truncated 13:22:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x18) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) tkill(r2, 0x30) 13:22:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) sync_file_range(r1, 0x3f, 0x4, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000740)={'team0\x00', 0x5000}) getpeername$tipc(r1, &(0x7f00000000c0)=@id, &(0x7f0000000380)=0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x25c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b8b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3ff, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @rand_addr="c32f10a29f1fe524acd02b77029c163e", 0x800}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d10}]}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/590]}, 0x2c6) 13:22:34 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2b8}) 13:22:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x30d, 0x1ff, 0x9, 0x5, 0x9}, 0xfffffffffffffdcf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x800000000000000, 0x80480) [ 196.611316][ T9421] loop5: p17 start 1 is beyond EOD, truncated [ 196.611328][ T9421] loop5: p18 start 1 is beyond EOD, truncated [ 196.611339][ T9421] loop5: p19 start 1 is beyond EOD, truncated [ 196.611349][ T9421] loop5: p20 start 1 is beyond EOD, truncated [ 196.611370][ T9421] loop5: p21 start 1 is beyond EOD, truncated [ 196.611379][ T9421] loop5: p22 start 1 is beyond EOD, truncated [ 196.611388][ T9421] loop5: p23 start 1 is beyond EOD, truncated [ 196.832721][ T9421] loop5: p24 start 1 is beyond EOD, truncated 13:22:34 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2b8}) [ 196.872991][ T9421] loop5: p25 start 1 is beyond EOD, truncated [ 197.044917][ T9421] loop5: p26 start 1 is beyond EOD, truncated [ 197.051634][ T9421] loop5: p27 start 1 is beyond EOD, truncated [ 197.064850][ T9421] loop5: p28 start 1 is beyond EOD, truncated [ 197.081260][ T9421] loop5: p29 start 1 is beyond EOD, truncated [ 197.090389][ T9421] loop5: p30 start 1 is beyond EOD, truncated [ 197.097149][ T9421] loop5: p31 start 1 is beyond EOD, truncated [ 197.135569][ T9421] loop5: p32 start 1 is beyond EOD, truncated [ 197.141708][ T9421] loop5: p33 start 1 is beyond EOD, truncated [ 197.168140][ T9421] loop5: p34 start 1 is beyond EOD, truncated [ 197.189620][ T9421] loop5: p35 start 1 is beyond EOD, truncated [ 197.196476][ T9421] loop5: p36 start 1 is beyond EOD, truncated [ 197.217144][ T9421] loop5: p37 start 1 is beyond EOD, truncated [ 197.225223][ T9421] loop5: p38 start 1 is beyond EOD, truncated [ 197.231332][ T9421] loop5: p39 start 1 is beyond EOD, truncated [ 197.241731][ T9421] loop5: p40 start 1 is beyond EOD, truncated [ 197.249851][ T9421] loop5: p41 start 1 is beyond EOD, truncated [ 197.260105][ T9421] loop5: p42 start 1 is beyond EOD, truncated [ 197.268242][ T9421] loop5: p43 start 1 is beyond EOD, truncated [ 197.278492][ T9421] loop5: p44 start 1 is beyond EOD, truncated [ 197.286646][ T9421] loop5: p45 start 1 is beyond EOD, truncated [ 197.294521][ T9421] loop5: p46 start 1 is beyond EOD, truncated [ 197.300703][ T9421] loop5: p47 start 1 is beyond EOD, truncated [ 197.307259][ T9421] loop5: p48 start 1 is beyond EOD, truncated [ 197.313878][ T9421] loop5: p49 start 1 is beyond EOD, truncated [ 197.319976][ T9421] loop5: p50 start 1 is beyond EOD, truncated [ 197.326708][ T9421] loop5: p51 start 1 is beyond EOD, truncated [ 197.333363][ T9421] loop5: p52 start 1 is beyond EOD, truncated [ 197.339452][ T9421] loop5: p53 start 1 is beyond EOD, truncated [ 197.339463][ T9421] loop5: p54 start 1 is beyond EOD, truncated [ 197.339473][ T9421] loop5: p55 start 1 is beyond EOD, truncated [ 197.339482][ T9421] loop5: p56 start 1 is beyond EOD, truncated [ 197.339501][ T9421] loop5: p57 start 1 is beyond EOD, truncated [ 197.339510][ T9421] loop5: p58 start 1 is beyond EOD, truncated [ 197.339518][ T9421] loop5: p59 start 1 is beyond EOD, truncated [ 197.339526][ T9421] loop5: p60 start 1 is beyond EOD, truncated [ 197.339535][ T9421] loop5: p61 start 1 is beyond EOD, truncated [ 197.339543][ T9421] loop5: p62 start 1 is beyond EOD, truncated [ 197.339550][ T9421] loop5: p63 start 1 is beyond EOD, truncated [ 197.339558][ T9421] loop5: p64 start 1 is beyond EOD, truncated [ 197.339566][ T9421] loop5: p65 start 1 is beyond EOD, truncated [ 197.419644][ T9421] loop5: p66 start 1 is beyond EOD, truncated [ 197.425847][ T9421] loop5: p67 start 1 is beyond EOD, truncated [ 197.431926][ T9421] loop5: p68 start 1 is beyond EOD, truncated [ 197.438064][ T9421] loop5: p69 start 1 is beyond EOD, truncated [ 197.444211][ T9421] loop5: p70 start 1 is beyond EOD, truncated [ 197.450289][ T9421] loop5: p71 start 1 is beyond EOD, truncated [ 197.456412][ T9421] loop5: p72 start 1 is beyond EOD, truncated [ 197.462500][ T9421] loop5: p73 start 1 is beyond EOD, truncated [ 197.468672][ T9421] loop5: p74 start 1 is beyond EOD, truncated [ 197.474813][ T9421] loop5: p75 start 1 is beyond EOD, truncated [ 197.480926][ T9421] loop5: p76 start 1 is beyond EOD, truncated [ 197.487647][ T9421] loop5: p77 start 1 is beyond EOD, truncated [ 197.493819][ T9421] loop5: p78 start 1 is beyond EOD, truncated [ 197.499896][ T9421] loop5: p79 start 1 is beyond EOD, truncated [ 197.506046][ T9421] loop5: p80 start 1 is beyond EOD, truncated [ 197.512129][ T9421] loop5: p81 start 1 is beyond EOD, truncated [ 197.518284][ T9421] loop5: p82 start 1 is beyond EOD, truncated [ 197.524456][ T9421] loop5: p83 start 1 is beyond EOD, truncated [ 197.530528][ T9421] loop5: p84 start 1 is beyond EOD, truncated [ 197.536650][ T9421] loop5: p85 start 1 is beyond EOD, truncated [ 197.543643][ T9421] loop5: p86 start 1 is beyond EOD, truncated [ 197.549726][ T9421] loop5: p87 start 1 is beyond EOD, truncated [ 197.555890][ T9421] loop5: p88 start 1 is beyond EOD, truncated [ 197.561979][ T9421] loop5: p89 start 1 is beyond EOD, truncated [ 197.568176][ T9421] loop5: p90 start 1 is beyond EOD, truncated [ 197.574311][ T9421] loop5: p91 start 1 is beyond EOD, truncated [ 197.580374][ T9421] loop5: p92 start 1 is beyond EOD, truncated [ 197.586560][ T9421] loop5: p93 start 1 is beyond EOD, truncated [ 197.592717][ T9421] loop5: p94 start 1 is beyond EOD, truncated [ 197.598797][ T9421] loop5: p95 start 1 is beyond EOD, truncated [ 197.604968][ T9421] loop5: p96 start 1 is beyond EOD, truncated [ 197.611096][ T9421] loop5: p97 start 1 is beyond EOD, truncated [ 197.617219][ T9421] loop5: p98 start 1 is beyond EOD, truncated [ 197.623344][ T9421] loop5: p99 start 1 is beyond EOD, truncated [ 197.629437][ T9421] loop5: p100 start 1 is beyond EOD, truncated [ 197.635687][ T9421] loop5: p101 start 1 is beyond EOD, truncated [ 197.641863][ T9421] loop5: p102 start 1 is beyond EOD, truncated [ 197.648151][ T9421] loop5: p103 start 1 is beyond EOD, truncated [ 197.654352][ T9421] loop5: p104 start 1 is beyond EOD, truncated [ 197.660509][ T9421] loop5: p105 start 1 is beyond EOD, truncated [ 197.666726][ T9421] loop5: p106 start 1 is beyond EOD, truncated [ 197.673723][ T9421] loop5: p107 start 1 is beyond EOD, truncated [ 197.679970][ T9421] loop5: p108 start 1 is beyond EOD, truncated [ 197.687991][ T9421] loop5: p109 start 1 is beyond EOD, truncated [ 197.694283][ T9421] loop5: p110 start 1 is beyond EOD, truncated [ 197.700451][ T9421] loop5: p111 start 1 is beyond EOD, truncated [ 197.706696][ T9421] loop5: p112 start 1 is beyond EOD, truncated [ 197.712919][ T9421] loop5: p113 start 1 is beyond EOD, truncated [ 197.719090][ T9421] loop5: p114 start 1 is beyond EOD, truncated [ 197.725413][ T9421] loop5: p115 start 1 is beyond EOD, truncated [ 197.731591][ T9421] loop5: p116 start 1 is beyond EOD, truncated [ 197.737802][ T9421] loop5: p117 start 1 is beyond EOD, truncated [ 197.744029][ T9421] loop5: p118 start 1 is beyond EOD, truncated [ 197.750188][ T9421] loop5: p119 start 1 is beyond EOD, truncated [ 197.756392][ T9421] loop5: p120 start 1 is beyond EOD, truncated [ 197.762657][ T9421] loop5: p121 start 1 is beyond EOD, truncated [ 197.768822][ T9421] loop5: p122 start 1 is beyond EOD, truncated [ 197.775043][ T9421] loop5: p123 start 1 is beyond EOD, truncated [ 197.781220][ T9421] loop5: p124 start 1 is beyond EOD, truncated [ 197.787448][ T9421] loop5: p125 start 1 is beyond EOD, truncated [ 197.793977][ T9421] loop5: p126 start 1 is beyond EOD, truncated [ 197.800128][ T9421] loop5: p127 start 1 is beyond EOD, truncated [ 197.807155][ T9421] loop5: p128 start 1 is beyond EOD, truncated [ 197.813424][ T9421] loop5: p129 start 1 is beyond EOD, truncated [ 197.819625][ T9421] loop5: p130 start 1 is beyond EOD, truncated [ 197.826053][ T9421] loop5: p131 start 1 is beyond EOD, truncated [ 197.832237][ T9421] loop5: p132 start 1 is beyond EOD, truncated [ 197.838446][ T9421] loop5: p133 start 1 is beyond EOD, truncated [ 197.844674][ T9421] loop5: p134 start 1 is beyond EOD, truncated [ 197.850831][ T9421] loop5: p135 start 1 is beyond EOD, truncated [ 197.857042][ T9421] loop5: p136 start 1 is beyond EOD, truncated [ 197.863278][ T9421] loop5: p137 start 1 is beyond EOD, truncated [ 197.869442][ T9421] loop5: p138 start 1 is beyond EOD, truncated [ 197.876203][ T9421] loop5: p139 start 1 is beyond EOD, truncated [ 197.882394][ T9421] loop5: p140 start 1 is beyond EOD, truncated [ 197.888624][ T9421] loop5: p141 start 1 is beyond EOD, truncated [ 197.894837][ T9421] loop5: p142 start 1 is beyond EOD, truncated [ 197.901003][ T9421] loop5: p143 start 1 is beyond EOD, truncated [ 197.907236][ T9421] loop5: p144 start 1 is beyond EOD, truncated [ 197.913484][ T9421] loop5: p145 start 1 is beyond EOD, truncated [ 197.919666][ T9421] loop5: p146 start 1 is beyond EOD, truncated [ 197.925905][ T9421] loop5: p147 start 1 is beyond EOD, truncated [ 197.932077][ T9421] loop5: p148 start 1 is beyond EOD, truncated [ 197.938889][ T9421] loop5: p149 start 1 is beyond EOD, truncated [ 197.945146][ T9421] loop5: p150 start 1 is beyond EOD, truncated [ 197.951309][ T9421] loop5: p151 start 1 is beyond EOD, truncated [ 197.957637][ T9421] loop5: p152 start 1 is beyond EOD, truncated [ 197.963988][ T9421] loop5: p153 start 1 is beyond EOD, truncated [ 197.970188][ T9421] loop5: p154 start 1 is beyond EOD, truncated [ 197.977428][ T9421] loop5: p155 start 1 is beyond EOD, truncated [ 197.983719][ T9421] loop5: p156 start 1 is beyond EOD, truncated [ 197.989885][ T9421] loop5: p157 start 1 is beyond EOD, truncated [ 197.996106][ T9421] loop5: p158 start 1 is beyond EOD, truncated [ 198.002301][ T9421] loop5: p159 start 1 is beyond EOD, truncated [ 198.008532][ T9421] loop5: p160 start 1 is beyond EOD, truncated [ 198.014791][ T9421] loop5: p161 start 1 is beyond EOD, truncated [ 198.020946][ T9421] loop5: p162 start 1 is beyond EOD, truncated [ 198.027219][ T9421] loop5: p163 start 1 is beyond EOD, truncated [ 198.033457][ T9421] loop5: p164 start 1 is beyond EOD, truncated [ 198.039642][ T9421] loop5: p165 start 1 is beyond EOD, truncated [ 198.045905][ T9421] loop5: p166 start 1 is beyond EOD, truncated [ 198.052082][ T9421] loop5: p167 start 1 is beyond EOD, truncated [ 198.058317][ T9421] loop5: p168 start 1 is beyond EOD, truncated [ 198.065431][ T9421] loop5: p169 start 1 is beyond EOD, truncated [ 198.071617][ T9421] loop5: p170 start 1 is beyond EOD, truncated [ 198.077847][ T9421] loop5: p171 start 1 is beyond EOD, truncated [ 198.084124][ T9421] loop5: p172 start 1 is beyond EOD, truncated [ 198.090286][ T9421] loop5: p173 start 1 is beyond EOD, truncated [ 198.096494][ T9421] loop5: p174 start 1 is beyond EOD, truncated [ 198.102751][ T9421] loop5: p175 start 1 is beyond EOD, truncated [ 198.108931][ T9421] loop5: p176 start 1 is beyond EOD, truncated [ 198.115149][ T9421] loop5: p177 start 1 is beyond EOD, truncated [ 198.121334][ T9421] loop5: p178 start 1 is beyond EOD, truncated [ 198.127694][ T9421] loop5: p179 start 1 is beyond EOD, truncated [ 198.133932][ T9421] loop5: p180 start 1 is beyond EOD, truncated [ 198.140139][ T9421] loop5: p181 start 1 is beyond EOD, truncated [ 198.146364][ T9421] loop5: p182 start 1 is beyond EOD, truncated [ 198.152625][ T9421] loop5: p183 start 1 is beyond EOD, truncated [ 198.158819][ T9421] loop5: p184 start 1 is beyond EOD, truncated [ 198.165035][ T9421] loop5: p185 start 1 is beyond EOD, truncated [ 198.171231][ T9421] loop5: p186 start 1 is beyond EOD, truncated [ 198.177480][ T9421] loop5: p187 start 1 is beyond EOD, truncated [ 198.183727][ T9421] loop5: p188 start 1 is beyond EOD, truncated [ 198.189886][ T9421] loop5: p189 start 1 is beyond EOD, truncated [ 198.196751][ T9421] loop5: p190 start 1 is beyond EOD, truncated [ 198.203020][ T9421] loop5: p191 start 1 is beyond EOD, truncated [ 198.209189][ T9421] loop5: p192 start 1 is beyond EOD, truncated [ 198.215453][ T9421] loop5: p193 start 1 is beyond EOD, truncated [ 198.221628][ T9421] loop5: p194 start 1 is beyond EOD, truncated [ 198.227897][ T9421] loop5: p195 start 1 is beyond EOD, truncated [ 198.234156][ T9421] loop5: p196 start 1 is beyond EOD, truncated [ 198.240408][ T9421] loop5: p197 start 1 is beyond EOD, truncated [ 198.246637][ T9421] loop5: p198 start 1 is beyond EOD, truncated [ 198.252906][ T9421] loop5: p199 start 1 is beyond EOD, truncated [ 198.259067][ T9421] loop5: p200 start 1 is beyond EOD, truncated [ 198.265306][ T9421] loop5: p201 start 1 is beyond EOD, truncated [ 198.271486][ T9421] loop5: p202 start 1 is beyond EOD, truncated [ 198.277733][ T9421] loop5: p203 start 1 is beyond EOD, truncated [ 198.284033][ T9421] loop5: p204 start 1 is beyond EOD, truncated [ 198.290201][ T9421] loop5: p205 start 1 is beyond EOD, truncated [ 198.296413][ T9421] loop5: p206 start 1 is beyond EOD, truncated [ 198.302672][ T9421] loop5: p207 start 1 is beyond EOD, truncated [ 198.308835][ T9421] loop5: p208 start 1 is beyond EOD, truncated [ 198.315076][ T9421] loop5: p209 start 1 is beyond EOD, truncated [ 198.321265][ T9421] loop5: p210 start 1 is beyond EOD, truncated [ 198.328112][ T9421] loop5: p211 start 1 is beyond EOD, truncated [ 198.334367][ T9421] loop5: p212 start 1 is beyond EOD, truncated [ 198.340529][ T9421] loop5: p213 start 1 is beyond EOD, truncated [ 198.346778][ T9421] loop5: p214 start 1 is beyond EOD, truncated [ 198.353010][ T9421] loop5: p215 start 1 is beyond EOD, truncated [ 198.359173][ T9421] loop5: p216 start 1 is beyond EOD, truncated [ 198.365631][ T9421] loop5: p217 start 1 is beyond EOD, truncated [ 198.371810][ T9421] loop5: p218 start 1 is beyond EOD, truncated [ 198.378064][ T9421] loop5: p219 start 1 is beyond EOD, truncated [ 198.384324][ T9421] loop5: p220 start 1 is beyond EOD, truncated [ 198.390486][ T9421] loop5: p221 start 1 is beyond EOD, truncated [ 198.396743][ T9421] loop5: p222 start 1 is beyond EOD, truncated [ 198.402994][ T9421] loop5: p223 start 1 is beyond EOD, truncated [ 198.409157][ T9421] loop5: p224 start 1 is beyond EOD, truncated [ 198.415439][ T9421] loop5: p225 start 1 is beyond EOD, truncated [ 198.421625][ T9421] loop5: p226 start 1 is beyond EOD, truncated [ 198.427868][ T9421] loop5: p227 start 1 is beyond EOD, truncated [ 198.434108][ T9421] loop5: p228 start 1 is beyond EOD, truncated [ 198.440271][ T9421] loop5: p229 start 1 is beyond EOD, truncated [ 198.446577][ T9421] loop5: p230 start 1 is beyond EOD, truncated [ 198.453690][ T9421] loop5: p231 start 1 is beyond EOD, truncated [ 198.459946][ T9421] loop5: p232 start 1 is beyond EOD, truncated [ 198.466218][ T9421] loop5: p233 start 1 is beyond EOD, truncated [ 198.472418][ T9421] loop5: p234 start 1 is beyond EOD, truncated [ 198.478704][ T9421] loop5: p235 start 1 is beyond EOD, truncated [ 198.484947][ T9421] loop5: p236 start 1 is beyond EOD, truncated [ 198.491124][ T9421] loop5: p237 start 1 is beyond EOD, truncated [ 198.497337][ T9421] loop5: p238 start 1 is beyond EOD, truncated [ 198.503568][ T9421] loop5: p239 start 1 is beyond EOD, truncated [ 198.509737][ T9421] loop5: p240 start 1 is beyond EOD, truncated [ 198.515977][ T9421] loop5: p241 start 1 is beyond EOD, truncated [ 198.522146][ T9421] loop5: p242 start 1 is beyond EOD, truncated [ 198.528474][ T9421] loop5: p243 start 1 is beyond EOD, truncated [ 198.534736][ T9421] loop5: p244 start 1 is beyond EOD, truncated [ 198.540913][ T9421] loop5: p245 start 1 is beyond EOD, truncated [ 198.547127][ T9421] loop5: p246 start 1 is beyond EOD, truncated [ 198.553361][ T9421] loop5: p247 start 1 is beyond EOD, truncated [ 198.559547][ T9421] loop5: p248 start 1 is beyond EOD, truncated [ 198.565801][ T9421] loop5: p249 start 1 is beyond EOD, truncated [ 198.572011][ T9421] loop5: p250 start 1 is beyond EOD, truncated [ 198.578229][ T9421] loop5: p251 start 1 is beyond EOD, truncated [ 198.585319][ T9421] loop5: p252 start 1 is beyond EOD, truncated [ 198.591503][ T9421] loop5: p253 start 1 is beyond EOD, truncated [ 198.597742][ T9421] loop5: p254 start 1 is beyond EOD, truncated [ 198.603966][ T9421] loop5: p255 start 1 is beyond EOD, truncated 13:22:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7da12a9bf3b3923b121d9c9e2cc98a64d", 0x11) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1c1000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f00000000c0)}, 0x10) 13:22:36 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x41aa, 0x4) write$9p(r0, &(0x7f0000000300)="324c9ba07457459885d9a314888bb4bc38baea39c94221e1dc978ab87000964a9c689fbf3d8a30f02115b00f27544e69bca800ff1ebfa15eab396e65ecb3806cff2613d478d5c1b79e1b2c238b7ca5aeb73444ab2af89a56ae5f709b95971233bf7ddcdf26624297a4806c45688097e50e56164738b6c16f37fa87667d6e8e32a07be5f0a9b393e0bff71e386e8e0d37ddee4b73ed8e9cd62d1abacb03c38d6ec6b9d68977ba9f30e35a8b08ce128fa7d5be256df098658f4d4a3f4a0429b573003fc44c9fa91adc1740efbb3f090ab4eae0a560851e84d155254a15dca316faf271572cd5577e073c06a8c4c9616d33bf440d92c567b06edabf36fa1c53686ce6e615a0711fecff908f594577b1d36c7ea70ead70603b3246ef570a71fade158cc8a017c2dcdad3149b52ed5ead986684760ff0cca74fc928f19c5deb2ea01c4c056e3979ba8e77d943a5", 0xfffffffffffffe0e) 13:22:36 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7}) 13:22:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)=@ipx, 0xfffffffffffffee4, 0x0, 0xffffffffffffff30}}], 0x1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) 13:22:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x18) tkill(r2, 0x30) 13:22:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='syz', r1) r3 = dup2(0xffffffffffffffff, r0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000100)="fa8a238e533ef9d88b89dd2b4871c97fde33687ac1e6007434d075de505dfd1295e800cb414225f3c472cbf5098e907765bc169b77dd4c") add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) 13:22:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000100012090000002da0a801000100767469000400020025fcd9329c3756d0af930e73877f371133ab709d87ea276c12d3c3cd12e80c4c1c1368a08bf040046797547a3386eb1c144c79"], 0x30}}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x60000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)) 13:22:36 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7}) 13:22:37 executing program 2: io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7}) [ 199.080952][ T9499] loop5: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 13:22:37 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7}) [ 199.081001][ T9499] loop5: partition table partially beyond EOD, 13:22:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) 13:22:37 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa018098d54e36b9dfc9de81004c0008004521907800000000e0000001000000000401cd0000000000000000e0a7312a580f2eb5958285a9f969fbc0a7f2fa2870cbc21f653682b09a9b6c725607fe6d9cc65686854e7bbda003d18bed4ef5b622cc6c452b37c36440258151"], 0x0) 13:22:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r4, 0x80044325, &(0x7f00000000c0)) dup3(r2, r1, 0x0) tkill(r3, 0x15) [ 199.316270][ T9499] truncated [ 199.324576][ T9499] loop5: p1 start 1 is beyond EOD, truncated [ 199.330949][ T9499] loop5: p2 size 2 extends beyond EOD, truncated 13:22:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) [ 199.370736][ T9499] loop5: p3 start 201 is beyond EOD, truncated [ 199.391769][ T9499] loop5: p4 start 301 is beyond EOD, truncated [ 199.401716][ T9499] loop5: p5 start 1 is beyond EOD, truncated [ 199.463257][ T9499] loop5: p6 start 1 is beyond EOD, truncated [ 199.489899][ T9499] loop5: p7 start 1 is beyond EOD, truncated 13:22:37 executing program 3 (fault-call:0 fault-nth:0): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:37 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xffffffff, 0x6, '9P2000'}, 0x13) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x20ffa000, 0x7ff0bdbe}) 13:22:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = dup3(r0, r0, 0x80000) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff3c, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 199.530887][ T9499] loop5: p8 start 1 is beyond EOD, truncated [ 199.548999][ T9545] input: syz1 as /devices/virtual/input/input5 [ 199.583081][ T9499] loop5: p9 start 1 is beyond EOD, truncated [ 199.670484][ T9499] loop5: p10 start 1 is beyond EOD, truncated [ 199.698479][ T9558] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 199.698841][ T9563] FAULT_INJECTION: forcing a failure. [ 199.698841][ T9563] name failslab, interval 1, probability 0, space 0, times 1 [ 199.724231][ T9499] loop5: p11 start 1 is beyond EOD, truncated [ 199.777083][ T9499] loop5: p12 start 1 is beyond EOD, truncated [ 199.822478][ T9499] loop5: p13 start 1 is beyond EOD, truncated [ 199.841903][ T9499] loop5: p14 start 1 is beyond EOD, truncated [ 199.843515][ T9563] CPU: 0 PID: 9563 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 199.857022][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.866719][ T9499] loop5: p15 start 1 is beyond EOD, truncated [ 199.867189][ T9563] Call Trace: [ 199.876759][ T9563] dump_stack+0x172/0x1f0 [ 199.880242][ T9499] loop5: p16 start 1 is beyond EOD, truncated [ 199.881120][ T9563] should_fail.cold+0xa/0x15 [ 199.891829][ T9563] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 199.892883][ T9499] loop5: p17 start 1 is beyond EOD, truncated [ 199.897649][ T9563] ? ___might_sleep+0x163/0x280 [ 199.897670][ T9563] __should_failslab+0x121/0x190 [ 199.897689][ T9563] should_failslab+0x9/0x14 [ 199.912608][ T9499] loop5: p18 start 1 is beyond EOD, truncated [ 199.914091][ T9563] kmem_cache_alloc_trace+0x2ce/0x750 [ 199.914112][ T9563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.914137][ T9563] ? ns_capable_common+0x93/0x100 [ 199.924230][ T9499] loop5: p19 start 1 is beyond EOD, truncated [ 199.924716][ T9563] io_uring_setup+0x257/0x1a40 [ 199.934637][ T9499] loop5: p20 start 1 is beyond EOD, truncated [ 199.936365][ T9563] ? io_uring_release+0x50/0x50 [ 199.936387][ T9563] ? fput_many+0x12c/0x1a0 [ 199.947044][ T9499] loop5: p21 start 1 is beyond EOD, truncated [ 199.947510][ T9563] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 199.956761][ T9499] loop5: p22 start 1 is beyond EOD, truncated [ 199.958327][ T9563] ? do_syscall_64+0x26/0x680 [ 199.958345][ T9563] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.958359][ T9563] ? do_syscall_64+0x26/0x680 [ 199.958381][ T9563] ? lockdep_hardirqs_on+0x418/0x5d0 [ 199.968862][ T9499] loop5: p23 start 1 is beyond EOD, truncated [ 199.973723][ T9563] __x64_sys_io_uring_setup+0x54/0x80 [ 199.973743][ T9563] do_syscall_64+0xfd/0x680 [ 199.973763][ T9563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 199.973783][ T9563] RIP: 0033:0x459279 [ 199.988462][ T9499] loop5: p24 start 1 is beyond EOD, truncated [ 199.990278][ T9563] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 199.990287][ T9563] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 199.990308][ T9563] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 200.002607][ T9499] loop5: p25 start 1 is beyond EOD, truncated [ 200.006346][ T9563] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 200.006355][ T9563] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 200.006361][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 200.006370][ T9563] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 200.081325][ T9499] loop5: p26 start 1 is beyond EOD, truncated [ 200.099782][ T9499] loop5: p27 start 1 is beyond EOD, truncated [ 200.126113][ T9499] loop5: p28 start 1 is beyond EOD, truncated [ 200.132364][ T9499] loop5: p29 start 1 is beyond EOD, truncated [ 200.138843][ T9499] loop5: p30 start 1 is beyond EOD, truncated [ 200.145186][ T9499] loop5: p31 start 1 is beyond EOD, truncated [ 200.151437][ T9499] loop5: p32 start 1 is beyond EOD, truncated [ 200.157824][ T9499] loop5: p33 start 1 is beyond EOD, truncated [ 200.165067][ T9499] loop5: p34 start 1 is beyond EOD, truncated [ 200.171354][ T9499] loop5: p35 start 1 is beyond EOD, truncated [ 200.177711][ T9499] loop5: p36 start 1 is beyond EOD, truncated [ 200.183949][ T9499] loop5: p37 start 1 is beyond EOD, truncated [ 200.190071][ T9499] loop5: p38 start 1 is beyond EOD, truncated [ 200.196264][ T9499] loop5: p39 start 1 is beyond EOD, truncated [ 200.202354][ T9499] loop5: p40 start 1 is beyond EOD, truncated [ 200.208489][ T9499] loop5: p41 start 1 is beyond EOD, truncated [ 200.214819][ T9499] loop5: p42 start 1 is beyond EOD, truncated [ 200.220916][ T9499] loop5: p43 start 1 is beyond EOD, truncated [ 200.227064][ T9499] loop5: p44 start 1 is beyond EOD, truncated [ 200.233250][ T9499] loop5: p45 start 1 is beyond EOD, truncated [ 200.239353][ T9499] loop5: p46 start 1 is beyond EOD, truncated [ 200.245502][ T9499] loop5: p47 start 1 is beyond EOD, truncated [ 200.251594][ T9499] loop5: p48 start 1 is beyond EOD, truncated [ 200.257906][ T9499] loop5: p49 start 1 is beyond EOD, truncated [ 200.264046][ T9499] loop5: p50 start 1 is beyond EOD, truncated [ 200.270130][ T9499] loop5: p51 start 1 is beyond EOD, truncated [ 200.276275][ T9499] loop5: p52 start 1 is beyond EOD, truncated [ 200.282395][ T9499] loop5: p53 start 1 is beyond EOD, truncated [ 200.289734][ T9499] loop5: p54 start 1 is beyond EOD, truncated [ 200.295914][ T9499] loop5: p55 start 1 is beyond EOD, truncated [ 200.301997][ T9499] loop5: p56 start 1 is beyond EOD, truncated [ 200.308146][ T9499] loop5: p57 start 1 is beyond EOD, truncated [ 200.314302][ T9499] loop5: p58 start 1 is beyond EOD, truncated [ 200.320383][ T9499] loop5: p59 start 1 is beyond EOD, truncated [ 200.326496][ T9499] loop5: p60 start 1 is beyond EOD, truncated [ 200.332634][ T9499] loop5: p61 start 1 is beyond EOD, truncated [ 200.338728][ T9499] loop5: p62 start 1 is beyond EOD, truncated [ 200.344860][ T9499] loop5: p63 start 1 is beyond EOD, truncated [ 200.350966][ T9499] loop5: p64 start 1 is beyond EOD, truncated [ 200.357165][ T9499] loop5: p65 start 1 is beyond EOD, truncated [ 200.363334][ T9499] loop5: p66 start 1 is beyond EOD, truncated [ 200.369404][ T9499] loop5: p67 start 1 is beyond EOD, truncated [ 200.375649][ T9499] loop5: p68 start 1 is beyond EOD, truncated [ 200.381741][ T9499] loop5: p69 start 1 is beyond EOD, truncated [ 200.387868][ T9499] loop5: p70 start 1 is beyond EOD, truncated [ 200.394033][ T9499] loop5: p71 start 1 is beyond EOD, truncated [ 200.400138][ T9499] loop5: p72 start 1 is beyond EOD, truncated [ 200.406264][ T9499] loop5: p73 start 1 is beyond EOD, truncated [ 200.412353][ T9499] loop5: p74 start 1 is beyond EOD, truncated [ 200.418522][ T9499] loop5: p75 start 1 is beyond EOD, truncated [ 200.424714][ T9499] loop5: p76 start 1 is beyond EOD, truncated [ 200.430802][ T9499] loop5: p77 start 1 is beyond EOD, truncated [ 200.437125][ T9499] loop5: p78 start 1 is beyond EOD, truncated [ 200.444060][ T9499] loop5: p79 start 1 is beyond EOD, truncated [ 200.450173][ T9499] loop5: p80 start 1 is beyond EOD, truncated [ 200.456322][ T9499] loop5: p81 start 1 is beyond EOD, truncated [ 200.462424][ T9499] loop5: p82 start 1 is beyond EOD, truncated [ 200.468562][ T9499] loop5: p83 start 1 is beyond EOD, truncated [ 200.474729][ T9499] loop5: p84 start 1 is beyond EOD, truncated [ 200.480820][ T9499] loop5: p85 start 1 is beyond EOD, truncated [ 200.487008][ T9499] loop5: p86 start 1 is beyond EOD, truncated [ 200.493179][ T9499] loop5: p87 start 1 is beyond EOD, truncated [ 200.499256][ T9499] loop5: p88 start 1 is beyond EOD, truncated [ 200.505401][ T9499] loop5: p89 start 1 is beyond EOD, truncated [ 200.511518][ T9499] loop5: p90 start 1 is beyond EOD, truncated [ 200.517692][ T9499] loop5: p91 start 1 is beyond EOD, truncated [ 200.523835][ T9499] loop5: p92 start 1 is beyond EOD, truncated [ 200.529908][ T9499] loop5: p93 start 1 is beyond EOD, truncated [ 200.536039][ T9499] loop5: p94 start 1 is beyond EOD, truncated [ 200.542149][ T9499] loop5: p95 start 1 is beyond EOD, truncated [ 200.548268][ T9499] loop5: p96 start 1 is beyond EOD, truncated [ 200.554414][ T9499] loop5: p97 start 1 is beyond EOD, truncated [ 200.560516][ T9499] loop5: p98 start 1 is beyond EOD, truncated [ 200.566671][ T9499] loop5: p99 start 1 is beyond EOD, truncated [ 200.572843][ T9499] loop5: p100 start 1 is beyond EOD, truncated [ 200.579013][ T9499] loop5: p101 start 1 is beyond EOD, truncated [ 200.585247][ T9499] loop5: p102 start 1 is beyond EOD, truncated [ 200.591443][ T9499] loop5: p103 start 1 is beyond EOD, truncated [ 200.597674][ T9499] loop5: p104 start 1 is beyond EOD, truncated [ 200.604095][ T9499] loop5: p105 start 1 is beyond EOD, truncated [ 200.610262][ T9499] loop5: p106 start 1 is beyond EOD, truncated [ 200.616515][ T9499] loop5: p107 start 1 is beyond EOD, truncated [ 200.622756][ T9499] loop5: p108 start 1 is beyond EOD, truncated [ 200.628926][ T9499] loop5: p109 start 1 is beyond EOD, truncated [ 200.635212][ T9499] loop5: p110 start 1 is beyond EOD, truncated [ 200.641398][ T9499] loop5: p111 start 1 is beyond EOD, truncated [ 200.647624][ T9499] loop5: p112 start 1 is beyond EOD, truncated [ 200.653888][ T9499] loop5: p113 start 1 is beyond EOD, truncated [ 200.660076][ T9499] loop5: p114 start 1 is beyond EOD, truncated [ 200.666322][ T9499] loop5: p115 start 1 is beyond EOD, truncated [ 200.672511][ T9499] loop5: p116 start 1 is beyond EOD, truncated [ 200.678967][ T9499] loop5: p117 start 1 is beyond EOD, truncated [ 200.685308][ T9499] loop5: p118 start 1 is beyond EOD, truncated [ 200.691480][ T9499] loop5: p119 start 1 is beyond EOD, truncated [ 200.697720][ T9499] loop5: p120 start 1 is beyond EOD, truncated [ 200.703972][ T9499] loop5: p121 start 1 is beyond EOD, truncated [ 200.710152][ T9499] loop5: p122 start 1 is beyond EOD, truncated [ 200.716424][ T9499] loop5: p123 start 1 is beyond EOD, truncated [ 200.722656][ T9499] loop5: p124 start 1 is beyond EOD, truncated [ 200.728833][ T9499] loop5: p125 start 1 is beyond EOD, truncated [ 200.735111][ T9499] loop5: p126 start 1 is beyond EOD, truncated [ 200.741279][ T9499] loop5: p127 start 1 is beyond EOD, truncated [ 200.747511][ T9499] loop5: p128 start 1 is beyond EOD, truncated [ 200.753745][ T9499] loop5: p129 start 1 is beyond EOD, truncated [ 200.759906][ T9499] loop5: p130 start 1 is beyond EOD, truncated [ 200.766547][ T9499] loop5: p131 start 1 is beyond EOD, truncated [ 200.772793][ T9499] loop5: p132 start 1 is beyond EOD, truncated [ 200.778957][ T9499] loop5: p133 start 1 is beyond EOD, truncated [ 200.785177][ T9499] loop5: p134 start 1 is beyond EOD, truncated [ 200.791367][ T9499] loop5: p135 start 1 is beyond EOD, truncated [ 200.798194][ T9499] loop5: p136 start 1 is beyond EOD, truncated [ 200.804409][ T9499] loop5: p137 start 1 is beyond EOD, truncated [ 200.810587][ T9499] loop5: p138 start 1 is beyond EOD, truncated [ 200.816798][ T9499] loop5: p139 start 1 is beyond EOD, truncated [ 200.823013][ T9499] loop5: p140 start 1 is beyond EOD, truncated [ 200.829169][ T9499] loop5: p141 start 1 is beyond EOD, truncated [ 200.835419][ T9499] loop5: p142 start 1 is beyond EOD, truncated [ 200.841616][ T9499] loop5: p143 start 1 is beyond EOD, truncated [ 200.847836][ T9499] loop5: p144 start 1 is beyond EOD, truncated [ 200.854098][ T9499] loop5: p145 start 1 is beyond EOD, truncated [ 200.860263][ T9499] loop5: p146 start 1 is beyond EOD, truncated [ 200.866490][ T9499] loop5: p147 start 1 is beyond EOD, truncated [ 200.872749][ T9499] loop5: p148 start 1 is beyond EOD, truncated [ 200.878917][ T9499] loop5: p149 start 1 is beyond EOD, truncated [ 200.885147][ T9499] loop5: p150 start 1 is beyond EOD, truncated [ 200.891332][ T9499] loop5: p151 start 1 is beyond EOD, truncated [ 200.897585][ T9499] loop5: p152 start 1 is beyond EOD, truncated [ 200.903839][ T9499] loop5: p153 start 1 is beyond EOD, truncated [ 200.910024][ T9499] loop5: p154 start 1 is beyond EOD, truncated [ 200.916281][ T9499] loop5: p155 start 1 is beyond EOD, truncated [ 200.922476][ T9499] loop5: p156 start 1 is beyond EOD, truncated [ 200.929965][ T9499] loop5: p157 start 1 is beyond EOD, truncated [ 200.936212][ T9499] loop5: p158 start 1 is beyond EOD, truncated [ 200.942381][ T9499] loop5: p159 start 1 is beyond EOD, truncated [ 200.948655][ T9499] loop5: p160 start 1 is beyond EOD, truncated [ 200.954917][ T9499] loop5: p161 start 1 is beyond EOD, truncated [ 200.961127][ T9499] loop5: p162 start 1 is beyond EOD, truncated [ 200.967353][ T9499] loop5: p163 start 1 is beyond EOD, truncated [ 200.973610][ T9499] loop5: p164 start 1 is beyond EOD, truncated [ 200.979777][ T9499] loop5: p165 start 1 is beyond EOD, truncated [ 200.986053][ T9499] loop5: p166 start 1 is beyond EOD, truncated [ 200.992268][ T9499] loop5: p167 start 1 is beyond EOD, truncated [ 200.998505][ T9499] loop5: p168 start 1 is beyond EOD, truncated [ 201.004731][ T9499] loop5: p169 start 1 is beyond EOD, truncated [ 201.010903][ T9499] loop5: p170 start 1 is beyond EOD, truncated [ 201.017162][ T9499] loop5: p171 start 1 is beyond EOD, truncated [ 201.023440][ T9499] loop5: p172 start 1 is beyond EOD, truncated [ 201.029622][ T9499] loop5: p173 start 1 is beyond EOD, truncated [ 201.035865][ T9499] loop5: p174 start 1 is beyond EOD, truncated [ 201.042058][ T9499] loop5: p175 start 1 is beyond EOD, truncated [ 201.048292][ T9499] loop5: p176 start 1 is beyond EOD, truncated [ 201.054519][ T9499] loop5: p177 start 1 is beyond EOD, truncated [ 201.060685][ T9499] loop5: p178 start 1 is beyond EOD, truncated [ 201.066906][ T9499] loop5: p179 start 1 is beyond EOD, truncated [ 201.073184][ T9499] loop5: p180 start 1 is beyond EOD, truncated [ 201.079356][ T9499] loop5: p181 start 1 is beyond EOD, truncated [ 201.085585][ T9499] loop5: p182 start 1 is beyond EOD, truncated [ 201.091757][ T9499] loop5: p183 start 1 is beyond EOD, truncated [ 201.097986][ T9499] loop5: p184 start 1 is beyond EOD, truncated [ 201.104216][ T9499] loop5: p185 start 1 is beyond EOD, truncated [ 201.110381][ T9499] loop5: p186 start 1 is beyond EOD, truncated [ 201.116623][ T9499] loop5: p187 start 1 is beyond EOD, truncated [ 201.123112][ T9499] loop5: p188 start 1 is beyond EOD, truncated [ 201.129305][ T9499] loop5: p189 start 1 is beyond EOD, truncated [ 201.135572][ T9499] loop5: p190 start 1 is beyond EOD, truncated [ 201.141737][ T9499] loop5: p191 start 1 is beyond EOD, truncated [ 201.147960][ T9499] loop5: p192 start 1 is beyond EOD, truncated [ 201.154205][ T9499] loop5: p193 start 1 is beyond EOD, truncated [ 201.160390][ T9499] loop5: p194 start 1 is beyond EOD, truncated [ 201.166597][ T9499] loop5: p195 start 1 is beyond EOD, truncated [ 201.172828][ T9499] loop5: p196 start 1 is beyond EOD, truncated [ 201.178988][ T9499] loop5: p197 start 1 is beyond EOD, truncated [ 201.185203][ T9499] loop5: p198 start 1 is beyond EOD, truncated [ 201.191373][ T9499] loop5: p199 start 1 is beyond EOD, truncated [ 201.197623][ T9499] loop5: p200 start 1 is beyond EOD, truncated [ 201.203850][ T9499] loop5: p201 start 1 is beyond EOD, truncated [ 201.210016][ T9499] loop5: p202 start 1 is beyond EOD, truncated [ 201.216253][ T9499] loop5: p203 start 1 is beyond EOD, truncated [ 201.222437][ T9499] loop5: p204 start 1 is beyond EOD, truncated [ 201.228657][ T9499] loop5: p205 start 1 is beyond EOD, truncated [ 201.234892][ T9499] loop5: p206 start 1 is beyond EOD, truncated [ 201.241043][ T9499] loop5: p207 start 1 is beyond EOD, truncated [ 201.247278][ T9499] loop5: p208 start 1 is beyond EOD, truncated [ 201.253495][ T9499] loop5: p209 start 1 is beyond EOD, truncated [ 201.259651][ T9499] loop5: p210 start 1 is beyond EOD, truncated [ 201.265883][ T9499] loop5: p211 start 1 is beyond EOD, truncated [ 201.272063][ T9499] loop5: p212 start 1 is beyond EOD, truncated [ 201.278306][ T9499] loop5: p213 start 1 is beyond EOD, truncated [ 201.284521][ T9499] loop5: p214 start 1 is beyond EOD, truncated [ 201.290687][ T9499] loop5: p215 start 1 is beyond EOD, truncated [ 201.296907][ T9499] loop5: p216 start 1 is beyond EOD, truncated [ 201.303183][ T9499] loop5: p217 start 1 is beyond EOD, truncated [ 201.309369][ T9499] loop5: p218 start 1 is beyond EOD, truncated [ 201.315622][ T9499] loop5: p219 start 1 is beyond EOD, truncated [ 201.321806][ T9499] loop5: p220 start 1 is beyond EOD, truncated [ 201.328037][ T9499] loop5: p221 start 1 is beyond EOD, truncated [ 201.334278][ T9499] loop5: p222 start 1 is beyond EOD, truncated [ 201.340433][ T9499] loop5: p223 start 1 is beyond EOD, truncated [ 201.346627][ T9499] loop5: p224 start 1 is beyond EOD, truncated [ 201.352844][ T9499] loop5: p225 start 1 is beyond EOD, truncated [ 201.359005][ T9499] loop5: p226 start 1 is beyond EOD, truncated [ 201.365239][ T9499] loop5: p227 start 1 is beyond EOD, truncated [ 201.371426][ T9499] loop5: p228 start 1 is beyond EOD, truncated [ 201.377686][ T9499] loop5: p229 start 1 is beyond EOD, truncated [ 201.383922][ T9499] loop5: p230 start 1 is beyond EOD, truncated [ 201.390134][ T9499] loop5: p231 start 1 is beyond EOD, truncated [ 201.396380][ T9499] loop5: p232 start 1 is beyond EOD, truncated [ 201.402600][ T9499] loop5: p233 start 1 is beyond EOD, truncated [ 201.408769][ T9499] loop5: p234 start 1 is beyond EOD, truncated [ 201.415051][ T9499] loop5: p235 start 1 is beyond EOD, truncated [ 201.421231][ T9499] loop5: p236 start 1 is beyond EOD, truncated [ 201.427455][ T9499] loop5: p237 start 1 is beyond EOD, truncated [ 201.433707][ T9499] loop5: p238 start 1 is beyond EOD, truncated [ 201.439890][ T9499] loop5: p239 start 1 is beyond EOD, truncated [ 201.446131][ T9499] loop5: p240 start 1 is beyond EOD, truncated [ 201.452322][ T9499] loop5: p241 start 1 is beyond EOD, truncated [ 201.458544][ T9499] loop5: p242 start 1 is beyond EOD, truncated [ 201.464757][ T9499] loop5: p243 start 1 is beyond EOD, truncated [ 201.470906][ T9499] loop5: p244 start 1 is beyond EOD, truncated [ 201.477150][ T9499] loop5: p245 start 1 is beyond EOD, truncated [ 201.483861][ T9499] loop5: p246 start 1 is beyond EOD, truncated [ 201.490116][ T9499] loop5: p247 start 1 is beyond EOD, truncated [ 201.496338][ T9499] loop5: p248 start 1 is beyond EOD, truncated [ 201.502558][ T9499] loop5: p249 start 1 is beyond EOD, truncated [ 201.508736][ T9499] loop5: p250 start 1 is beyond EOD, truncated [ 201.514962][ T9499] loop5: p251 start 1 is beyond EOD, truncated [ 201.521138][ T9499] loop5: p252 start 1 is beyond EOD, truncated [ 201.527373][ T9499] loop5: p253 start 1 is beyond EOD, truncated [ 201.533606][ T9499] loop5: p254 start 1 is beyond EOD, truncated [ 201.539783][ T9499] loop5: p255 start 1 is beyond EOD, truncated 13:22:39 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x204000, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0xffffffffffffffda, 0x4, {{0x2, 0x7fffffff, 0x0, r1}}}, 0x28) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffffffffffff5, 0x3}, 0x10) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000140)={0x6, {0x6, 0x8000, 0xc0, 0x8}}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'hsr0\x00', 0x4}) fadvise64(r3, 0x0, 0x0, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0xc1, 0x9, 0xee, 0x400, 0x80000001, 0x9, 0x0, 0x7, 0x9, 0x6, 0xfffffffffffffffe, 0x200, 0xffff, 0x2, 0x0, 0x7d], 0x100000}) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000340)={0xf, @pix_mp={0x5796, 0x1, 0x0, 0x7, 0x0, [{0x9, 0x9}, {0x7fff, 0x6}, {0x5, 0x9}, {0x2, 0x7}, {0xff, 0xff}, {0x0, 0x7}, {0x8}, {0x80000000, 0x4}], 0xfff, 0x6, 0x3, 0x2, 0x5}}) 13:22:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x6) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ipx\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x56000, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x24000045) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000080)={0x1}) 13:22:39 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) poll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) poll(&(0x7f0000000280)=[{r0}, {r1}], 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0}, {r0}], 0x2, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x2000008b, 0x4) 13:22:39 executing program 3 (fault-call:0 fault-nth:1): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) [ 201.614856][ T9572] FAULT_INJECTION: forcing a failure. [ 201.614856][ T9572] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 201.628553][ T9572] CPU: 1 PID: 9572 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 201.628565][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.628571][ T9572] Call Trace: [ 201.628593][ T9572] dump_stack+0x172/0x1f0 [ 201.628630][ T9572] should_fail.cold+0xa/0x15 [ 201.647729][ T9572] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 201.647756][ T9572] should_fail_alloc_page+0x50/0x60 [ 201.647777][ T9572] __alloc_pages_nodemask+0x1a1/0x8d0 [ 201.655385][ T9572] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 201.655405][ T9572] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 201.655417][ T9572] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 201.655432][ T9572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 201.655453][ T9572] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 201.655475][ T9572] cache_grow_begin+0x9d/0x650 [ 201.655491][ T9572] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 201.655509][ T9572] kmem_cache_alloc_trace+0x67a/0x750 [ 201.655536][ T9572] io_uring_setup+0x257/0x1a40 [ 201.655567][ T9572] ? io_uring_release+0x50/0x50 [ 201.655588][ T9572] ? fput_many+0x12c/0x1a0 [ 201.693467][ T9572] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 201.693484][ T9572] ? do_syscall_64+0x26/0x680 [ 201.693500][ T9572] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 201.693513][ T9572] ? do_syscall_64+0x26/0x680 [ 201.693529][ T9572] ? lockdep_hardirqs_on+0x418/0x5d0 [ 201.693549][ T9572] __x64_sys_io_uring_setup+0x54/0x80 [ 201.693566][ T9572] do_syscall_64+0xfd/0x680 [ 201.693587][ T9572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 201.705635][ T9572] RIP: 0033:0x459279 [ 201.705652][ T9572] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.705659][ T9572] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 13:22:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x8, 0x0, 0x6, {}, 0x100000000, 0x10001}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x10c, "d2bc703e0d8e260a6e9f975af5072b146602a3c20559a5fa439e92baa560e38f45f9e2c41175ae3ef15a302e805905bc0ca303e0812328c3a3700712fb4ca37de93fc34520d648cb8c8e25b26e9f9b96f62898c384ee6f2dcc6971a754deb8b3f6b047638dec7faf8eba47a8baacd9d8ca84e195756e7b3fdc6fb3ec62ce77b5b88c7cf17198645571c517751cd2ea1510d4bb4e84b4f17025a6f17b0d5bc5d6147f7870433302221691decbacc2b78e7ac6567fb2fb45f9999d55f7fe9f"}, &(0x7f0000000100)=0xc6) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x10000}, 0x8) close(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x93, @tick=0x6, 0x0, {0xa1, 0x10000}, 0x3f, 0x0, 0x1}) close(r1) [ 201.705673][ T9572] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 201.705681][ T9572] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 201.705689][ T9572] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 201.705697][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 201.705705][ T9572] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 201.856371][ T9582] QAT: Invalid ioctl 13:22:39 executing program 3 (fault-call:0 fault-nth:2): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) [ 201.890815][ T9575] QAT: Invalid ioctl 13:22:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x6) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ipx\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x56000, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x24000045) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000080)={0x1}) [ 202.037692][ T9594] FAULT_INJECTION: forcing a failure. [ 202.037692][ T9594] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.062864][ T9594] CPU: 0 PID: 9594 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 202.071853][ T9594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.081947][ T9594] Call Trace: [ 202.085256][ T9594] dump_stack+0x172/0x1f0 [ 202.089613][ T9594] should_fail.cold+0xa/0x15 [ 202.094226][ T9594] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 202.100046][ T9594] ? ___might_sleep+0x163/0x280 [ 202.104923][ T9594] should_fail_alloc_page+0x50/0x60 [ 202.110130][ T9594] __alloc_pages_nodemask+0x1a1/0x8d0 [ 202.115518][ T9594] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 202.121266][ T9594] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 202.127522][ T9594] alloc_pages_current+0x107/0x210 [ 202.132641][ T9594] ? lockdep_init_map+0x1be/0x6d0 [ 202.137682][ T9594] __get_free_pages+0xc/0x40 [ 202.142290][ T9594] io_mem_alloc+0x2b/0x30 [ 202.146635][ T9594] io_uring_setup+0x7a0/0x1a40 [ 202.151413][ T9594] ? io_uring_release+0x50/0x50 [ 202.156275][ T9594] ? fput_many+0x12c/0x1a0 [ 202.160718][ T9594] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 202.166207][ T9594] ? do_syscall_64+0x26/0x680 [ 202.170906][ T9594] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.176992][ T9594] ? do_syscall_64+0x26/0x680 [ 202.181694][ T9594] ? lockdep_hardirqs_on+0x418/0x5d0 [ 202.187005][ T9594] __x64_sys_io_uring_setup+0x54/0x80 [ 202.192400][ T9594] do_syscall_64+0xfd/0x680 [ 202.196931][ T9594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.202841][ T9594] RIP: 0033:0x459279 [ 202.206755][ T9594] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 202.226372][ T9594] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 202.234799][ T9594] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 202.242789][ T9594] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 202.250785][ T9594] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 202.258779][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 202.266764][ T9594] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 202.379259][ T9602] QAT: Invalid ioctl 13:22:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pread64(r0, &(0x7f0000000380)=""/218, 0xda, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x2710}}) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000000)={{0x2}, 0x8, 0x4, 0x1}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x800, 0x20100) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x5) 13:22:40 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000080)="c6d2ace943000bd088dbbf62a7a7dd91ec865e2323b8e1df3a444bf81af17e9e2d9126b77f439f9e199e4ce74336a15fab89d52e8bc1c447bd03c7eb4f7bcabd474770dd1cc04ce0c2d7d75bd2f2b74f01e9aed98920d31e0654190dc30062f56e903a6d5ddef9825a6321545a57b63b1236a5525130a34085d23527ebafe0880d8e408bef9528cde18cbac0ed8f377d426e729278694bc3d62c10693f249575176adcd8099ff8795f0938d6b581", {0x37a2, 0x5, 0x73714777, 0x7, 0x80, 0xfa, 0xf, 0xfffffffffffffff8}}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 13:22:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x8, 0x0, 0x6, {}, 0x100000000, 0x10001}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc7, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x10c, "d2bc703e0d8e260a6e9f975af5072b146602a3c20559a5fa439e92baa560e38f45f9e2c41175ae3ef15a302e805905bc0ca303e0812328c3a3700712fb4ca37de93fc34520d648cb8c8e25b26e9f9b96f62898c384ee6f2dcc6971a754deb8b3f6b047638dec7faf8eba47a8baacd9d8ca84e195756e7b3fdc6fb3ec62ce77b5b88c7cf17198645571c517751cd2ea1510d4bb4e84b4f17025a6f17b0d5bc5d6147f7870433302221691decbacc2b78e7ac6567fb2fb45f9999d55f7fe9f"}, &(0x7f0000000100)=0xc6) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x10000}, 0x8) close(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x93, @tick=0x6, 0x0, {0xa1, 0x10000}, 0x3f, 0x0, 0x1}) close(r1) 13:22:40 executing program 3 (fault-call:0 fault-nth:3): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000040), 0x10009) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xded9) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc020660b, &(0x7f00000001c0)) 13:22:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) [ 202.578982][ T9611] FAULT_INJECTION: forcing a failure. [ 202.578982][ T9611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.673027][ T9611] CPU: 0 PID: 9611 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 202.682025][ T9611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.692096][ T9611] Call Trace: [ 202.695407][ T9611] dump_stack+0x172/0x1f0 [ 202.699759][ T9611] should_fail.cold+0xa/0x15 [ 202.704377][ T9611] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 202.710204][ T9611] ? ___might_sleep+0x163/0x280 [ 202.715162][ T9611] should_fail_alloc_page+0x50/0x60 [ 202.720365][ T9611] __alloc_pages_nodemask+0x1a1/0x8d0 [ 202.725747][ T9611] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 202.731484][ T9611] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 202.737740][ T9611] alloc_pages_current+0x107/0x210 [ 202.742865][ T9611] ? lockdep_init_map+0x1be/0x6d0 [ 202.747910][ T9611] __get_free_pages+0xc/0x40 [ 202.752513][ T9611] io_mem_alloc+0x2b/0x30 [ 202.756856][ T9611] io_uring_setup+0x903/0x1a40 [ 202.761638][ T9611] ? io_uring_release+0x50/0x50 [ 202.766496][ T9611] ? fput_many+0x12c/0x1a0 [ 202.770938][ T9611] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 202.776411][ T9611] ? do_syscall_64+0x26/0x680 [ 202.781101][ T9611] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.787206][ T9611] ? do_syscall_64+0x26/0x680 [ 202.791903][ T9611] ? lockdep_hardirqs_on+0x418/0x5d0 [ 202.798703][ T9611] __x64_sys_io_uring_setup+0x54/0x80 [ 202.804090][ T9611] do_syscall_64+0xfd/0x680 [ 202.808621][ T9611] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.814528][ T9611] RIP: 0033:0x459279 [ 202.818444][ T9611] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 202.838251][ T9611] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 202.846777][ T9611] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 202.854754][ T9611] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 202.862748][ T9611] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:22:40 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 13:22:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x30) 13:22:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) recvfrom(r0, &(0x7f0000000080)=""/84, 0x54, 0x3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x0, 0x4, 0x3, 0x3}}, 0x80) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000040), 0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x1, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e21, 0x4, 'fo\x00', 0x20, 0x1, 0xe}, 0x2c) 13:22:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0xa, 0x1) connect$inet6(r1, &(0x7f0000000100), 0x1c) tee(r1, r1, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x0, @mcast2, 0x9}, {0xa, 0x4e24, 0x3ff, @rand_addr="dd1a2d82c5e50fe2bd0b4cb815d1c72e", 0xff}, 0x8a, [0x1, 0x0, 0x3, 0x9, 0x80000000, 0x40e, 0x20, 0x4ab0]}, 0x5c) r2 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r3, 0x210, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000500)=0x7fffffff, 0x4) [ 202.862757][ T9611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 202.862765][ T9611] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 13:22:40 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0xfffffffffffffffd, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x80440) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000240)={0x2f, 0x94, "bf3e948af3cfa751082a6af166e93d3923df32db9d419740efb218f9fca754b3bfa068d3da86938e11ee3bfd58e0376ba752d8c79446a430d120eb878ff6bd596bf2bb916adaf8c788a49f06de565fa4a795d568242269bd64688f332fd608a11e539b91ff62231da6353de19551d4129bd8d88db72f5fb4c84a8c346c95f164ca2f704d349a39f39e595f7a915a3537283b3770"}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}, 0x101}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 203.048397][ T9634] mmap: syz-executor.2 (9634) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 203.077605][ T9648] IPVS: set_ctl: invalid protocol: 1 172.20.20.31:20001 13:22:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40084504, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000fa5b3cf969fdadac60716e47e8cfa96b9a57603f503210dc09c033ef62806b58c4b557bb1eb4ac38bfe9842c1d8cb3b86e382f0a40f83c9823ac940113816ad818c386e0bba0cedb2e9b7240f316dd6586d7cfb8f468d6d432b2d101609d58bc61259003b67826f3181ab43b877ac87b4da94658ebafe28ac070134ffbd4393c3494784c4a7f5f76dc93c9c1773007d14a1aa455216099751158ee49ab9386753cdfa80ab3dd0ccc3625f2baa8cb8ec0e18b15db2ef994dd"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r4, r3, 0xd, 0x2}, 0x10) r5 = fcntl$dupfd(r2, 0x406, r3) openat$cgroup_ro(r5, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000004c0)=""/4096) 13:22:41 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0xfffffffffffffffd, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x80440) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000240)={0x2f, 0x94, "bf3e948af3cfa751082a6af166e93d3923df32db9d419740efb218f9fca754b3bfa068d3da86938e11ee3bfd58e0376ba752d8c79446a430d120eb878ff6bd596bf2bb916adaf8c788a49f06de565fa4a795d568242269bd64688f332fd608a11e539b91ff62231da6353de19551d4129bd8d88db72f5fb4c84a8c346c95f164ca2f704d349a39f39e595f7a915a3537283b3770"}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}, 0x101}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 13:22:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:22:41 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0xfffffffffffffffd, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x12) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x80440) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000240)={0x2f, 0x94, "bf3e948af3cfa751082a6af166e93d3923df32db9d419740efb218f9fca754b3bfa068d3da86938e11ee3bfd58e0376ba752d8c79446a430d120eb878ff6bd596bf2bb916adaf8c788a49f06de565fa4a795d568242269bd64688f332fd608a11e539b91ff62231da6353de19551d4129bd8d88db72f5fb4c84a8c346c95f164ca2f704d349a39f39e595f7a915a3537283b3770"}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x17}, 0x101}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 13:22:41 executing program 3 (fault-call:0 fault-nth:4): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) [ 203.819953][ T9673] FAULT_INJECTION: forcing a failure. [ 203.819953][ T9673] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.835321][ T9676] IPVS: set_ctl: invalid protocol: 1 172.20.20.31:20001 [ 203.880013][ T9673] CPU: 0 PID: 9673 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 203.889016][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.899081][ T9673] Call Trace: [ 203.902390][ T9673] dump_stack+0x172/0x1f0 [ 203.906743][ T9673] should_fail.cold+0xa/0x15 [ 203.911377][ T9673] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 203.917207][ T9673] ? ___might_sleep+0x163/0x280 [ 203.922079][ T9673] should_fail_alloc_page+0x50/0x60 13:22:42 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 13:22:42 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f00000012c0)='./file0\x00', 0x800) write(r0, &(0x7f0000000180)="15", 0x1) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000001200)={[{0x5, 0xc0000000, 0x8001, 0x101, 0xff, 0x81, 0x4, 0x0, 0x7fffffff, 0xfffffffffffffffe, 0x0, 0x8, 0x1}, {0x81, 0x4ac9, 0x5, 0x100000001, 0x4, 0x3, 0x0, 0x7, 0x7, 0x8, 0x20, 0x0, 0x9581}, {0xf561, 0x4, 0xffffffffffff8001, 0x8, 0x0, 0x0, 0x0, 0x3, 0x4, 0x2, 0x5, 0xe3, 0x10000}], 0xc3}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x1015, 0x4, 0xffffffff, "61541b2cb9ff83c409532e95a204dd29", "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"}, 0x1015, 0x3) r2 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0x0) sendfile(r2, r1, 0x0, 0x7fffffff) [ 203.927284][ T9673] __alloc_pages_nodemask+0x1a1/0x8d0 [ 203.932665][ T9673] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 203.938407][ T9673] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 203.944665][ T9673] alloc_pages_current+0x107/0x210 [ 203.949781][ T9673] ? lockdep_init_map+0x1be/0x6d0 [ 203.955100][ T9673] __get_free_pages+0xc/0x40 [ 203.959711][ T9673] io_mem_alloc+0x2b/0x30 [ 203.964052][ T9673] io_uring_setup+0x903/0x1a40 [ 203.968830][ T9673] ? io_uring_release+0x50/0x50 [ 203.973694][ T9673] ? fput_many+0x12c/0x1a0 13:22:42 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) [ 203.978138][ T9673] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 203.983621][ T9673] ? do_syscall_64+0x26/0x680 [ 203.988312][ T9673] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.994385][ T9673] ? do_syscall_64+0x26/0x680 [ 203.999071][ T9673] ? lockdep_hardirqs_on+0x418/0x5d0 [ 204.004374][ T9673] __x64_sys_io_uring_setup+0x54/0x80 [ 204.009786][ T9673] do_syscall_64+0xfd/0x680 [ 204.014305][ T9673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 204.020229][ T9673] RIP: 0033:0x459279 13:22:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) tkill(r2, 0x18) tkill(r2, 0x30) [ 204.024128][ T9673] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 204.043746][ T9673] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 204.052171][ T9673] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 204.060150][ T9673] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 204.068127][ T9673] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:22:42 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x3, 0xffffffffffffffff}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) [ 204.076106][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 204.084099][ T9673] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 204.134320][ T26] audit: type=1804 audit(1559654562.166:32): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir858262444/syzkaller.5Jxpfv/29/file0" dev="sda1" ino=16362 res=1 [ 204.246767][ T26] audit: type=1804 audit(1559654562.166:33): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir858262444/syzkaller.5Jxpfv/29/file0" dev="sda1" ino=16362 res=1 [ 204.439097][ T26] audit: type=1804 audit(1559654562.216:34): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir858262444/syzkaller.5Jxpfv/29/file0" dev="sda1" ino=16362 res=1 [ 204.583365][ T26] audit: type=1804 audit(1559654562.216:35): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir858262444/syzkaller.5Jxpfv/29/file0" dev="sda1" ino=16362 res=1 13:22:42 executing program 3 (fault-call:0 fault-nth:5): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) tkill(r2, 0x18) tkill(r2, 0x30) [ 205.306745][ T9699] FAULT_INJECTION: forcing a failure. [ 205.306745][ T9699] name failslab, interval 1, probability 0, space 0, times 0 [ 205.372665][ T9699] CPU: 1 PID: 9699 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 205.381658][ T9699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.391732][ T9699] Call Trace: [ 205.395051][ T9699] dump_stack+0x172/0x1f0 [ 205.399418][ T9699] should_fail.cold+0xa/0x15 [ 205.404036][ T9699] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 205.409864][ T9699] ? ___might_sleep+0x163/0x280 [ 205.414737][ T9699] __should_failslab+0x121/0x190 [ 205.419689][ T9699] should_failslab+0x9/0x14 [ 205.424211][ T9699] __kmalloc+0x2d9/0x740 [ 205.428471][ T9699] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 205.434289][ T9699] ? try_to_wake_up+0xc8/0x13f0 [ 205.439174][ T9699] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 205.444996][ T9699] ? lockdep_hardirqs_on+0x418/0x5d0 [ 205.450289][ T9699] ? alloc_workqueue+0x166/0xf00 [ 205.455244][ T9699] alloc_workqueue+0x166/0xf00 [ 205.460027][ T9699] ? try_to_wake_up+0xc8/0x13f0 [ 205.464890][ T9699] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 205.470626][ T9699] ? migrate_swap_stop+0x920/0x920 [ 205.475749][ T9699] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 205.481563][ T9699] ? __kthread_bind_mask+0xae/0xc0 [ 205.486690][ T9699] io_uring_setup+0xbca/0x1a40 [ 205.491464][ T9699] ? io_uring_release+0x50/0x50 [ 205.496320][ T9699] ? fput_many+0x12c/0x1a0 [ 205.500764][ T9699] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 205.506241][ T9699] ? do_syscall_64+0x26/0x680 [ 205.510936][ T9699] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.517020][ T9699] ? do_syscall_64+0x26/0x680 [ 205.521717][ T9699] ? lockdep_hardirqs_on+0x418/0x5d0 [ 205.527026][ T9699] __x64_sys_io_uring_setup+0x54/0x80 [ 205.532416][ T9699] do_syscall_64+0xfd/0x680 [ 205.536936][ T9699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 205.542837][ T9699] RIP: 0033:0x459279 [ 205.546746][ T9699] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:22:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x22f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001b80)) r2 = request_key(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0) request_key(&(0x7f0000000200)='iPw`\xb1x\x00\xb7&\x00', &(0x7f00000002c0)={'syz'}, 0x0, r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000380)) shmctl$IPC_SET(0x0, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000100)={0xc5, &(0x7f0000000c00)=""/197}) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='lp@', 0x3) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000000)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(&(0x7f00000008c0)='dns_resolver\x00', 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519c1f1a697c672a531f322c7e12358a0ef2a1a2e3ce4bd44ee84fa4eac627ba1", 0xb7, 0xfffffffffffffff9) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000640)={0xa44, {{0xa, 0x4e21, 0xffffffff00000000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, {{0xa, 0x4e22, 0x6, @mcast2, 0x6}}}, 0x108) io_setup(0xa7e7, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) [ 205.566360][ T9699] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 205.574784][ T9699] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 205.582771][ T9699] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 205.590758][ T9699] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 205.598742][ T9699] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 205.606722][ T9699] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 13:22:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000000)='./file0\x00', 0x6, 0xfff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f000082d000/0x2000)=nil) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@allocspi={0x104, 0x16, 0x10, 0x70bd29, 0x25dfdbff, {{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e20, 0x0, 0x4e22, 0x0, 0x0, 0xa0, 0x20, 0x21, r2, r3}, {@in6=@mcast2, 0x4d4, 0x2b}, @in6=@rand_addr="0cec4c7eb0552aeb4be82896b5316b43", {0x2, 0xeae, 0x9, 0xe6d3, 0x63558e28, 0x200, 0x81, 0x9}, {0x4, 0x3, 0x4, 0x5ccc}, {0x2, 0x8ba, 0x7fffffff}, 0x70bd29, 0x3503, 0xa, 0x4, 0x8, 0x10}, 0x0, 0xfc}, [@lastused={0xc, 0xf, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) madvise(&(0x7f00000a2000/0x600000)=nil, 0x600000, 0x8) 13:22:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x521400, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x44, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) 13:22:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x22f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001b80)) r2 = request_key(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0) request_key(&(0x7f0000000200)='iPw`\xb1x\x00\xb7&\x00', &(0x7f00000002c0)={'syz'}, 0x0, r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000380)) shmctl$IPC_SET(0x0, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000100)={0xc5, &(0x7f0000000c00)=""/197}) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='lp@', 0x3) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000000)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(&(0x7f00000008c0)='dns_resolver\x00', 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519c1f1a697c672a531f322c7e12358a0ef2a1a2e3ce4bd44ee84fa4eac627ba1", 0xb7, 0xfffffffffffffff9) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000640)={0xa44, {{0xa, 0x4e21, 0xffffffff00000000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, {{0xa, 0x4e22, 0x6, @mcast2, 0x6}}}, 0x108) io_setup(0xa7e7, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) 13:22:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x110001) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x22f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001b80)) r2 = request_key(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0) request_key(&(0x7f0000000200)='iPw`\xb1x\x00\xb7&\x00', &(0x7f00000002c0)={'syz'}, 0x0, r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000380)) shmctl$IPC_SET(0x0, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000000100)={0xc5, &(0x7f0000000c00)=""/197}) sendmsg(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)}, 0x40000) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='lp@', 0x3) request_key(&(0x7f00000005c0)='pkcs7_test\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000000)='Fvmnet1/\x00', 0xffffffffffffffff) add_key(&(0x7f00000008c0)='dns_resolver\x00', 0x0, &(0x7f0000000ac0)="93306bd5e5cd077834a342a7221f114272fc2e5ce2e334da1e8d91165abd90a11ef0a24c92a824aef7e56a8dc4aa9a58812d948b554dcf9975614855d2513886658ca05135e6db381b6f90de095fc4405b52cbc1b150999bb530a347c8c6d049c614ba2ee8a14a3585764fb1f23502ae4dbed7b83f72c703b777a937a5bd090b47ff5b50c704b02f4a7bd7dbe16533866bb30fe260d49519c1f1a697c672a531f322c7e12358a0ef2a1a2e3ce4bd44ee84fa4eac627ba1", 0xb7, 0xfffffffffffffff9) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000640)={0xa44, {{0xa, 0x4e21, 0xffffffff00000000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, {{0xa, 0x4e22, 0x6, @mcast2, 0x6}}}, 0x108) io_setup(0xa7e7, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) 13:22:43 executing program 3 (fault-call:0 fault-nth:6): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) [ 206.123025][ T9731] FAULT_INJECTION: forcing a failure. [ 206.123025][ T9731] name failslab, interval 1, probability 0, space 0, times 0 [ 206.277298][ T9731] CPU: 0 PID: 9731 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 206.286306][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.296393][ T9731] Call Trace: [ 206.299714][ T9731] dump_stack+0x172/0x1f0 [ 206.304083][ T9731] should_fail.cold+0xa/0x15 [ 206.308711][ T9731] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 206.314550][ T9731] ? ___might_sleep+0x163/0x280 [ 206.319436][ T9731] __should_failslab+0x121/0x190 [ 206.324392][ T9731] should_failslab+0x9/0x14 [ 206.328911][ T9731] kmem_cache_alloc_trace+0x2ce/0x750 [ 206.334305][ T9731] ? rcu_read_lock_sched_held+0x110/0x130 [ 206.340041][ T9731] ? __kmalloc+0x5d0/0x740 [ 206.344480][ T9731] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 206.350314][ T9731] alloc_workqueue_attrs+0x82/0x120 [ 206.355535][ T9731] alloc_workqueue+0x190/0xf00 [ 206.360326][ T9731] ? try_to_wake_up+0xc8/0x13f0 [ 206.365200][ T9731] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 206.370944][ T9731] ? migrate_swap_stop+0x920/0x920 [ 206.376068][ T9731] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 206.381891][ T9731] ? __kthread_bind_mask+0xae/0xc0 [ 206.387027][ T9731] io_uring_setup+0xbca/0x1a40 [ 206.391807][ T9731] ? io_uring_release+0x50/0x50 [ 206.396669][ T9731] ? fput_many+0x12c/0x1a0 [ 206.401107][ T9731] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 206.406584][ T9731] ? do_syscall_64+0x26/0x680 [ 206.411277][ T9731] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 206.417364][ T9731] ? do_syscall_64+0x26/0x680 [ 206.422064][ T9731] ? lockdep_hardirqs_on+0x418/0x5d0 [ 206.427385][ T9731] __x64_sys_io_uring_setup+0x54/0x80 [ 206.432786][ T9731] do_syscall_64+0xfd/0x680 [ 206.437316][ T9731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 206.443227][ T9731] RIP: 0033:0x459279 [ 206.447139][ T9731] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.466764][ T9731] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 206.475190][ T9731] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 206.483187][ T9731] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 206.491180][ T9731] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 206.499166][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 206.507148][ T9731] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 13:22:45 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x33f, 0x9, 0x400, 0x6, 0x4, @broadcast}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/59, 0x2}) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 13:22:45 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x480480) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) r1 = socket$inet6(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000018007fafb72d1cb2a4a280930206000000a843096c26274d0400160015001500040000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb6cde448daa7227c43ab8620000bf0cec6bab91d4", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x80000001, 0x8, 0x4, 0x7ff}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r2, 0x1}, &(0x7f00000002c0)=0x8) 13:22:45 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000256000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x40, 0x7}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r1, 0x20}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001240)='/proc/capi/capi20ncci\x00', 0x400400, 0x0) ioctl$VT_RELDISP(r2, 0x5605) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000001280)={'ipvs\x00'}, &(0x7f00000012c0)=0x1e) 13:22:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) tkill(r2, 0x18) tkill(r2, 0x30) 13:22:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="2e00000023008163e45ae08700000000060f0000000000bc4cc91b4dd65b2f0580cb7023f52a556d1c958c00ff00", 0x2c4}], 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfb, 0x301000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x2, 0x0, "5800973afb7b9fb7a3c6b25347290e39e88a5a111f55e87c39cc42d7bc2e8143ce8830c65ae229f4570307157b50c8fd3cf7cfd1caf256e5e448f9017809ff01fe18270adabdfe44574bf2c25c591a81b9c6e3ff6fdd213ef2a14ea23d60c4cf1b0b1854b7703c761a67a795f62705be5ce186895e040bc89e35e0a146e32c3493942622257da878132737728a837a3636803c52dd5b6c8542ad859dca3993a9dbf7ef5442fda4d4271ac7ca6e7dae6bc03cc4d430f9a2988909216d7c2da9eef246683c804da6961b3242203cd53673b8d0d20a968ab2e039f00f48286884bc1691006734cb9f59cf4dc0df6c9fb9dd41ca319bd54cdbc1d0254d144732e760", 0x34, 0x100, 0x7, 0x2, 0x66e, 0x200, 0x7}, r2}}, 0x120) 13:22:45 executing program 3 (fault-call:0 fault-nth:7): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) [ 207.140717][ T9742] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 207.154783][ T9746] FAULT_INJECTION: forcing a failure. [ 207.154783][ T9746] name failslab, interval 1, probability 0, space 0, times 0 [ 207.172775][ T9742] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.5'. [ 207.206826][ T9746] CPU: 1 PID: 9746 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 207.215820][ T9746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.225891][ T9746] Call Trace: [ 207.229195][ T9746] dump_stack+0x172/0x1f0 [ 207.233547][ T9746] should_fail.cold+0xa/0x15 [ 207.238159][ T9746] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 207.243986][ T9746] ? ___might_sleep+0x163/0x280 [ 207.248850][ T9746] __should_failslab+0x121/0x190 13:22:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffaf, &(0x7f0000000300)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4100, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x54) [ 207.253799][ T9746] should_failslab+0x9/0x14 [ 207.258320][ T9746] __kmalloc_track_caller+0x2d5/0x740 [ 207.263712][ T9746] ? pointer+0x750/0x750 [ 207.267968][ T9746] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 207.273617][ T9746] ? kasprintf+0xbb/0xf0 [ 207.277882][ T9746] kvasprintf+0xc8/0x170 [ 207.282143][ T9746] ? bust_spinlocks+0xe0/0xe0 [ 207.286839][ T9746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 207.293086][ T9746] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 207.298821][ T9746] ? find_next_bit+0x107/0x130 13:22:45 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x22}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x52939bd7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb0dc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd2d}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40040}, 0x10) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', 'em0em0\x00'}, 0x0, 0x0) [ 207.303604][ T9746] kasprintf+0xbb/0xf0 [ 207.307695][ T9746] ? kvasprintf_const+0x190/0x190 [ 207.312748][ T9746] ? kasan_check_read+0x11/0x20 [ 207.317618][ T9746] alloc_workqueue+0x471/0xf00 [ 207.322405][ T9746] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 207.328149][ T9746] ? migrate_swap_stop+0x920/0x920 [ 207.333282][ T9746] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 207.339113][ T9746] ? __kthread_bind_mask+0xae/0xc0 [ 207.344252][ T9746] io_uring_setup+0xbca/0x1a40 [ 207.349038][ T9746] ? io_uring_release+0x50/0x50 [ 207.353901][ T9746] ? fput_many+0x12c/0x1a0 [ 207.358337][ T9746] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 207.363803][ T9746] ? do_syscall_64+0x26/0x680 [ 207.363819][ T9746] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.363832][ T9746] ? do_syscall_64+0x26/0x680 [ 207.363847][ T9746] ? lockdep_hardirqs_on+0x418/0x5d0 [ 207.363868][ T9746] __x64_sys_io_uring_setup+0x54/0x80 [ 207.363883][ T9746] do_syscall_64+0xfd/0x680 [ 207.363903][ T9746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 207.363921][ T9746] RIP: 0033:0x459279 13:22:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="2e00000023008163e45ae08700000000060f0000000000bc4cc91b4dd65b2f0580cb7023f52a556d1c958c00ff00", 0x2c4}], 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfb, 0x301000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x2, 0x0, "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", 0x34, 0x100, 0x7, 0x2, 0x66e, 0x200, 0x7}, r2}}, 0x120) [ 207.404218][ T9746] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 207.423835][ T9746] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 207.432270][ T9746] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 207.440690][ T9746] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 207.448668][ T9746] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 207.456639][ T9746] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 207.456648][ T9746] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 207.473372][ T9742] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 207.494241][ T9742] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.5'. 13:22:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x115, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)=""/210, &(0x7f0000000140)=0xd2) 13:22:45 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0xfffffee8) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x1013, r0, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) write$P9_RCREATE(r0, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x0, 0x1}, 0x20}}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0x9) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x9, 0x6f, &(0x7f0000000080)="c0dee2c5bebc9ce9b32120b9aa66041e175861c1e9e702090bf5ecb2444ea9cfabb15a8ad10d961f8f0fa49f912c6949f860269846e765446622011347b76da75ed1cf82c962f544abd36564b4acd30b3bdf32ee3e5efac84b19cc8105a300c9282c2c7a944a9b47d350f789e703fe"}) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x9, 0x80) ioctl$int_in(r0, 0x800c5012, &(0x7f00000004c0)) 13:22:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$inet6(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="861cfa0ea905d52a98305095c2978077da6a9b94bfe805a318a9d5e6ec300946d52a328054d4d36a0c4ab8c58e88", 0x2e}], 0x1, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x2f, 0x1a, [], [@ra={0x5, 0x2, 0xffffffffffffc1a0}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffffffffffb}, @generic={0x7fff, 0x61, "383adde58d19d94205fe9984103575bcec2b1f179abc841a4e325344616de277f5b09368b2f79a763dbb17c5e37e350b17e33550d985da6cd761f09fa09546a3ffb59fa9b4e57f23cb14469ec5bbea7ab928293ecad2f40303f5bfa6fe5bee8a45"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @jumbo, @generic={0xbb, 0x45, "6a67a7d6c8ffca4d2bf10934e9d3fad6555af6ba18c8cac2c394bbf260e9ab5560db0a2563dffc3c13c9234fe26d93a5d39edf8f7a319ddbd1ec5c2d12b8b85968ceeb15f9"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5ff}}], 0x130}, 0x8080) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x5, 0xffffffff, 0x7}}, 0x30) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x410040, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0xd00, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008810) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$void(r1, 0xc0045c78) recvfrom$rxrpc(r1, &(0x7f0000000080)=""/146, 0x92, 0x0, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x7fffffff, @dev={0xfe, 0x80, [], 0x23}, 0x5}}, 0x24) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 13:22:45 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0xd9b, 0x4, 0x4}) 13:22:45 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$inet6(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="861cfa0ea905d52a98305095c2978077da6a9b94bfe805a318a9d5e6ec300946d52a328054d4d36a0c4ab8c58e88", 0x2e}], 0x1, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x2f, 0x1a, [], [@ra={0x5, 0x2, 0xffffffffffffc1a0}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffffffffffb}, @generic={0x7fff, 0x61, "383adde58d19d94205fe9984103575bcec2b1f179abc841a4e325344616de277f5b09368b2f79a763dbb17c5e37e350b17e33550d985da6cd761f09fa09546a3ffb59fa9b4e57f23cb14469ec5bbea7ab928293ecad2f40303f5bfa6fe5bee8a45"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @jumbo, @generic={0xbb, 0x45, "6a67a7d6c8ffca4d2bf10934e9d3fad6555af6ba18c8cac2c394bbf260e9ab5560db0a2563dffc3c13c9234fe26d93a5d39edf8f7a319ddbd1ec5c2d12b8b85968ceeb15f9"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5ff}}], 0x130}, 0x8080) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x5, 0xffffffff, 0x7}}, 0x30) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x410040, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0xd00, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008810) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:22:45 executing program 3 (fault-call:0 fault-nth:8): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x115, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)=""/210, &(0x7f0000000140)=0xd2) 13:22:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$inet6(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="861cfa0ea905d52a98305095c2978077da6a9b94bfe805a318a9d5e6ec300946d52a328054d4d36a0c4ab8c58e88", 0x2e}], 0x1, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x2f, 0x1a, [], [@ra={0x5, 0x2, 0xffffffffffffc1a0}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffffffffffb}, @generic={0x7fff, 0x61, "383adde58d19d94205fe9984103575bcec2b1f179abc841a4e325344616de277f5b09368b2f79a763dbb17c5e37e350b17e33550d985da6cd761f09fa09546a3ffb59fa9b4e57f23cb14469ec5bbea7ab928293ecad2f40303f5bfa6fe5bee8a45"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @jumbo, @generic={0xbb, 0x45, "6a67a7d6c8ffca4d2bf10934e9d3fad6555af6ba18c8cac2c394bbf260e9ab5560db0a2563dffc3c13c9234fe26d93a5d39edf8f7a319ddbd1ec5c2d12b8b85968ceeb15f9"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5ff}}], 0x130}, 0x8080) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x5, 0xffffffff, 0x7}}, 0x30) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x410040, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0xd00, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008810) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0xd9b, 0x4, 0x4}) [ 208.098078][ T9808] FAULT_INJECTION: forcing a failure. [ 208.098078][ T9808] name failslab, interval 1, probability 0, space 0, times 0 13:22:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$inet6(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="861cfa0ea905d52a98305095c2978077da6a9b94bfe805a318a9d5e6ec300946d52a328054d4d36a0c4ab8c58e88", 0x2e}], 0x1, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x2f, 0x1a, [], [@ra={0x5, 0x2, 0xffffffffffffc1a0}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffffffffffb}, @generic={0x7fff, 0x61, "383adde58d19d94205fe9984103575bcec2b1f179abc841a4e325344616de277f5b09368b2f79a763dbb17c5e37e350b17e33550d985da6cd761f09fa09546a3ffb59fa9b4e57f23cb14469ec5bbea7ab928293ecad2f40303f5bfa6fe5bee8a45"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @jumbo, @generic={0xbb, 0x45, "6a67a7d6c8ffca4d2bf10934e9d3fad6555af6ba18c8cac2c394bbf260e9ab5560db0a2563dffc3c13c9234fe26d93a5d39edf8f7a319ddbd1ec5c2d12b8b85968ceeb15f9"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5ff}}], 0x130}, 0x8080) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x5, 0xffffffff, 0x7}}, 0x30) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x410040, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0xd00, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008810) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:46 executing program 0: r0 = socket$inet(0x10, 0x3, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x201, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000140)={0x1bf735d6, 0x4}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) [ 208.236660][ T9808] CPU: 1 PID: 9808 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 208.245660][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.255722][ T9808] Call Trace: [ 208.259032][ T9808] dump_stack+0x172/0x1f0 [ 208.263382][ T9808] should_fail.cold+0xa/0x15 [ 208.267985][ T9808] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 208.274154][ T9808] ? ___might_sleep+0x163/0x280 [ 208.279028][ T9808] __should_failslab+0x121/0x190 [ 208.283984][ T9808] should_failslab+0x9/0x14 [ 208.288496][ T9808] __kmalloc+0x2d9/0x740 [ 208.292752][ T9808] ? apply_wqattrs_prepare+0xae/0x970 [ 208.298144][ T9808] apply_wqattrs_prepare+0xae/0x970 [ 208.303460][ T9808] apply_workqueue_attrs_locked+0xcb/0x140 [ 208.309285][ T9808] apply_workqueue_attrs+0x31/0x50 [ 208.314408][ T9808] alloc_workqueue+0x5e2/0xf00 [ 208.319187][ T9808] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 208.324921][ T9808] ? migrate_swap_stop+0x920/0x920 [ 208.330043][ T9808] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 208.335860][ T9808] ? __kthread_bind_mask+0xae/0xc0 [ 208.340988][ T9808] io_uring_setup+0xbca/0x1a40 [ 208.345769][ T9808] ? io_uring_release+0x50/0x50 [ 208.350629][ T9808] ? fput_many+0x12c/0x1a0 [ 208.355073][ T9808] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 208.360558][ T9808] ? do_syscall_64+0x26/0x680 [ 208.365245][ T9808] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.371328][ T9808] ? do_syscall_64+0x26/0x680 [ 208.376024][ T9808] ? lockdep_hardirqs_on+0x418/0x5d0 [ 208.381342][ T9808] __x64_sys_io_uring_setup+0x54/0x80 [ 208.386752][ T9808] do_syscall_64+0xfd/0x680 [ 208.391363][ T9808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 208.397272][ T9808] RIP: 0033:0x459279 [ 208.401180][ T9808] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 208.420800][ T9808] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 208.429241][ T9808] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 208.437227][ T9808] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 208.445217][ T9808] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 208.453199][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 208.461184][ T9808] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 208.516911][ T9821] Unknown ioctl 19276 13:22:54 executing program 2: syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x4, &(0x7f0000000040)={0xfffffffffe000005}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x49d}) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) 13:22:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5fd, 0x800) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13:22:54 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$inet6(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="861cfa0ea905d52a98305095c2978077da6a9b94bfe805a318a9d5e6ec300946d52a328054d4d36a0c4ab8c58e88", 0x2e}], 0x1, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x2f, 0x1a, [], [@ra={0x5, 0x2, 0xffffffffffffc1a0}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffffffffffb}, @generic={0x7fff, 0x61, "383adde58d19d94205fe9984103575bcec2b1f179abc841a4e325344616de277f5b09368b2f79a763dbb17c5e37e350b17e33550d985da6cd761f09fa09546a3ffb59fa9b4e57f23cb14469ec5bbea7ab928293ecad2f40303f5bfa6fe5bee8a45"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @jumbo, @generic={0xbb, 0x45, "6a67a7d6c8ffca4d2bf10934e9d3fad6555af6ba18c8cac2c394bbf260e9ab5560db0a2563dffc3c13c9234fe26d93a5d39edf8f7a319ddbd1ec5c2d12b8b85968ceeb15f9"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5ff}}], 0x130}, 0x8080) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x5, 0xffffffff, 0x7}}, 0x30) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x410040, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:22:54 executing program 0: sysinfo(&(0x7f00000002c0)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = syz_open_dev$audion(0x0, 0x0, 0x100) r1 = socket$inet(0x10, 0x2, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000140)=""/23, 0x32b1}) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000200)={0x401, "286ebe0b5791f0e8c6242b6bac0249b17156616e72db417831d01255882f7171", 0x1, 0x1}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\x00\xfc\x00', @ifru_flags}) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040)) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000240)={0x5, 0x2}) 13:22:54 executing program 3 (fault-call:0 fault-nth:9): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) [ 216.799974][ T9838] FAULT_INJECTION: forcing a failure. [ 216.799974][ T9838] name failslab, interval 1, probability 0, space 0, times 0 [ 216.815416][ T9838] CPU: 0 PID: 9838 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 216.824766][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.834835][ T9838] Call Trace: [ 216.838149][ T9838] dump_stack+0x172/0x1f0 [ 216.842505][ T9838] should_fail.cold+0xa/0x15 [ 216.847124][ T9838] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 216.852955][ T9838] ? ___might_sleep+0x163/0x280 [ 216.857830][ T9838] __should_failslab+0x121/0x190 [ 216.862782][ T9838] should_failslab+0x9/0x14 [ 216.867306][ T9838] kmem_cache_alloc_trace+0x2ce/0x750 [ 216.872695][ T9838] ? rcu_read_lock_sched_held+0x110/0x130 [ 216.878423][ T9838] ? __kmalloc+0x5d0/0x740 [ 216.882891][ T9838] alloc_workqueue_attrs+0x82/0x120 [ 216.888205][ T9838] apply_wqattrs_prepare+0xbb/0x970 [ 216.893430][ T9838] apply_workqueue_attrs_locked+0xcb/0x140 [ 216.899249][ T9838] apply_workqueue_attrs+0x31/0x50 [ 216.904936][ T9838] alloc_workqueue+0x5e2/0xf00 [ 216.909723][ T9838] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 216.915468][ T9838] ? migrate_swap_stop+0x920/0x920 [ 216.920607][ T9838] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 216.926431][ T9838] ? __kthread_bind_mask+0xae/0xc0 [ 216.931562][ T9838] io_uring_setup+0xbca/0x1a40 [ 216.936376][ T9838] ? io_uring_release+0x50/0x50 [ 216.941233][ T9838] ? fput_many+0x12c/0x1a0 [ 216.945668][ T9838] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 216.951131][ T9838] ? do_syscall_64+0x26/0x680 [ 216.955817][ T9838] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 216.961887][ T9838] ? do_syscall_64+0x26/0x680 [ 216.966572][ T9838] ? lockdep_hardirqs_on+0x418/0x5d0 [ 216.971871][ T9838] __x64_sys_io_uring_setup+0x54/0x80 [ 216.977258][ T9838] do_syscall_64+0xfd/0x680 [ 216.981775][ T9838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 216.987668][ T9838] RIP: 0033:0x459279 [ 216.991564][ T9838] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.011186][ T9838] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 217.019628][ T9838] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 217.027704][ T9838] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 217.035698][ T9838] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:22:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$inet6(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="861cfa0ea905d52a98305095c2978077da6a9b94bfe805a318a9d5e6ec300946d52a328054d4d36a0c4ab8c58e88", 0x2e}], 0x1, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x2f, 0x1a, [], [@ra={0x5, 0x2, 0xffffffffffffc1a0}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffffffffffb}, @generic={0x7fff, 0x61, "383adde58d19d94205fe9984103575bcec2b1f179abc841a4e325344616de277f5b09368b2f79a763dbb17c5e37e350b17e33550d985da6cd761f09fa09546a3ffb59fa9b4e57f23cb14469ec5bbea7ab928293ecad2f40303f5bfa6fe5bee8a45"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @jumbo, @generic={0xbb, 0x45, "6a67a7d6c8ffca4d2bf10934e9d3fad6555af6ba18c8cac2c394bbf260e9ab5560db0a2563dffc3c13c9234fe26d93a5d39edf8f7a319ddbd1ec5c2d12b8b85968ceeb15f9"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5ff}}], 0x130}, 0x8080) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x5, 0xffffffff, 0x7}}, 0x30) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x410040, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) [ 217.043688][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 217.051674][ T9838] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 13:22:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r1 = accept(r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1400008912, &(0x7f0000000340)="0adc1f123c123f319bd070") sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400cbd3b6f696eef59d200000000006000800010000000000609c86568640f737492dc658dc"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 13:22:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$inet6(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="861cfa0ea905d52a98305095c2978077da6a9b94bfe805a318a9d5e6ec300946d52a328054d4d36a0c4ab8c58e88", 0x2e}], 0x1, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x2f, 0x1a, [], [@ra={0x5, 0x2, 0xffffffffffffc1a0}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffffffffffb}, @generic={0x7fff, 0x61, "383adde58d19d94205fe9984103575bcec2b1f179abc841a4e325344616de277f5b09368b2f79a763dbb17c5e37e350b17e33550d985da6cd761f09fa09546a3ffb59fa9b4e57f23cb14469ec5bbea7ab928293ecad2f40303f5bfa6fe5bee8a45"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @jumbo, @generic={0xbb, 0x45, "6a67a7d6c8ffca4d2bf10934e9d3fad6555af6ba18c8cac2c394bbf260e9ab5560db0a2563dffc3c13c9234fe26d93a5d39edf8f7a319ddbd1ec5c2d12b8b85968ceeb15f9"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5ff}}], 0x130}, 0x8080) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x5, 0xffffffff, 0x7}}, 0x30) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) [ 217.116857][ T9845] FAT-fs (loop4): bogus number of reserved sectors [ 217.182147][ T9845] FAT-fs (loop4): Can't find a valid FAT filesystem 13:22:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$inet6(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="861cfa0ea905d52a98305095c2978077da6a9b94bfe805a318a9d5e6ec300946d52a328054d4d36a0c4ab8c58e88", 0x2e}], 0x1, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x2f, 0x1a, [], [@ra={0x5, 0x2, 0xffffffffffffc1a0}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffffffffffb}, @generic={0x7fff, 0x61, "383adde58d19d94205fe9984103575bcec2b1f179abc841a4e325344616de277f5b09368b2f79a763dbb17c5e37e350b17e33550d985da6cd761f09fa09546a3ffb59fa9b4e57f23cb14469ec5bbea7ab928293ecad2f40303f5bfa6fe5bee8a45"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @jumbo, @generic={0xbb, 0x45, "6a67a7d6c8ffca4d2bf10934e9d3fad6555af6ba18c8cac2c394bbf260e9ab5560db0a2563dffc3c13c9234fe26d93a5d39edf8f7a319ddbd1ec5c2d12b8b85968ceeb15f9"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5ff}}], 0x130}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:55 executing program 3 (fault-call:0 fault-nth:10): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:55 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000080)=0x5dc0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x40) 13:22:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:22:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x4, 0x2, 0x4}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000013) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xbe2, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 13:22:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001340)=[{&(0x7f0000000040)="d5", 0x1}], 0x1) r2 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x80000001, 0x400) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000100)={{0x6, @name="d6b2b7756ffd61db9043381a5f2bf765a3f1257683a26575f2b6b0f187935e30"}, "d39f5ee495e7f121950193232268ef24832820bed28adf0c83c98dfa4bf43027", 0x1}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x2}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f000000a780)=[{{0x0, 0x0, &(0x7f000000a6c0)=[{&(0x7f0000008240)=""/100, 0x447}], 0x1}}], 0x1, 0x200000000100, 0x0) 13:22:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev}, &(0x7f00000004c0)=0xc) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) [ 217.542207][ T9882] FAULT_INJECTION: forcing a failure. [ 217.542207][ T9882] name failslab, interval 1, probability 0, space 0, times 0 [ 217.626239][ T9882] CPU: 1 PID: 9882 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 217.635274][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.645350][ T9882] Call Trace: [ 217.648675][ T9882] dump_stack+0x172/0x1f0 [ 217.653072][ T9882] should_fail.cold+0xa/0x15 [ 217.657702][ T9882] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 217.663563][ T9882] ? ___might_sleep+0x163/0x280 [ 217.668499][ T9882] __should_failslab+0x121/0x190 13:22:55 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4200, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000001380)=[{&(0x7f0000000200)='U', 0x1}], 0x1, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000003, 0x0) [ 217.673726][ T9882] should_failslab+0x9/0x14 [ 217.678248][ T9882] kmem_cache_alloc_trace+0x2ce/0x750 [ 217.683633][ T9882] ? rcu_read_lock_sched_held+0x110/0x130 [ 217.689508][ T9882] ? __kmalloc+0x5d0/0x740 [ 217.693955][ T9882] alloc_workqueue_attrs+0x82/0x120 [ 217.700817][ T9882] apply_wqattrs_prepare+0xc8/0x970 [ 217.706789][ T9882] apply_workqueue_attrs_locked+0xcb/0x140 [ 217.706824][ T9882] apply_workqueue_attrs+0x31/0x50 13:22:55 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x800, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) [ 217.706842][ T9882] alloc_workqueue+0x5e2/0xf00 13:22:55 executing program 2: ioctl(0xffffffffffffffff, 0xff, &(0x7f0000001240)="3fbc2f5db32b63bbc0b2c8bba953b750c83b0a1e5400960000") r0 = socket$inet(0x10, 0x3, 0x40000000000010) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xcf, 0x60000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001280)=""/143) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$xdp(r1, &(0x7f0000001200)={&(0x7f0000000180)={0x2c, 0x4, r2, 0x11}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x4000}, 0x4040010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="240000001d0003fffd3cc0023da2830101faffffff86c436271d8568b51ba3a2d188737e", 0xfffffffffffffdbd}], 0x1}, 0x0) [ 217.706868][ T9882] ? workqueue_sysfs_register+0x3f0/0x3f0 13:22:56 executing program 0: r0 = inotify_init() ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@caif=@util, &(0x7f0000000140)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000007c0)={0x0, 0x1}, &(0x7f0000003000)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000003040)={r2, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) inotify_add_watch(r0, &(0x7f0000000000)='\x00', 0x10000006) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000002d40)={0x0, 0xff}, &(0x7f0000002d80)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002dc0)={r3, 0x8}, &(0x7f0000002e00)=0x8) sendmmsg(r1, &(0x7f0000002c80)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x40, {0x6b12, 0x4c7, 0x16c000000000000, 0x1, 0x8, 0x5}, 0x0, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)="7ef4fd76428cfc92ab4671b69a43c534476212bdbdfb11cbd7f84af04e40877ef59ce06b4c94a8bad2d0b95e20a1cc8411fc966a81d6a9ab58488c7ade146616c57d575de8187a42fc72a742449d810a53b3e9d17b495af4c113ee", 0x5b}, {&(0x7f00000002c0)="0ca7473df18d1a9c6fb24f3c363df93330f6763960e6b5960fe4ff0ff0c4ec0c076cb30a5b5779beb81c8d2e395e4b1686dcd41fd77c6a634a81effe81eda58eb676974ca5cea2a4cc7240f9a4d337ae39a8cf31142eedbb31fe1a94ad1f2d088706f76c5da4e6dd021c022d6aca146e03c8ba518bc2c44d1820d05f55eb2226cce940dab872e15add8b50c55877c3c374a4050b07f95e90d39c9f7c2df00936b41616908238447e8c0626f5c2edd555766461884c8013439592099e5e5c2b7165c2d9c873ab7e0bb779db1a235f4afa1c978e0f13b7fbc6", 0xd8}, {&(0x7f00000003c0)="52a2dc463495f689493385d801fe176a639f1e6ac7da8a41312959a69a89d0a46ae48283bdcf521ca83b1943ed51047ed2f58e1d118cde", 0x37}, {&(0x7f0000000400)="3859139d1a1e9914a6221dd2fec90ee710dcad014d05dd031f808d40ac78faffdd291416ede6e39fc93019b81837c20364a8b2067244cba707711412eb204c9ab8a83bc1a09e0ba73721bf8ee88d86f776d939441ec97e8932da8e0bd8daf6ea7bcbfec8130cb8ba18a61fb050325f5dc81e4ea344d86818a43a783a90d6170c33c12ad73e18263c243e7eabb2217b042023da41753d0c4832265354ac2e505eb980bbbef01f6d19705df94ebb21a4e4825f1cca", 0xb4}], 0x4}}, {{&(0x7f0000000500)=@l2={0x1f, 0x2, {0x0, 0x8001, 0x9, 0x8, 0x100}, 0x7fffffff, 0x8}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)="8f33859122597f3fa76ce6a32c351715217ec648f217b42f66f91454b828fdc8c244cea490827b368301cc02cd6febd8f73448efa2e4fa5f7869e786585a969157e234e6a4062acf58e7f5a457125f8d25e467b2230bcb21937ead02a7c885331b18e07dbc5a2911dab554", 0x6b}, {&(0x7f0000000600)="dcd448a16a51b60421ed6cac0ce81d44", 0x10}, {&(0x7f0000000640)="753fe2fabfe3364e6439831a56424516052f2cfb856f09dbc82c69cf93435955be33f0eed1dc7be6aed88e9c1738bcf974d277267be436a9f1db55d85c09ea2b753b", 0x42}], 0x3, &(0x7f0000002e40)=ANY=[@ANYBLOB="480000030000000000010000740000002edf75a43cd155562fac66a8d0773d9b3f2df250674e1c323d6edf7e211e6f7d5f542aea7f66f716c5eb5b5c4b5cc9772ca8c74926e1ed4d0be800a0000000000000001501000007000000fbf684e1ccc0ff0f7b3635d376724cf02bc0fc4d012026e2bece934220280c3eeb3b1e928eed7ec7290f05c28db43d69dde52b2d2ee4516ae59dc2bd36afc2a90e71e5375329ff817f75fb7d4310a8a13704408b073a95cc7a1c7e0cb2d66bff07259a7bc238296d5c1271de4933c8f2320da9f17b6bbe3d507f1309fe49592e36222132d8c203808f73bae21377784f"], 0xe8}}, {{&(0x7f0000000800)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)="47726e847a32db145fea61c7d246dc0f1e77338fea992e3a23e0f41a33605fb302dbad832b2073a1da931d0603478634420307", 0x33}, {&(0x7f00000008c0)="97e479d8a3de4d8fb1f3696a7585f674bc150357d22dc8a1def24a49a2a0a8f95c87a39c7868682b191892c90b7f368cd1068475daee9d7b8e1c9d69a1afbe293e12ac51eab65dd7b71729c54e1fd77b5b0d3c01b7f37fe38ec1387cef1ac931", 0x60}, {&(0x7f0000000940)="6add1a5f50a52081904976aba0d98adb027ce115a1574b21ec1aa63d8327542e4c693454cc68f025dec010a2aeb48c119ec2d6f1934eb86f1a004e2b242704ee5dbf91ddbaef", 0x46}, {0xffffffffffffffff}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="db3affee6b40f332ec8287f608981be16c9038218a27f095a6e891d0d72e2eca84ea62bdc5ab358a2f77357a8114065b311af89a38e1fe96422ef6fe243e164bfbcfa9804b8f2f0a99eef1c8d7b8da4c253048ab42e2e22c41b54a3284677d3d68812a268ce394a19483633303744d99cf4da48b1145bb5dc22b6db51cbf3c32b98342af0bb8d309007b30076765479a2680f16395ace32dc5123d", 0x9b}, {&(0x7f0000001a80)="039018937e2cdeda5791f3f4dabcd145d53a827b857ee0fbb02a20f719da15ec175873a9674b1b00e9ba68db8a1cadffc7da70be18b1d906859930f326226b551e02015944e467629d9f01326d1c76b7cb693249c2b7376f4544d5b91144c818756cb648c80ff807abb195ccc46211bb188a1e8afd9bb1c62572bf4c88379da8ac723172f20ac979b49bc5f37445daa6366aa368c44f30fc6ed80da9822ca9eb6b1780cc", 0xa4}, {&(0x7f0000001b40)="65b706b6e7a8c1db9da0874148673b588e9e6a6c4641680e7e6e2a02cb75e3ea1bb968f3aec2d54d2259efea168678301e3cb5b071a814ad32a655dd329b7b32e45604f75e8c3b060f123affbc223197a3d53b0afae8cddc80df159844f2234f1cd24d23427fb0dc10faed", 0x6b}], 0x8, &(0x7f0000001c40)=[{0x1010, 0x113, 0x8, "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"}], 0x1010}}], 0x3, 0x4000000) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x1000000) mount$9p_xen(&(0x7f0000000700)='\x00', &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x24000, &(0x7f0000002f40)={'trans=xen,', {[{@nodevmap='nodevmap'}, {@afid={'afid', 0x3d, 0x100000000}}], [{@smackfsroot={'smackfsroot', 0x3d, '#nodev{[,\'}*\\)/,/vmnet1\'-'}}, {@context={'context', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'proc*\'usersystem'}}, {@hash='hash'}, {@smackfsroot={'smackfsroot', 0x3d, ' \x00'}}, {@subj_role={'subj_role', 0x3d, ' \x00'}}]}}) [ 217.706891][ T9882] ? migrate_swap_stop+0x920/0x920 [ 217.706909][ T9882] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 217.706925][ T9882] ? __kthread_bind_mask+0xae/0xc0 [ 217.706951][ T9882] io_uring_setup+0xbca/0x1a40 13:22:56 executing program 3 (fault-call:0 fault-nth:11): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) [ 217.706971][ T9882] ? io_uring_release+0x50/0x50 [ 217.706986][ T9882] ? fput_many+0x12c/0x1a0 13:22:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x20000000021) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000240)=""/109, 0x3f}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x10b, 0x1ff, 0xa2, 0x17d, 0x344, 0x3, 0x395, 0x3}, "fe24ffe47af8722eac8dbb999fef92aba0c19c16cd238a030dfa6a8eb96912b2fc0e7eba4c3e41f2c26e7d2674e545420dff1c"}, 0x53) r2 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/253) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa) 13:22:56 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) [ 217.707015][ T9882] ? trace_hardirqs_on_thunk+0x1a/0x1c 13:22:56 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff9, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x1a480, 0x0) fchmodat(r2, 0x0, 0x40000000004e) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00010300000000080005a01baccb6c6951ae22b1290428e5b1868c1e14f0ec85aee5627f820a2ee7b42a0a30c475996261427d9800c5b2b7cb310d6852492b743bb75dad1daa4387ad06de46b36c50bc7408ad4abd1c8d8d4b925368dda6690f1294d8edb6f37811503d35ca8dc8b86e50269ad64d9d4cd40c1889cd82bb8e3a"], 0x1, 0x3) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x4, 0x2, 0x1479, 0x0, 0x3}) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) setxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000300)='y\x00', 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 217.707031][ T9882] ? do_syscall_64+0x26/0x680 [ 217.707046][ T9882] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.707060][ T9882] ? do_syscall_64+0x26/0x680 [ 217.707077][ T9882] ? lockdep_hardirqs_on+0x418/0x5d0 13:22:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(0x0, 0x18) tkill(0x0, 0x30) [ 217.707107][ T9882] __x64_sys_io_uring_setup+0x54/0x80 [ 217.707125][ T9882] do_syscall_64+0xfd/0x680 [ 217.707145][ T9882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 217.707157][ T9882] RIP: 0033:0x459279 [ 217.707174][ T9882] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.707182][ T9882] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 217.707198][ T9882] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 217.707207][ T9882] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 217.707216][ T9882] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 217.707225][ T9882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 217.707235][ T9882] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 218.342909][ T9916] FAULT_INJECTION: forcing a failure. [ 218.342909][ T9916] name failslab, interval 1, probability 0, space 0, times 0 [ 218.342933][ T9916] CPU: 0 PID: 9916 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 218.342944][ T9916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.342951][ T9916] Call Trace: [ 218.342973][ T9916] dump_stack+0x172/0x1f0 [ 218.343001][ T9916] should_fail.cold+0xa/0x15 [ 218.343026][ T9916] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 218.343050][ T9916] ? ___might_sleep+0x163/0x280 [ 218.343073][ T9916] __should_failslab+0x121/0x190 [ 218.343090][ T9916] should_failslab+0x9/0x14 [ 218.343104][ T9916] kmem_cache_alloc_node+0x261/0x700 [ 218.343138][ T9916] alloc_unbound_pwq+0x4c5/0xcf0 [ 218.343167][ T9916] apply_wqattrs_prepare+0x35e/0x970 [ 218.343201][ T9916] apply_workqueue_attrs_locked+0xcb/0x140 [ 218.343223][ T9916] apply_workqueue_attrs+0x31/0x50 [ 218.343243][ T9916] alloc_workqueue+0x5e2/0xf00 [ 218.343272][ T9916] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 218.343294][ T9916] ? migrate_swap_stop+0x920/0x920 [ 218.343311][ T9916] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 218.343328][ T9916] ? __kthread_bind_mask+0xae/0xc0 [ 218.343354][ T9916] io_uring_setup+0xbca/0x1a40 [ 218.343376][ T9916] ? io_uring_release+0x50/0x50 [ 218.343390][ T9916] ? fput_many+0x12c/0x1a0 [ 218.343428][ T9916] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 218.343448][ T9916] ? do_syscall_64+0x26/0x680 [ 218.343467][ T9916] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.343485][ T9916] ? do_syscall_64+0x26/0x680 [ 218.343503][ T9916] ? lockdep_hardirqs_on+0x418/0x5d0 [ 218.343535][ T9916] __x64_sys_io_uring_setup+0x54/0x80 [ 218.343559][ T9916] do_syscall_64+0xfd/0x680 [ 218.343587][ T9916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 218.343611][ T9916] RIP: 0033:0x459279 [ 218.343630][ T9916] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 218.343640][ T9916] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 218.343656][ T9916] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 218.343667][ T9916] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 218.343676][ T9916] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 218.343687][ T9916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 218.343702][ T9916] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 218.509053][ T9930] device bridge0 entered promiscuous mode [ 218.623675][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.627020][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.644901][ T9926] device bridge0 left promiscuous mode [ 219.288018][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state 13:22:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x4, 0x2, 0x4}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000013) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xbe2, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 13:22:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:57 executing program 3 (fault-call:0 fault-nth:12): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(0x0, 0x18) tkill(0x0, 0x30) 13:22:57 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff9, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x1a480, 0x0) fchmodat(r2, 0x0, 0x40000000004e) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00010300000000080005a01baccb6c6951ae22b1290428e5b1868c1e14f0ec85aee5627f820a2ee7b42a0a30c475996261427d9800c5b2b7cb310d6852492b743bb75dad1daa4387ad06de46b36c50bc7408ad4abd1c8d8d4b925368dda6690f1294d8edb6f37811503d35ca8dc8b86e50269ad64d9d4cd40c1889cd82bb8e3a"], 0x1, 0x3) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x4, 0x2, 0x1479, 0x0, 0x3}) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) setxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000300)='y\x00', 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 219.288067][ T9945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.288278][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.288332][ T9945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.288661][ T9945] device bridge0 entered promiscuous mode 13:22:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) [ 219.671350][ T9953] FAULT_INJECTION: forcing a failure. [ 219.671350][ T9953] name failslab, interval 1, probability 0, space 0, times 0 [ 219.736961][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.746268][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.772756][ T9953] CPU: 0 PID: 9953 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 219.781850][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.791926][ T9953] Call Trace: [ 219.795246][ T9953] dump_stack+0x172/0x1f0 [ 219.799855][ T9953] should_fail.cold+0xa/0x15 [ 219.804469][ T9953] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 219.810309][ T9953] ? ___might_sleep+0x163/0x280 [ 219.815182][ T9953] __should_failslab+0x121/0x190 [ 219.820400][ T9953] ? sock_destroy_inode+0x60/0x60 [ 219.825438][ T9953] should_failslab+0x9/0x14 [ 219.829959][ T9953] kmem_cache_alloc+0x2af/0x6f0 [ 219.834827][ T9953] ? ___might_sleep+0x163/0x280 [ 219.839714][ T9953] ? __might_sleep+0x95/0x190 [ 219.844404][ T9953] ? sock_destroy_inode+0x60/0x60 [ 219.849451][ T9953] sock_alloc_inode+0x1d/0x260 [ 219.854233][ T9953] alloc_inode+0x68/0x1e0 [ 219.858618][ T9953] new_inode_pseudo+0x19/0xf0 [ 219.863307][ T9953] sock_alloc+0x41/0x270 [ 219.867566][ T9953] __sock_create+0xc2/0x730 [ 219.872089][ T9953] ? migrate_swap_stop+0x920/0x920 [ 219.877229][ T9953] sock_create_kern+0x3b/0x50 [ 219.881934][ T9953] io_uring_setup+0xc26/0x1a40 [ 219.886728][ T9953] ? io_uring_release+0x50/0x50 [ 219.891591][ T9953] ? fput_many+0x12c/0x1a0 [ 219.896037][ T9953] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 219.901608][ T9953] ? do_syscall_64+0x26/0x680 [ 219.906300][ T9953] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.912397][ T9953] ? do_syscall_64+0x26/0x680 [ 219.917088][ T9953] ? lockdep_hardirqs_on+0x418/0x5d0 [ 219.922385][ T9953] __x64_sys_io_uring_setup+0x54/0x80 [ 219.927773][ T9953] do_syscall_64+0xfd/0x680 [ 219.932291][ T9953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 219.938188][ T9953] RIP: 0033:0x459279 [ 219.942084][ T9953] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 219.961714][ T9953] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 219.970148][ T9953] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 219.978145][ T9953] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f 13:22:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x4, 0x2, 0x4}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000013) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xbe2, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) [ 219.986128][ T9953] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 219.994108][ T9953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 220.002089][ T9953] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 220.015102][ T9959] device bridge0 left promiscuous mode [ 220.276586][ T9953] socket: no more sockets 13:22:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x4, 0x2, 0x4}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000013) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xbe2, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 13:22:58 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff9, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x1a480, 0x0) fchmodat(r2, 0x0, 0x40000000004e) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00010300000000080005a01baccb6c6951ae22b1290428e5b1868c1e14f0ec85aee5627f820a2ee7b42a0a30c475996261427d9800c5b2b7cb310d6852492b743bb75dad1daa4387ad06de46b36c50bc7408ad4abd1c8d8d4b925368dda6690f1294d8edb6f37811503d35ca8dc8b86e50269ad64d9d4cd40c1889cd82bb8e3a"], 0x1, 0x3) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x5010, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x4, 0x2, 0x1479, 0x0, 0x3}) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) setxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000300)='y\x00', 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 13:22:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(0x0, 0x18) tkill(0x0, 0x30) 13:22:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioprio_set$pid(0x3, 0x0, 0x2000) getpeername(r0, &(0x7f0000000240)=@generic, &(0x7f00000002c0)=0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0xe89d511603635d58, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\x00\x00\x00\x00\x00\t'], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x4000, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) 13:22:58 executing program 3 (fault-call:0 fault-nth:13): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) [ 220.730587][ T9964] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.737825][ T9964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.745324][ T9964] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.752433][ T9964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.780557][ T9964] device bridge0 entered promiscuous mode [ 220.781174][ T9994] FAULT_INJECTION: forcing a failure. [ 220.781174][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 220.792878][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.821642][ T9994] CPU: 1 PID: 9994 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 220.830668][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.841251][ T9994] Call Trace: [ 220.844552][ T9994] dump_stack+0x172/0x1f0 [ 220.848898][ T9994] should_fail.cold+0xa/0x15 [ 220.853512][ T9994] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 220.859338][ T9994] ? ___might_sleep+0x163/0x280 [ 220.864209][ T9994] __should_failslab+0x121/0x190 [ 220.864227][ T9994] ? sock_destroy_inode+0x60/0x60 [ 220.864238][ T9994] should_failslab+0x9/0x14 [ 220.864250][ T9994] kmem_cache_alloc_trace+0x2ce/0x750 [ 220.864261][ T9994] ? kmem_cache_alloc+0x32b/0x6f0 [ 220.864274][ T9994] ? ___might_sleep+0x163/0x280 [ 220.864294][ T9994] ? sock_destroy_inode+0x60/0x60 [ 220.899016][ T9994] sock_alloc_inode+0x63/0x260 [ 220.904727][ T9994] alloc_inode+0x68/0x1e0 [ 220.909066][ T9994] new_inode_pseudo+0x19/0xf0 [ 220.913752][ T9994] sock_alloc+0x41/0x270 [ 220.913769][ T9994] __sock_create+0xc2/0x730 [ 220.913783][ T9994] ? migrate_swap_stop+0x920/0x920 [ 220.913802][ T9994] sock_create_kern+0x3b/0x50 [ 220.913822][ T9994] io_uring_setup+0xc26/0x1a40 [ 220.913843][ T9994] ? io_uring_release+0x50/0x50 [ 220.942254][ T9994] ? fput_many+0x12c/0x1a0 [ 220.946705][ T9994] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 220.952176][ T9994] ? do_syscall_64+0x26/0x680 [ 220.956866][ T9994] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.962946][ T9994] ? do_syscall_64+0x26/0x680 [ 220.967636][ T9994] ? lockdep_hardirqs_on+0x418/0x5d0 [ 220.972941][ T9994] __x64_sys_io_uring_setup+0x54/0x80 13:22:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400000, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000227) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write(r0, &(0x7f0000c34fff), 0xffffff0b) 13:22:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) [ 220.978324][ T9994] do_syscall_64+0xfd/0x680 [ 220.982836][ T9994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 220.988728][ T9994] RIP: 0033:0x459279 [ 220.992629][ T9994] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 221.012242][ T9994] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 221.020672][ T9994] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 221.028655][ T9994] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 221.036640][ T9994] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 221.044622][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 221.052608][ T9994] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 [ 221.061387][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.068909][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state 13:22:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) [ 221.095540][ T9994] socket: no more sockets 13:22:59 executing program 3 (fault-call:0 fault-nth:14): io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:22:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000bd0000/0x2000)=nil, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) [ 221.298795][T10013] FAULT_INJECTION: forcing a failure. [ 221.298795][T10013] name failslab, interval 1, probability 0, space 0, times 0 [ 221.350536][T10013] CPU: 0 PID: 10013 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190604 #8 [ 221.351796][ T9982] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.359620][T10013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.359627][T10013] Call Trace: [ 221.359652][T10013] dump_stack+0x172/0x1f0 [ 221.359679][T10013] should_fail.cold+0xa/0x15 [ 221.359703][T10013] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 221.359731][T10013] ? ___might_sleep+0x163/0x280 [ 221.359771][T10013] __should_failslab+0x121/0x190 [ 221.367248][ T9982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.376928][T10013] ? sock_destroy_inode+0x60/0x60 [ 221.376942][T10013] should_failslab+0x9/0x14 [ 221.376955][T10013] kmem_cache_alloc_trace+0x2ce/0x750 [ 221.376967][T10013] ? kmem_cache_alloc+0x32b/0x6f0 [ 221.376981][T10013] ? ___might_sleep+0x163/0x280 [ 221.377001][T10013] ? sock_destroy_inode+0x60/0x60 [ 221.377024][T10013] sock_alloc_inode+0x63/0x260 [ 221.381893][ T9982] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.384720][T10013] alloc_inode+0x68/0x1e0 [ 221.384737][T10013] new_inode_pseudo+0x19/0xf0 [ 221.384754][T10013] sock_alloc+0x41/0x270 [ 221.384771][T10013] __sock_create+0xc2/0x730 [ 221.384793][T10013] ? migrate_swap_stop+0x920/0x920 [ 221.389871][ T9982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.395172][T10013] sock_create_kern+0x3b/0x50 [ 221.395192][T10013] io_uring_setup+0xc26/0x1a40 [ 221.395211][T10013] ? io_uring_release+0x50/0x50 [ 221.395224][T10013] ? fput_many+0x12c/0x1a0 [ 221.395254][T10013] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 221.395275][T10013] ? do_syscall_64+0x26/0x680 [ 221.512494][T10013] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.518571][T10013] ? do_syscall_64+0x26/0x680 [ 221.523264][T10013] ? lockdep_hardirqs_on+0x418/0x5d0 [ 221.528564][T10013] __x64_sys_io_uring_setup+0x54/0x80 [ 221.533959][T10013] do_syscall_64+0xfd/0x680 [ 221.537121][ T9982] device bridge0 entered promiscuous mode [ 221.538467][T10013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 221.538481][T10013] RIP: 0033:0x459279 [ 221.538496][T10013] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 221.538504][T10013] RSP: 002b:00007f98853e4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 221.538525][T10013] RAX: ffffffffffffffda RBX: 00007f98853e4c90 RCX: 0000000000459279 [ 221.590053][T10013] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000056f [ 221.598039][T10013] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 221.606012][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98853e56d4 [ 221.613986][T10013] R13: 00000000004c05f6 R14: 00000000004d2de8 R15: 0000000000000003 13:22:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) socket$kcm(0x29, 0x0, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="48ccc09e8b059327b9db77c133"], 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) getpid() recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:22:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:22:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:22:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[0x2, 0x7fc, 0xfffffffffffffffd, 0x7, 0x0, 0x7f, 0x5, 0xffffffff, 0x2, 0xc, 0x1e, 0xb, 0xfffffffffffeffff, 0x8000, 0x3, 0x400], 0x1, 0x200000}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10100d, 0x0) r3 = memfd_create(&(0x7f0000000180)=')\\\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = dup(r4) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000006e3415cf7ac52ba700002f4964569ea5c095b399433b4af2ffd5acae330000080004019078008a91ba00835d25000000000000000000000000008e750752ba5c9c71235f37ba530719b7f4dc990ffd4b7b45659d8552a304228ee925bae1d3ed897ee61315fd8277d1a19cfbd73bc17a7b3ccc43b7974bdde1a8457058fe2adb473212cae37472221ce2cd5b792cb718d48492adb71b3516e778d8231a1301132a2f0daf78ffc79d4db34dc1003074b462041da4570407f0322b0b107b76ab0cb7c9ce590129697bf6543adeeff91a223b4e828605c218cead89ddbe222eb14fb1827b6306c9a3848b3d78d433846cdf476a3e9291a668f6bd9a742c52b865a6f3"], 0x46) 13:22:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:22:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) [ 221.899133][ T26] audit: type=1804 audit(1559654579.926:36): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir187231560/syzkaller.1jjrUI/31/memory.events" dev="sda1" ino=16675 res=1 [ 221.990357][ T26] audit: type=1804 audit(1559654579.976:37): pid=10034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir187231560/syzkaller.1jjrUI/31/memory.events" dev="sda1" ino=16675 res=1 13:23:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) socket$kcm(0x29, 0x0, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="48ccc09e8b059327b9db77c133"], 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) getpid() recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:23:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) [ 222.184963][T10013] socket: no more sockets 13:23:00 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:23:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) getresuid(&(0x7f0000000540), &(0x7f0000000440)=0x0, &(0x7f00000004c0)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x10) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000280)={0xa0, 0x0, 0x6, {{0x4, 0x1, 0x53b5, 0x6, 0x6, 0x0, {0x3, 0x9, 0x5, 0x6, 0x81, 0x0, 0x100000001, 0x6, 0x40, 0xe096, 0x7, r1, r2, 0x5, 0x10000}}, {0x0, 0x8}}}, 0xa0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x1, 0x102, 0x1, {0x7, 0x200, 0x6, 0xeb67}}) 13:23:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224) r1 = gettid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r1, 0x18) tkill(r1, 0x30) 13:23:00 executing program 2: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="4c0000001200ff09ff1cfe956fa283b724a6008000000000000008000000150024001d00a730de33aa46ffecfde0258823dd8da49848c6cea97da172dcc12100"/76, 0x4c}], 0x1}, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) setregid(r1, r2) 13:23:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x16) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) r1 = dup(r0) getsockname$ax25(r1, &(0x7f0000000080)={{0x3, @null}, [@rose, @bcast, @netrom, @remote, @null, @rose, @null, @bcast]}, &(0x7f0000000100)=0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='+md5sum)selinux,\x00', 0xffffffffffffffff}, 0x30) sched_getscheduler(r2) [ 222.390926][ T26] audit: type=1804 audit(1559654580.416:38): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir187231560/syzkaller.1jjrUI/32/memory.events" dev="sda1" ino=16675 res=1 13:23:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224) r1 = gettid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r1, 0x18) tkill(r1, 0x30) 13:23:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}}}, 0x10) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r1, &(0x7f0000000000)=@name, 0x10) 13:23:00 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.']) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2) 13:23:00 executing program 3: io_uring_setup(0x525, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:23:00 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) write$P9_RLERROR(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYPTR], 0x1c) 13:23:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x402000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0)=0x7, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400900000001, 0x31f) connect$inet6(r2, &(0x7f0000000000), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000180), 0x4) setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x2fc) 13:23:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224) r1 = gettid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r1, 0x18) tkill(r1, 0x30) [ 222.835805][T10100] overlayfs: workdir and upperdir must be separate subtrees 13:23:00 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) [ 222.902638][T10100] overlayfs: workdir and upperdir must reside under the same mount 13:23:01 executing program 2: r0 = socket$inet(0x10, 0x2, 0xfffffffffffffffe) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="23000000660007031dfffd946fa2830020200a000000ffffa61d85680c1ba3a20400ff", 0x23}], 0x1}, 0x0) 13:23:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:01 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) write$P9_RLERROR(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYPTR], 0x1c) 13:23:01 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) write$P9_RLERROR(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYPTR], 0x1c) 13:23:01 executing program 3: io_uring_setup(0x56e, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:23:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:01 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) write$P9_RLERROR(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYPTR], 0x1c) 13:23:01 executing program 3: io_uring_setup(0x570, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x2b8}) 13:23:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:01 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 13:23:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x30180, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r2 = accept$alg(r0, 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c}, 0x1c}}, 0x0) io_setup(0x800000100000001, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)='1', 0x1}]) 13:23:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:01 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 13:23:01 executing program 5: close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:02 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x2, 0x0, 0x7, 0x0, 0x2b8}) 13:23:02 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read$FUSE(r0, &(0x7f00000015c0), 0x1000) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1, 0x0) close(r0) 13:23:02 executing program 5: close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:02 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) write$P9_RLERROR(r0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYPTR], 0x1c) 13:23:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:02 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x800000ffff, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000200451fb8ae0024100000000000089500000000000000161c2193802434faae5cd6fa010c58ef15e0f8ee1ff42c09ac5292a605145ab741833af1f2fda7a73500c62de4f304a67dcb551a3709c7580abb75ec9b027ea28e21aa88d2dfd9f4448f174b4d99f20e3adb3b103bc3c7e4d87d6fb80402ef5b51ff12388016ac5a1a568d32e22a152c949578c1c4dccc6d40da7a26254f09a3112ca77bdace28422d93a5b270562615a2e1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) 13:23:02 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x3, 0x0, 0x7, 0x0, 0x2b8}) 13:23:02 executing program 5: close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:02 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read$FUSE(r0, &(0x7f00000015c0), 0x1000) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1, 0x0) close(r0) 13:23:02 executing program 1: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x132224) r1 = gettid() setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r1, 0x18) tkill(r1, 0x30) 13:23:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0xf8a0466) recvmsg(r2, &(0x7f0000000200)={&(0x7f0000000100)=@nfc, 0x32c, &(0x7f0000000240)=[{&(0x7f0000000180)=""/119, 0x7ffff000}, {&(0x7f0000000500)=""/202, 0xfffffffffffffda5}], 0x2, &(0x7f0000000980)=""/55, 0x37}, 0x2000) 13:23:02 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:02 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x4, 0x0, 0x7, 0x0, 0x2b8}) 13:23:02 executing program 1: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x132224) r1 = gettid() setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r1, 0x18) tkill(r1, 0x30) 13:23:02 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) sendmsg(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)='m', 0x1}], 0x1}, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) ftruncate(r2, 0x50099b5) splice(r0, &(0x7f0000000040), r0, &(0x7f00000000c0), 0x8, 0x2) sendfile(r0, r2, 0x0, 0x88000fbfffffc) setxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:file_context_t:s0\x00', 0x24, 0x1) 13:23:02 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:02 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:02 executing program 1: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x132224) r1 = gettid() setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r1, 0x18) tkill(r1, 0x30) [ 224.778239][T10233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:23:02 executing program 5: r0 = socket$kcm(0x10, 0x0, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:02 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x5, 0x0, 0x7, 0x0, 0x2b8}) 13:23:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:03 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) [ 225.056877][ T26] audit: type=1800 audit(1559654583.086:39): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16702 res=0 13:23:03 executing program 0: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x7, 0x7ff, 0x48a9, 0xc000000000000000, 0x1, 0x4464, 0x50, 0x4}, &(0x7f0000000080)={0x3, 0x1, 0x101, 0x1ff, 0x81, 0x6, 0x8, 0x3}, &(0x7f00000000c0)={0xe8, 0x0, 0x8, 0x0, 0xfffffffffffffbb5, 0x8, 0x1, 0x2}, &(0x7f0000000100)={0x77359400}) fsmount(r0, 0x0, 0x2) 13:23:03 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:03 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x6, 0x0, 0x7, 0x0, 0x2b8}) 13:23:03 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:03 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x7, 0x0, 0x7, 0x0, 0x2b8}) 13:23:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="00b17e00400000001b0175b2a83365c18e464e06d0b31f4abe8cf0de5e923fd93a4f2a11603967fa21ec989606d549cd233108d49ff28ef16feab2ab58640b07afb0dc99a825d5790085064d03b8d68f406a8fd8be3fcd9fa935faba1594cf4eb510b2dd6998dabf8639e8d13a017add96f28732ac11b7a203e6a4d37925ac58d5760276e5562caf8f7e9778a70271de6b330fed9cf602562a6597f24984abfd8158f812950fb2293e0fa4fb86ee9dd222ef32acfc2f234af214768666691d18d6c2177474b5d4a7e2d5b0709b143672175ff54ba9"], 0x0, 0x100002, 0x0, 0x1}, 0x76) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) 13:23:03 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:03 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:03 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x8, 0x0, 0x7, 0x0, 0x2b8}) 13:23:03 executing program 0: 13:23:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:04 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:04 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:04 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x300, 0x0, 0x7, 0x0, 0x2b8}) 13:23:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:04 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:04 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x500, 0x0, 0x7, 0x0, 0x2b8}) 13:23:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:04 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:04 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:04 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:04 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x600, 0x0, 0x7, 0x0, 0x2b8}) 13:23:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:05 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:05 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:05 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:05 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x700, 0x0, 0x7, 0x0, 0x2b8}) 13:23:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:05 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:05 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:05 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x3f00, 0x0, 0x7, 0x0, 0x2b8}) 13:23:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:05 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:05 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:05 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:05 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x4000, 0x0, 0x7, 0x0, 0x2b8}) 13:23:05 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:06 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:06 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) unlink(0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:06 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:06 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x400000, 0x0, 0x7, 0x0, 0x2b8}) 13:23:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:06 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:06 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) unlink(0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:06 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x8000a0, 0x0, 0x7, 0x0, 0x2b8}) 13:23:06 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:06 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) unlink(0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:06 executing program 3: io_uring_setup(0x56f, &(0x7f0000000040)={0x80ffff, 0x0, 0x7, 0x0, 0x2b8}) 13:23:06 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:06 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0xfffffffffffffe56) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:06 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:07 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:07 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x18) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @default, 0x80000000}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) tkill(r2, 0x18) tkill(r2, 0x30) 13:23:07 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040), 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000028c0)=""/69, 0x45}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="160000001a0081aee4050c00000f00fe078bc36f0600", 0x16}], 0x1}, 0x0) 13:23:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) 13:23:07 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x209e1e, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) [ 380.762710][ T1045] INFO: task syz-executor.3:10502 can't die for more than 143 seconds. [ 380.771211][ T1045] syz-executor.3 D28128 10502 8999 0x00004004 [ 380.778099][ T1045] Call Trace: [ 380.781394][ T1045] __schedule+0x7cb/0x1560 [ 380.785876][ T1045] ? __sched_text_start+0x8/0x8 [ 380.790751][ T1045] schedule+0xa8/0x260 [ 380.794902][ T1045] schedule_timeout+0x717/0xc50 [ 380.799759][ T1045] ? wait_for_completion+0x294/0x440 [ 380.805149][ T1045] ? find_held_lock+0x35/0x130 [ 380.809924][ T1045] ? usleep_range+0x170/0x170 [ 380.814733][ T1045] ? kasan_check_write+0x14/0x20 [ 380.819676][ T1045] ? _raw_spin_unlock_irq+0x28/0x90 [ 380.824995][ T1045] ? wait_for_completion+0x294/0x440 [ 380.830299][ T1045] ? _raw_spin_unlock_irq+0x28/0x90 [ 380.835674][ T1045] ? lockdep_hardirqs_on+0x418/0x5d0 [ 380.840964][ T1045] ? trace_hardirqs_on+0x67/0x220 [ 380.846074][ T1045] ? kasan_check_read+0x11/0x20 [ 380.851031][ T1045] wait_for_completion+0x29c/0x440 [ 380.856224][ T1045] ? try_to_wake_up+0xc8/0x13f0 [ 380.861082][ T1045] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 380.867723][ T1045] ? wake_up_q+0xf0/0xf0 [ 380.871972][ T1045] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 380.877878][ T1045] kthread_stop+0x10b/0x6c0 [ 380.882378][ T1045] io_finish_async+0x73/0x140 [ 380.887131][ T1045] io_ring_ctx_wait_and_kill+0x133/0x5d0 [ 380.892905][ T1045] io_uring_release+0x42/0x50 [ 380.897588][ T1045] __fput+0x2ff/0x890 [ 380.901574][ T1045] ? io_ring_ctx_wait_and_kill+0x5d0/0x5d0 [ 380.907993][ T1045] ____fput+0x16/0x20 [ 380.911979][ T1045] task_work_run+0x145/0x1c0 [ 380.916723][ T1045] exit_to_usermode_loop+0x273/0x2c0 [ 380.922028][ T1045] do_syscall_64+0x58e/0x680 [ 380.926711][ T1045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.932659][ T1045] RIP: 0033:0x412f61 [ 380.936547][ T1045] Code: 84 3e 02 00 00 48 8b 08 48 8b 54 24 70 48 39 d1 0f 85 41 01 00 00 0f b6 48 17 f6 c1 40 0f 85 99 00 00 00 0f b6 0d 63 a7 3a 01 <84> c9 0f 84 80 00 00 00 48 8b 48 20 31 d2 31 db eb 04 48 83 c2 08 [ 380.956496][ T1045] RSP: 002b:00007ffc3d833a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 380.965010][ T1045] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000412f61 [ 380.973571][ T1045] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 380.981625][ T1045] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 380.989685][ T1045] R10: 00007ffc3d833b00 R11: 0000000000000293 R12: 00000000007604b0 [ 380.997705][ T1045] R13: 0000000000037e1c R14: 0000000000037e49 R15: 000000000075bf2c [ 381.005782][ T1045] INFO: task syz-executor.3:10502 blocked for more than 143 seconds. [ 381.013952][ T1045] Not tainted 5.2.0-rc3-next-20190604 #8 [ 381.020109][ T1045] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.028888][ T1045] syz-executor.3 D28128 10502 8999 0x00004004 [ 381.035697][ T1045] Call Trace: [ 381.039063][ T1045] __schedule+0x7cb/0x1560 [ 381.043582][ T1045] ? __sched_text_start+0x8/0x8 [ 381.048537][ T1045] schedule+0xa8/0x260 [ 381.052699][ T1045] schedule_timeout+0x717/0xc50 [ 381.057561][ T1045] ? wait_for_completion+0x294/0x440 [ 381.062936][ T1045] ? find_held_lock+0x35/0x130 [ 381.067718][ T1045] ? usleep_range+0x170/0x170 [ 381.072437][ T1045] ? kasan_check_write+0x14/0x20 [ 381.077440][ T1045] ? _raw_spin_unlock_irq+0x28/0x90 [ 381.082687][ T1045] ? wait_for_completion+0x294/0x440 [ 381.087960][ T1045] ? _raw_spin_unlock_irq+0x28/0x90 [ 381.093246][ T1045] ? lockdep_hardirqs_on+0x418/0x5d0 [ 381.098548][ T1045] ? trace_hardirqs_on+0x67/0x220 [ 381.103701][ T1045] ? kasan_check_read+0x11/0x20 [ 381.108574][ T1045] wait_for_completion+0x29c/0x440 [ 381.113792][ T1045] ? try_to_wake_up+0xc8/0x13f0 [ 381.118653][ T1045] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 381.125217][ T1045] ? wake_up_q+0xf0/0xf0 [ 381.129558][ T1045] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 381.135419][ T1045] kthread_stop+0x10b/0x6c0 [ 381.139914][ T1045] io_finish_async+0x73/0x140 [ 381.144644][ T1045] io_ring_ctx_wait_and_kill+0x133/0x5d0 [ 381.150311][ T1045] io_uring_release+0x42/0x50 [ 381.155043][ T1045] __fput+0x2ff/0x890 [ 381.159026][ T1045] ? io_ring_ctx_wait_and_kill+0x5d0/0x5d0 [ 381.165329][ T1045] ____fput+0x16/0x20 [ 381.169312][ T1045] task_work_run+0x145/0x1c0 [ 381.173973][ T1045] exit_to_usermode_loop+0x273/0x2c0 [ 381.179325][ T1045] do_syscall_64+0x58e/0x680 [ 381.184019][ T1045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.189921][ T1045] RIP: 0033:0x412f61 [ 381.193874][ T1045] Code: 84 3e 02 00 00 48 8b 08 48 8b 54 24 70 48 39 d1 0f 85 41 01 00 00 0f b6 48 17 f6 c1 40 0f 85 99 00 00 00 0f b6 0d 63 a7 3a 01 <84> c9 0f 84 80 00 00 00 48 8b 48 20 31 d2 31 db eb 04 48 83 c2 08 [ 381.213526][ T1045] RSP: 002b:00007ffc3d833a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 381.222024][ T1045] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000412f61 [ 381.230077][ T1045] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 381.238099][ T1045] RBP: 0000000000000000 R08: ffffffffffffffff R09: ffffffffffffffff [ 381.246203][ T1045] R10: 00007ffc3d833b00 R11: 0000000000000293 R12: 00000000007604b0 [ 381.254231][ T1045] R13: 0000000000037e1c R14: 0000000000037e49 R15: 000000000075bf2c [ 381.262228][ T1045] [ 381.262228][ T1045] Showing all locks held in the system: [ 381.270034][ T1045] 1 lock held by khungtaskd/1045: [ 381.275314][ T1045] #0: 000000007c362f49 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 381.284745][ T1045] 2 locks held by getty/8952: [ 381.289472][ T1045] #0: 00000000b509a1ff (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 381.298954][ T1045] #1: 00000000fc6b6971 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 381.308911][ T1045] 2 locks held by getty/8953: [ 381.313615][ T1045] #0: 00000000cdb9c4bb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 381.322757][ T1045] #1: 00000000fbd970c7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 381.332562][ T1045] 2 locks held by getty/8954: [ 381.337348][ T1045] #0: 00000000e1c41d92 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 381.346375][ T1045] #1: 00000000e38bd7be (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 381.356100][ T1045] 2 locks held by getty/8955: [ 381.360760][ T1045] #0: 000000002795116f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 381.369778][ T1045] #1: 00000000b42a923e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 381.379438][ T1045] 2 locks held by getty/8956: [ 381.384157][ T1045] #0: 0000000030e1d02b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 381.393242][ T1045] #1: 00000000ee2d7fcd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 381.402956][ T1045] 2 locks held by getty/8957: [ 381.407624][ T1045] #0: 0000000099f5db44 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 381.416648][ T1045] #1: 00000000de4fc978 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 381.426713][ T1045] 2 locks held by getty/8958: [ 381.431419][ T1045] #0: 0000000089a40d14 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 381.440459][ T1045] #1: 00000000ef04b21e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 381.450256][ T1045] [ 381.452675][ T1045] ============================================= [ 381.452675][ T1045] [ 381.461212][ T1045] NMI backtrace for cpu 0 [ 381.465610][ T1045] CPU: 0 PID: 1045 Comm: khungtaskd Not tainted 5.2.0-rc3-next-20190604 #8 [ 381.474510][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.484607][ T1045] Call Trace: [ 381.487960][ T1045] dump_stack+0x172/0x1f0 [ 381.492303][ T1045] nmi_cpu_backtrace.cold+0x63/0xa4 [ 381.497490][ T1045] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 381.503154][ T1045] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 381.509139][ T1045] arch_trigger_cpumask_backtrace+0x14/0x20 [ 381.515068][ T1045] watchdog+0xb88/0x12b0 [ 381.519305][ T1045] kthread+0x354/0x420 [ 381.523368][ T1045] ? reset_hung_task_detector+0x30/0x30 [ 381.529040][ T1045] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 381.535286][ T1045] ret_from_fork+0x24/0x30 [ 381.539838][ T1045] Sending NMI from CPU 0 to CPUs 1: [ 381.545305][ C1] NMI backtrace for cpu 1 [ 381.545310][ C1] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 5.2.0-rc3-next-20190604 #8 [ 381.545314][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.545316][ C1] Workqueue: bat_events batadv_nc_worker [ 381.545321][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x50 [ 381.545329][ C1] Code: 48 c7 05 2e b7 15 09 00 00 00 00 e9 a4 e9 ff ff 90 90 90 90 90 90 90 90 90 55 48 89 e5 48 8b 75 08 65 48 8b 04 25 c0 fd 01 00 <65> 8b 15 10 06 91 7e 81 e2 00 01 1f 00 75 2b 8b 90 e8 12 00 00 83 [ 381.545332][ C1] RSP: 0018:ffff8880a989fc68 EFLAGS: 00000292 [ 381.545337][ C1] RAX: ffff8880a98841c0 RBX: 0000000000035e80 RCX: ffffffff87059611 [ 381.545340][ C1] RDX: 0000000000000000 RSI: ffffffff83365200 RDI: 0000000000000001 [ 381.545343][ C1] RBP: ffff8880a989fc68 R08: ffff8880a98841c0 R09: ffffed1015d26be8 [ 381.545346][ C1] R10: ffffed1015d26be7 R11: ffff8880ae935f3b R12: 0000000000000001 [ 381.545350][ C1] R13: 0000000000000299 R14: 0000000000000000 R15: dffffc0000000000 [ 381.545353][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 381.545356][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.545359][ C1] CR2: ffffffffff600400 CR3: 00000000959e2000 CR4: 00000000001406e0 [ 381.545361][ C1] Call Trace: [ 381.545363][ C1] debug_smp_processor_id+0x10/0x280 [ 381.545366][ C1] rcu_dynticks_curr_cpu_in_eqs+0x17/0xb0 [ 381.545368][ C1] rcu_is_watching+0x10/0x30 [ 381.545370][ C1] batadv_nc_worker+0x485/0x760 [ 381.545372][ C1] process_one_work+0x989/0x1790 [ 381.545375][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 381.545377][ C1] ? lock_acquire+0x16f/0x3f0 [ 381.545379][ C1] worker_thread+0x98/0xe40 [ 381.545381][ C1] kthread+0x354/0x420 [ 381.545383][ C1] ? process_one_work+0x1790/0x1790 [ 381.545386][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 381.545388][ C1] ret_from_fork+0x24/0x30 [ 381.546175][ T1045] Kernel panic - not syncing: hung_task: blocked tasks [ 381.739713][ T1045] CPU: 0 PID: 1045 Comm: khungtaskd Not tainted 5.2.0-rc3-next-20190604 #8 [ 381.748462][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.758620][ T1045] Call Trace: [ 381.761966][ T1045] dump_stack+0x172/0x1f0 [ 381.766292][ T1045] panic+0x2cb/0x744 [ 381.770192][ T1045] ? __warn_printk+0xf3/0xf3 [ 381.774780][ T1045] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 381.780461][ T1045] ? ___preempt_schedule+0x16/0x18 [ 381.785578][ T1045] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 381.791734][ T1045] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 381.797882][ T1045] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 381.804044][ T1045] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 381.810200][ T1045] watchdog+0xb99/0x12b0 [ 381.814457][ T1045] kthread+0x354/0x420 [ 381.818609][ T1045] ? reset_hung_task_detector+0x30/0x30 [ 381.824454][ T1045] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 381.830734][ T1045] ret_from_fork+0x24/0x30 [ 381.836445][ T1045] Kernel Offset: disabled [ 381.840784][ T1045] Rebooting in 86400 seconds..