[info] Using makefile-style concurrent boot in runlevel 2. [ 23.713317] audit: type=1800 audit(1539387166.476:21): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 23.741210] audit: type=1800 audit(1539387166.486:22): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.84' (ECDSA) to the list of known hosts. 2018/10/12 23:33:00 fuzzer started 2018/10/12 23:33:02 dialing manager at 10.128.0.26:40655 2018/10/12 23:33:02 syscalls: 1 2018/10/12 23:33:02 code coverage: enabled 2018/10/12 23:33:02 comparison tracing: enabled 2018/10/12 23:33:02 setuid sandbox: enabled 2018/10/12 23:33:02 namespace sandbox: enabled 2018/10/12 23:33:02 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/12 23:33:02 fault injection: enabled 2018/10/12 23:33:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/12 23:33:02 net packed injection: enabled 2018/10/12 23:33:02 net device setup: enabled 23:35:46 executing program 0: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x8, [0x100000000, 0x20, 0xfffffffffffffffc, 0x796, 0x6, 0xc2, 0x8, 0xffffffffffffffff]}, &(0x7f0000000080)=0x14) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sysfs$2(0x2, 0x7fff, &(0x7f0000000100)=""/42) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x44) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x10000, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000240)) sched_yield() getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000013c0)={'nat\x00', 0x0, 0x3, 0x1000, [], 0xa, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=""/4096}, &(0x7f0000001440)=0x78) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r3, 0x1a, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000040) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r3, 0xb00, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000016c0)={"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"}) sync_file_range(r2, 0x2, 0x1ff, 0x1) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000001ac0)) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x80, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfb}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc800000000000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x12}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4010) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000001c40)={0x3, {{0xa, 0x4e22, 0x8, @loopback, 0x3}}, {{0xa, 0x4e23, 0x5, @empty, 0x401}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001dc0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)=@deltfilter={0x70, 0x2d, 0x1, 0x70bd28, 0x25dfdbff, {0x0, r4, {0xb, 0xe}, {0xfff3, 0xffff}, {0x1, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x1f}, @TCA_RATE={0x8, 0x5, {0x4, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_RATE={0x8, 0x5, {0x8001, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001f00)=0x10001, 0x4) clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) utimes(&(0x7f0000001f40)='./file0\x00', &(0x7f0000001fc0)={{r5, r6/1000+10000}, {0x77359400}}) fcntl$getownex(r0, 0x10, &(0x7f0000002000)={0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r0, 0x50, &(0x7f0000002040)}, 0x10) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002100)='/dev/dsp\x00', 0x400000, 0x0) write$P9_RCLUNK(r8, &(0x7f0000002140)={0x7, 0x79, 0x1}, 0x7) sched_getattr(r7, &(0x7f0000002180), 0x30, 0x0) getsockname$inet(r8, &(0x7f00000021c0)={0x2, 0x0, @rand_addr}, &(0x7f0000002200)=0x10) readlinkat(r8, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)=""/130, 0x82) syzkaller login: [ 203.903551] IPVS: ftp: loaded support on port[0] = 21 23:35:46 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x5, 0x8}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'lo\x00'}) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="32bdffe86e067cc80c4a209bccb9b37ac289b557492b14f938de805099a5643bda4ddb1e0beb20ddc46bef7c33cfa0b6e6ca623d280a826de950aec5060bd56b5dd33d49bd6cde4b1cfa34925971200abba21e73ff0367b4123fc7ec5e556f5344f747e6c747009fe8d8124d154cb5f10404cbb64f955072164b0beba41ecb74e9c3906b3e4580029bfbdb8afea1e011bb0158c91d91fba8aec14a672acea03781ab03f546ce9675121789985672572c1ce64b66d11c416456fa6ec09757990d7f3876c1f724e67704b073", 0xcb}, {&(0x7f0000000180)="e99180efbd48b189b31449dc5562b345f0ac837578a70e36b1ee28bd12db22fe8d27129a635147e6fb4d2d65d8d3281c2325944944748a3ee9818be0c7ec623f12949348e7b3f21aa741472252b72023f48adee14ee02ca5edb57096a73a8fe2f7f93e448b1041a3224cca39a40dce9fae", 0x71}], 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001280)={@broadcast, @empty, 0x0}, &(0x7f00000012c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001380)={{{@in=@multicast1, @in=@rand_addr=0x7fff, 0x4e20, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0x20, 0x3b, r1, r3}, {0x2db, 0x21, 0x3ff, 0x7, 0x800000, 0x3, 0x3, 0x3}, {0x8, 0x200, 0x400}, 0x0, 0x6e6bb3, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d5}, 0xa, @in=@multicast2, 0x3503, 0x7, 0x0, 0x2, 0xf39f, 0x3, 0x800}}, 0xe8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001480)='/dev/null\x00', 0x40000, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)={&(0x7f00000014c0)='./file0\x00', 0x0, 0x10}, 0x10) r7 = add_key(&(0x7f0000001540)='syzkaller\x00', &(0x7f0000001580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$user(&(0x7f00000015c0)='user\x00', &(0x7f0000001600)={'syz', 0x0}, &(0x7f0000001640)="8404ca99eb38f5bd9ad523a34fbb57e5e7a22f9d267d7ffbb786b31a9ca64bbabc5b421e551dd8f48c507f01e49227c1ae1c0d51f1d992c94a5d7457ec03147fd47b95ebc8aad3a49ea19e17d8b92955749f578023485b500aa9a88ea0a5a0b19a426453421c7472b34f8ed04322bd8710045f36543a99c67c88e52c4ed19db29e494de4b2dc8a4bd9c1378cc54024895e884734bbe0b56f61cba33e7aa9b0ef644f87771ee8a977629894cc0c6a2d8042641a29ebfc78949bde90483d40ee51152b87b0c200dd76d7672673bfc3a6bd56062765c0454532c630fb4e066aa0b9bfa5cf316566cdb971c67df8", 0xec, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001740)={r7, 0x0, r8}, &(0x7f0000001780)=""/97, 0x61, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001800)='/dev/vga_arbiter\x00', 0x202101, 0x0) mount$9p_fd(0x0, &(0x7f0000001840)='./file0\x00', &(0x7f0000001880)='9p\x00', 0x80, &(0x7f00000018c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '/dev/null\x00'}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@fscache='fscache'}, {@version_9p2000='version=9p2000'}, {@noextend='noextend'}, {@fscache='fscache'}, {@loose='loose'}, {@cache_mmap='cache=mmap'}, {@access_client='access=client'}], [{@appraise='appraise'}, {@obj_user={'obj_user', 0x3d, 'lo\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@dont_hash='dont_hash'}]}}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000019c0)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000001a00)={0x2, 0x4e22, @local}, 0x10) move_pages(r2, 0x5, &(0x7f0000001a40)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000001a80)=[0x4669d33a, 0x3f, 0x9], &(0x7f0000001ac0)=[0x0, 0x0], 0x2) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000001b00)={0x9, 0xfa9, 0x6, 0x0, 0x9}) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000001b40)=0x7fffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001c40)={0x8, 0x0, &(0x7f0000001b80)=[@register_looper, @exit_looper], 0x4d, 0x0, &(0x7f0000001bc0)="9b7f5cfa589f7979ce5cbdde72b4f0e8e4f22f59d3a1dd10c092f0eee04823dae787ad0790a9808df40228e76691f902ea12e2f96f68266eb19e63f720a3448cf72b762258bcf43b4049498c92"}) fsetxattr$security_evm(r0, &(0x7f0000001c80)='security.evm\x00', &(0x7f0000001cc0)=@v2={0x5, 0x0, 0xe, 0x6, 0x8b, "a1c5f6fa39a815bde1bedcfdc5bab4c9a43a0fb49475da5836eb9e2b9f6af90cf6f878bf7aaf4dc588ce03bd219bb4ab7b677ce4d24d60fb20ec8cac56fefe85df4db1e216484f622c26c3332fcb9d657945d9fea2095f39fd1328c3d85518bac1798c462aa2bf164a5c53102f416d6276fd2686b1222cb99e8d8761f45d933e196f02712921e09e9e8c24"}, 0x95, 0x1) shutdown(r5, 0x0) write$sndseq(r5, &(0x7f0000001dc0)=[{0x8001, 0x2, 0x9, 0x40, @tick=0x11, {0x3, 0x7ff}, {0x5, 0x6}, @note={0x7, 0x78c, 0x78, 0x7, 0x40}}, {0xffff, 0x200, 0x0, 0x4, @tick, {0x7, 0x1f}, {0x80000000, 0x1ff}, @connect={{0xfffffffffffff891, 0x4deef023}, {0x4, 0xfffffffffffffffd}}}, {0x9, 0x7f, 0x8e, 0xbadc, @time={0x0, 0x989680}, {0x8}, {0x8, 0x7}, @result={0x100000000, 0x9}}, {0xfff0, 0x9, 0x688, 0x0, @tick=0x6, {0x1, 0xfffffffffffffff9}, {0x3, 0x8}, @queue={0x1ff, {0x101, 0x6}}}, {0x7, 0x4, 0x3, 0x0, @time={0x0, 0x989680}, {0x5, 0x8}, {0x0, 0x10001}, @addr={0xfff, 0x6}}, {0x3, 0x0, 0x6, 0x3, @time={0x0, 0x1c9c380}, {0x1, 0x413}, {0x400, 0x7}, @ext={0xf, &(0x7f0000001d80)="8a666d79534e73ea4e56f2c70b0ff9"}}], 0x120) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000001f00)=0x7) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000001f40)=""/159) fcntl$setpipe(r5, 0x407, 0x10001) write$sndseq(r5, &(0x7f0000002080)=[{0xc3f6, 0x8000, 0x10001, 0x1, @tick=0x800, {0x1f, 0x8}, {0x2, 0xe733}, @quote={{0x8000, 0x4}, 0x6, &(0x7f0000002040)={0x282, 0x3f, 0x5, 0x9, @time, {0x3, 0x6}, {0x7f, 0x1f}, @quote={{0x2a7, 0x200}, 0xfffffffffffffffe, &(0x7f0000002000)={0xfffffffffffffdb9, 0x6, 0x5, 0x80, @tick=0x7, {0x3, 0xd}, {}, @note={0x2, 0x100, 0x6, 0x7, 0x3}}}}}}, {0x0, 0x100, 0x1f, 0x4, @tick=0x6, {0x6, 0x8}, {0x1, 0x400}, @time=@time}, {0x1, 0x67, 0xfff, 0x10001, @tick=0x3f, {0x8}, {0xc2, 0x80000001}, @queue={0x101, {0x0, 0x9}}}, {0x0, 0x76e, 0x1, 0x1ff, @tick=0xfffffffffffffff8, {0x1ff, 0x40}, {0x22, 0x1}, @queue={0x194, {0x7, 0x7fff}}}, {0x9, 0x1211, 0x4, 0xfffffffffffffff7, @time={0x0, 0x989680}, {0x5, 0x9}, {0x80000000, 0x7f}, @raw8={"449138e5d400973d13c89137"}}, {0xffffffffffffffe0, 0x6, 0x6, 0x9, @time={0x77359400}, {0x5, 0x5}, {0x6}, @connect={{0x100000000, 0x1}, {0x3f, 0x8}}}], 0x120) write$P9_RAUTH(r9, &(0x7f00000021c0)={0x14, 0x67, 0x2, {0x40, 0x0, 0x8}}, 0x14) ioctl$TIOCSCTTY(r0, 0x540e, 0x9) write$smack_current(r5, &(0x7f0000002200)='user\x00', 0x5) [ 204.052466] IPVS: ftp: loaded support on port[0] = 21 23:35:46 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000840)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000900)={r9}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000940)={0x4, 0x8, 0x10000, 0x3cc1d285, 0x80000000, 0x3f, 0x2, 0xffffffff, 0x5, 0xd4}) fcntl$setflags(r4, 0x2, 0x1) syz_open_dev$loop(&(0x7f0000000980)='/dev/loop#\x00', 0x1000, 0x10000) [ 204.223764] IPVS: ftp: loaded support on port[0] = 21 23:35:47 executing program 3: clone(0x800000, &(0x7f0000000000)="46e365d36c43ab14b471af171ea167ae8ce3ef300f3fd7896f0f0f5421ff13aa4ed5c4d3d1163f91486a155df0216872fa197c58b2234c70e0becaad402df57a2a680ea2d07a5434e5f0628d5c3279c106f61723535a4110899e44c25e244105cc539adb9907dc699bea7f27ce12b7186f1ac9f62ab870cd053a9f2bd9b066d396dea84c114f829dad9ff22b923af8e05d342bba7d9f00569074d8186125ac27d2611e2a092b1d4146af63acf64d9e2c50", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="6acd5d76698ebf5ae6df7a4880f0ab") r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x204801, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) fstatfs(r0, &(0x7f00000001c0)=""/120) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x400, 0x0) getpeername$unix(r2, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) ioctl$TIOCSBRK(r2, 0x5427) r3 = eventfd(0xfffffffffffffff9) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000380)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000004c0)=0x2, 0x8) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e24, @remote}, 0x10) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000540)={0x3, r3}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000580)={0x2, 0x4e22, @remote}, 0x10) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000005c0)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000640)) r5 = gettid() sched_getscheduler(r5) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000006c0)=0x2, 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000700)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000740)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000780)={r6, r7, 0x5}) lsetxattr$security_smack_entry(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='security.SMACK64MMAP\x00', &(0x7f0000000840)='/dev/md0\x00', 0x9, 0x1) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000880)={0xe, 0x3, 0x4, 0x7, 0x32, "3d56fdabfc64da79bbb83344e4e940b8a9465767772cd1c4b509af021caaf21de92566679c725fc59527711211f0a6c5b8db"}, 0x3e) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000008c0)={{0x5, 0x5b3, 0xe4a, 0x101, 0x0, 0x7}, 0x93f}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000900)=0x100) splice(r4, &(0x7f0000000940)=0x52, r1, &(0x7f0000000980), 0x1, 0x1) write$P9_RATTACH(r2, &(0x7f00000009c0)={0x14, 0x69, 0x2, {0x80, 0x3, 0x7}}, 0x14) [ 204.452382] IPVS: ftp: loaded support on port[0] = 21 23:35:47 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x5) r1 = open(&(0x7f0000000080)='./file0\x00', 0xc00, 0x42) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendfile(r1, r0, &(0x7f00000000c0), 0x400) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x108, 0x0, 0x1, "50b4ff7abdbc2c4a9c0dea45b073d80e", "84e25618f83a62b4568dcac1ed28117ddd9297b2f969d0e587fe4f5a25e38896f5484d0544617789878b479d7d1069f0c6bd250e875bfb1d3d00e4e889c46963a687e57a8b69fa112af14b273ea9a1b8f976eba53d08354998751c5b2af0be4f4055526771a986ecc65d3b83727d971a4b3a6b04cfc3df9718006d16f0af95540e78bc607151fbb30888609e4e2f62ddd41a8548fc75f1c2aef98dcd88f308983f6960794da883bc3618c6826b9586710dac024599ed594cea52e49e0b1f085c5d3ecf2e6b055655d9f213cb746f1b2cfbe0748a2835df523c9fd33b3cf48f78ad51ed73ffc009cec0fad83117b97587d4f11b"}, 0x108, 0x1) r2 = fcntl$getown(r1, 0x9) process_vm_writev(r2, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/162, 0xa2}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)=""/78, 0x4e}, {&(0x7f0000000580)=""/138, 0x8a}, {&(0x7f0000000640)=""/200, 0xc8}, {&(0x7f0000000740)}], 0x7, &(0x7f0000000880)=[{&(0x7f0000000800)=""/70, 0x46}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000008c0)={0x0, 0xb, "727565fbcce4949de33291"}, &(0x7f0000000900)=0x13) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000940)={0xe66, 0x5, 0x4, 0x3f, 0x9, 0x3, 0x0, 0x1, r3}, &(0x7f0000000980)=0x20) getxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)=@random={'os2.', 'trusted.overlay.upper\x00'}, &(0x7f0000000a40)=""/211, 0xd3) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000b40)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000b80)={0x3, 0xfffffffffffffc4f}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000bc0)={0x66, 0x56}) getsockname$packet(r1, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e00)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000f40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0xc040}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)=@delqdisc={0xa8, 0x25, 0x204, 0x70bd27, 0x25dfdbfe, {0x0, r4, {0xb, 0xffe0}, {0xfff3, 0xe}, {0x10, 0xf}}, [@TCA_STAB={0x74, 0x8, [@TCA_STAB_DATA={0x4}, @TCA_STAB_DATA={0xc, 0x2, [0x2, 0x8, 0x2, 0x5]}, @TCA_STAB_DATA={0x18, 0x2, [0x3, 0xf9c, 0x9, 0x1, 0x400, 0x1ff, 0x3, 0x80000001, 0xdb5]}, @TCA_STAB_DATA={0x10, 0x2, [0x9, 0x5, 0xfffffffffffff001, 0x8, 0x9]}, @TCA_STAB_BASE={0x1c, 0x1, {0x12d8, 0x800, 0x383, 0x2, 0x2, 0x7, 0x7, 0x2}}, @TCA_STAB_BASE={0x1c, 0x1, {0x1e90, 0x2, 0x5, 0x8, 0x0, 0x9, 0xff, 0x2}}]}, @TCA_RATE={0x8, 0x5, {0x800, 0xd58}}, @TCA_RATE={0x8, 0x5, {0xa1ab, 0x81}}]}, 0xa8}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000f80)={0x13, 0x2, 0x7ff}) flistxattr(r1, &(0x7f0000000fc0)=""/4096, 0x1000) timer_create(0x0, &(0x7f0000003000)={0x0, 0x19, 0x0, @thr={&(0x7f0000001fc0)="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", &(0x7f0000002fc0)="6f9652281df1d9882ed5b64bbb3177fb08c6d242c1c0deffd33cb5b1a2caa7ce63a13430629c68"}}, &(0x7f0000003040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000003080), &(0x7f00000030c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003100)={'team0\x00', r4}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000003140)=[@in6={0xa, 0x4e23, 0x4, @mcast2, 0x7}, @in6={0xa, 0x4e23, 0x3, @empty, 0x4}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e21, 0x7fff, @mcast2, 0x200}], 0x64) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000031c0)={r3, 0xdb, 0x10}, &(0x7f0000003200)=0xc) fchdir(r1) write$tun(r0, &(0x7f0000003240)={@void, @void, @ipv4={{0xc, 0x4, 0x101, 0x353, 0x2ce, 0x65, 0x464c, 0x5, 0x0, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x14, 0x80000000, [{0x7, 0x5, "fbbb40"}, {0x1, 0x7, "1873cb18bf"}, {0x7, 0x2}]}, @lsrr={0x83, 0x7, 0x6, [@multicast1]}, @end]}}, @gre={{0x0, 0x0, 0x1, 0x2, 0x0, 0x3f, 0x0, 0x1, 0x880b, 0x86, 0x3, [0x200, 0x400], "4bd3593ff18f6740fccfba8ad1360a209d89a762421d4a967f61b11bcf6e85951ea72a22c26fe3db4e3a4768df7617d5aea4defd917f6be0a8e863467339f6db1a33741c83f307450fc42c6f6dd36cf3eb68a37df0c0238c3d467556c9791eee19e597c7a69855b32950f07f340127f91a1468d5d93d5f26f234c3020534dd662914a166b0c5"}, {0x6f, 0x0, 0xbd, 0x8, 0x0, 0x0, 0x800, [0x0, 0x2], "9a7316b3576db88e89b5c9b91215725c9aee43b817131bafb38abd02a15c7466cec02d97930ebddb68325c299a36b9fe6d0f403b676736373266516d0f03bf04b61e4d77d945d5a607576aaa232966fff6de04da82af525e5970a13ef677af329f8db5ae1a6f597ef088442e53f5142e59c8b55d3d8b9bf72a21245f28127711d537f86805c7f65cbae2a1b04755fca6fe5f782186a6f508aa0a14a67a71178dc619a998a978d49e40382cbf465c2c3d96224cd09ffa5a42f81e2bec"}, {0x6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x86dd, [0x1], "58f67f7c6b054cf48851a2fa15ba03b40f42577e76b047040714a4e7201adc212508ee69d1bea21e274eca31ab8c767eb4ca65cda80b427b2cce942f446f68a3594cb96f00dfbabeb3bb8a0dabc2441be2166e09b22e69494684e0251e4936e924470fad94bcf9b0933d1a518a676dd8adf0ec426deb4ad6ca483cc15cbe91d1ea93f2f4a8bbeabedece16bb678b8d5468fad8b325778b2172a080f11a570c8a5f2be28b6c83176d4083006f6632f29e9f3dcdd009a45a6bddeda11cc422bd06898a7d2897e5f3964190bb58978c78151d23c016b0fa7f06220fa28164f93503735c6f"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x2, 0x7, 0x5, 0x9, 0xfffffffffffffffe, 0x7fff}, 0x1, 0x9}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x65fed52e, 0xeaea, 0xfffffffffffff8a8, 0x1, 0x4, 0xfffffffffffffbff}, 0x2, 0x81, 0x6, 0xfffffffffffff627, 0x8, 0x0, 0x8001, 0x881, 0xffffffffffffffe4, 0x7fff}}, {0x8, 0x6558, 0x0, "9f73b3384e9907d0ded032d7a8185905e89eeb60ad37449f8897e12b2dc4257b982011eccfd42b15de7441"}}}}, 0x2ce) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000003540)) open_by_handle_at(r0, &(0x7f0000003600)={0xc9, 0x1, "bd4bfca5dbc9d8dc530164c3fd3eed4b00ecb4e5be97835619f7a670690e54efa7600519309798c3b92277de89d000199ef926a81f480f34e482c6196866df05398d515e01f6aa77893435124afa07c8f38b269c8173699cc574c279c3bf5e7940111b98682cbad03fcc239bd5051930e7fd444ceb572b58ace4cc485970f64c3bdeef7093e7fcef1a1314f16c968abcbd5b70fdc8a0bf9005bb2b6ce90be6e74062d5ca5f25c8a660b0c0b211857a3983230b0b2416e0d6ef9de423b9273c8109"}, 0x802) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000003700)={0x1f, 0x10001, 0x3, 0x3, 0x19, 0x7}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000003740)='/dev/full\x00', 0x100, 0x0) ioctl$int_out(r5, 0x2, &(0x7f0000003780)) [ 204.876166] IPVS: ftp: loaded support on port[0] = 21 [ 204.950283] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.958043] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.965772] device bridge_slave_0 entered promiscuous mode 23:35:47 executing program 5: r0 = fanotify_init(0x1, 0x1400) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101002, 0x0) r2 = getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10000, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000000c0)) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="42c583ab567038de30f01cbbc6f439e6244d6414c44b4ffc223041a128d86e13676fb87aa733fe766d9909edd8c355b5d86c0d1d553351d4decc4b0459609ae3361b38096e17bc6979cf8eab0b60bd1df29038d0b5f87952f57d6507feafbae6c81bb1c7889599b266a722dcccf72d9ecdb59bc499be835183a8e424d8ccd7144aca617d3f99399b9e1edd1768768dba5272afcc64a4d6c88a3324ce93b3141d01eccad0d80d97") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) r5 = accept$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000280)=0x60) write$P9_RXATTRWALK(r1, &(0x7f00000002c0)={0xf, 0x1f, 0x2, 0x1}, 0xf) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000300), 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000380)={{0x2, 0x7, 0x283e, 0x80000000, 'syz0\x00', 0x2}, 0x0, 0x10, 0x5, r4, 0x3, 0x8, 'syz0\x00', &(0x7f0000000340)=[',mime_typemd5sumppp0user-\x00', '&$GPLvmnet1\x00', '/dev/vcs\x00'], 0x2f, [], [0x7bf6, 0x5, 0x9, 0x3a]}) sched_setscheduler(r4, 0x2, &(0x7f00000004c0)=0x401) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000500)=0xfffffffffffffffa, 0x4) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000540)={{0x2, 0x4e24, @broadcast}, {0x307, @random="05fd52375612"}, 0x10, {0x2, 0x4e21, @loopback}, 'ifb0\x00'}) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f00000005c0)=0x6, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000600)='/dev/vcs\x00') socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000640)) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000680)={0x6, 0x10000, 0x0, 0x8, 0x80000000, 0x1ff}) getsockopt$inet6_opts(r3, 0x29, 0x3f, &(0x7f00000006c0)=""/188, &(0x7f0000000780)=0xbc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000007c0)) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000800)={0x7, 0x2, 0x0, [{0x80, 0x3, 0x1, 0x2, 0x64f, 0x7, 0x6}, {0x3, 0x9e, 0x8, 0xae, 0x4, 0x8, 0x2}]}) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f00000008c0)) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x1ff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x3, 0x5, 0x6, 0x4, 0x8000000100000000}, &(0x7f0000000a00)=0x98) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000a40)=@sack_info={r6, 0x3, 0x100000000}, 0xc) fstat(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000b00)={0xe6f, 0x800, r2, 0x9afa, r7, 0x0, 0xdd9, 0x5}) mkdir(&(0x7f0000000b40)='./file0\x00', 0x6be3506021ba6af) [ 205.140190] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.177793] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.199468] device bridge_slave_1 entered promiscuous mode [ 205.323852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 205.410264] IPVS: ftp: loaded support on port[0] = 21 [ 205.458978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 205.663981] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.672516] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.680246] device bridge_slave_0 entered promiscuous mode [ 205.758000] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.764636] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.782936] device bridge_slave_1 entered promiscuous mode [ 205.792278] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 205.802931] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.814344] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.822639] device bridge_slave_0 entered promiscuous mode [ 205.843114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 205.858329] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 205.895122] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.916599] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.923668] device bridge_slave_1 entered promiscuous mode [ 205.967384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 206.005972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.048847] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.055359] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.062560] device bridge_slave_0 entered promiscuous mode [ 206.084985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 206.170762] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.196543] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.203508] device bridge_slave_1 entered promiscuous mode [ 206.218297] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.259487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.300164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.319482] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.344294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 206.364567] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 206.377346] team0: Port device team_slave_0 added [ 206.412116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.432660] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.441765] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.457259] device bridge_slave_0 entered promiscuous mode [ 206.466351] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 206.478315] team0: Port device team_slave_1 added [ 206.538322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 206.545274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.558408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.570780] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.577303] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.584700] device bridge_slave_1 entered promiscuous mode [ 206.594290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 206.613047] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.652462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.666973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 206.684893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 206.700573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.725661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.747909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.768881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.778974] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 206.797807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.816607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.842027] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.868358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 206.938181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 206.945634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.963381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.010401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.021565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.049634] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.056088] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.064065] device bridge_slave_0 entered promiscuous mode [ 207.073905] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.097686] team0: Port device team_slave_0 added [ 207.172333] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.181955] team0: Port device team_slave_0 added [ 207.189490] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.195858] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.213874] device bridge_slave_1 entered promiscuous mode [ 207.234838] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.249191] team0: Port device team_slave_1 added [ 207.267279] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.291043] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.314357] team0: Port device team_slave_1 added [ 207.350156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 207.396985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.422532] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.448199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.486841] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.493946] team0: Port device team_slave_0 added [ 207.513193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 207.533853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 207.557194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.565085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.577853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.586541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.602730] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.620191] team0: Port device team_slave_1 added [ 207.632563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 207.651399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.667754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.697657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.707893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 207.714993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.727402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.746926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.760061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 207.806669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.814324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.823624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 207.881155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 207.906883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.926999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.937463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.951363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.963287] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.974145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 207.986230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 208.013069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 208.027248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.035149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.085568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.099804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.147358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 208.154474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.177701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.280869] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.307270] team0: Port device team_slave_0 added [ 208.314814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 208.335558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.351533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.427243] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.451147] team0: Port device team_slave_1 added [ 208.552740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.568546] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.575076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.582136] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.588573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.597938] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 208.606835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.625473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.653811] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.667158] team0: Port device team_slave_0 added [ 208.724812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 208.747810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.755869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.810353] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.847573] team0: Port device team_slave_1 added [ 208.903187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 208.916829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.934344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.952093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.967666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.984170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.038729] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 209.045862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.065121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.097355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 209.124810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.133837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.263485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 209.271761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.297831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.377116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 209.384255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.393160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.410310] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.416723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.423382] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.429811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.439032] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 209.526866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.537450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.577265] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.583670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.590407] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.596820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.608484] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 209.722056] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.728536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.735220] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.741649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.755825] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 210.451951] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.458418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.465122] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.471579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.489013] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 210.566580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.573654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.588123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.714213] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.720704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.727340] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.733677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.753990] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 211.607800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.860288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.308895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.378756] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.425798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.603604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.631070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.764168] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.787208] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 213.793547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.807389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.069553] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 214.118993] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 214.125188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.133915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.282939] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.300377] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 214.336756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.343910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.419440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.530036] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 214.546614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.553483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.567601] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.703219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.790499] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.899845] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 214.988437] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.228896] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 215.381376] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.388743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.397322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.595321] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.617398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.625490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.776616] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.047727] 8021q: adding VLAN 0 to HW filter on device team0 23:35:59 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0xfffffffffffffffe) 23:35:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)="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", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000700)}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[{0x4, 0x3}, {0x3, 0x6}, {0xa, 0xd858}, {0xb, 0x9}], 0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6022, 0xffffffffffffffff) 23:35:59 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000840)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000900)={r9}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000940)={0x4, 0x8, 0x10000, 0x3cc1d285, 0x80000000, 0x3f, 0x2, 0xffffffff, 0x5, 0xd4}) fcntl$setflags(r4, 0x2, 0x1) syz_open_dev$loop(&(0x7f0000000980)='/dev/loop#\x00', 0x1000, 0x10000) [ 216.801435] hrtimer: interrupt took 25729 ns 23:35:59 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000840)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000900)={r9}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000940)={0x4, 0x8, 0x10000, 0x3cc1d285, 0x80000000, 0x3f, 0x2, 0xffffffff, 0x5, 0xd4}) fcntl$setflags(r4, 0x2, 0x1) syz_open_dev$loop(&(0x7f0000000980)='/dev/loop#\x00', 0x1000, 0x10000) [ 216.883308] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) 23:35:59 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000840)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000900)={r9}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000940)={0x4, 0x8, 0x10000, 0x3cc1d285, 0x80000000, 0x3f, 0x2, 0xffffffff, 0x5, 0xd4}) fcntl$setflags(r4, 0x2, 0x1) syz_open_dev$loop(&(0x7f0000000980)='/dev/loop#\x00', 0x1000, 0x10000) 23:35:59 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000840)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000900)={r9}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000940)={0x4, 0x8, 0x10000, 0x3cc1d285, 0x80000000, 0x3f, 0x2, 0xffffffff, 0x5, 0xd4}) fcntl$setflags(r4, 0x2, 0x1) 23:35:59 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000840)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000900)={r9}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000940)={0x4, 0x8, 0x10000, 0x3cc1d285, 0x80000000, 0x3f, 0x2, 0xffffffff, 0x5, 0xd4}) 23:36:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x5, 0x24400) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xfa, "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"}, &(0x7f0000000280)=0x102) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r2, 0xf54f, 0x30}, &(0x7f0000000300)=0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={r3, 0x6}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000380)={0x2c, 0x6, r5, 0x25}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:36:00 executing program 1: getpgrp(0xffffffffffffffff) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)) getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) getpid() fcntl$getown(0xffffffffffffffff, 0x9) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000006c0)={0x0, @empty, @rand_addr}, &(0x7f0000000700)=0xc) sendmsg(r1, &(0x7f00000008c0)={&(0x7f0000000740)=@xdp={0x2c, 0x3, r2, 0x3a}, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)="28c5021a528958f5a3fcc770230f792aba7786cf5f8946eaa775cd0b642024b5e640ceda4b5decc579d6323c1222718dc61ab6dab97e15dddae04f0d1d1f22fdc59487daef", 0x45}, {&(0x7f0000000840)="c0556cc45ce8ebc1e8585495315bf08e8ee8fc67517341859452c47da67ca3201cffebe2c6d01fca3ff88efb6c62863eedb0168faac103", 0x37}], 0x2}, 0x40000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x9631783316a638fa) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe94b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5) r4 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000)=0x39044, 0x2000005) 23:36:00 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000840)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000900)={r9}) 23:36:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000080), &(0x7f0000000100)=0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 23:36:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc0000000000002, &(0x7f0000000140)=0x75, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x4b33, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed\x00', 0xa) recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="62000000fad495125f6f5252ecdab874d72a6ed6de5211289bd430f241cd7d08aaa642ea2b14af39aa0bde77c302772286d8b75cb13f1c7da613d05fb103c649f112192b08d8198ca769111401416449472f5199642b700d94261ec6451605a1fc29c54d3423a5d9d9db42b3fe3d670923775a"], &(0x7f0000000100)=0x6a) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0x7}, 0x8) mincore(&(0x7f0000fea000/0x14000)=nil, 0x14000, &(0x7f0000000240)=""/4) 23:36:00 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/9, 0x9}], 0x4, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xbf, 0x8a, 0x798c9cb2, 0x5, 0x43}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x2, 0x7fffffff}]}, 0xc, 0x3) writev(r3, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r2, r1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 23:36:00 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000840)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}]}) 23:36:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)="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", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000700)}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[{0x4, 0x3}, {0x3, 0x6}, {0xa, 0xd858}, {0xb, 0x9}], 0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6022, 0xffffffffffffffff) 23:36:00 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x4200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)={0x6, 0x4, 0x5, 0x7}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r2, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000040)=""/91, &(0x7f00000000c0)=0x5b) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'erspan0\x00', {0x2, 0x4e23, @local}}) socketpair$inet6(0xa, 0x805, 0x1f, &(0x7f0000000140)) 23:36:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x80000004, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 23:36:00 executing program 3: clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{r1, r2/1000+30000}}) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x1, 0x0) r3 = getpid() setxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64MMAP\x00', &(0x7f0000000200)='eth0em1wlan0}+eth0\x00', 0x13, 0x2) sched_setscheduler(r3, 0x5, &(0x7f0000000000)) prctl$intptr(0x23, 0x0) 23:36:00 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000840)) 23:36:00 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000800)) 23:36:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000007700)={&(0x7f0000000000), 0xc, &(0x7f00000076c0)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x7, 0x1, 0x81, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x6, 0x40, 0x3, 0x9, 0x6, 0x3}]}) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x2200000, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x3a498000000}}, {@mode={'mode', 0x3d, 0x7}}], [{@fowner_gt={'fowner>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ppp1'}}, {@subj_role={'subj_role', 0x3d, 'ppp0system,!cpuseteth0[.bdev:'}}]}) 23:36:00 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) 23:36:00 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0x3}, {0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x18}, 0x6}, r3, 0x3}}, 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280328bd7000fddbdf250b00000008000600363b000024000200080007e6bad97fad3ea556b2d91d80635c"], 0x1}, 0x1, 0x0, 0x0, 0x4800}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) close(r1) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x993be5b}) [ 218.347982] syz-executor0 (6949) used greatest stack depth: 14432 bytes left 23:36:01 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x2, 0x101000) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'gre0\x00', 0x3}) r1 = socket$inet6(0xa, 0x3, 0x8001000000002c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x400480, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000002c0)={0x80000000, 0x0, 0x1, 0x8}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000300)={0x40, r3}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000280)={0x9, 0x6000}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) fsetxattr$security_selinux(r0, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:xen_device_t:s0\x00', 0x22, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x1, @local, 0x7}}, 0x5, 0x6}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000380)=0xb) 23:36:01 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r8, 0x202, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7000000000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x12}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbce}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x90000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x40) 23:36:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) socketpair(0x0, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000180)={0x3, 0x100000000, 0x9}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10102, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/106) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000000c0)) 23:36:01 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) 23:36:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x11, r2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfff, 0x40040) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_dump}) 23:36:01 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0x3}, {0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x18}, 0x6}, r3, 0x3}}, 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280328bd7000fddbdf250b00000008000600363b000024000200080007e6bad97fad3ea556b2d91d80635c"], 0x1}, 0x1, 0x0, 0x0, 0x4800}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) close(r1) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x993be5b}) 23:36:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000160007031dfffd946fa2831920200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x1) r2 = getpgid(0xffffffffffffffff) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x600580, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140)={r4}) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0xfffffffffffffff9, 0x7f, 0x2, 0x0, 0x679, 0x402, 0x1, 0x95a, 0x401, 0x639e, 0x800, 0x4, 0x118, 0x3, 0x7, 0x7, 0x460, 0xc59e, 0x1800000000000, 0xf224, 0xffffffffffffffc0, 0xc02, 0x3, 0x9, 0x5, 0x10000, 0x1, 0x22e, 0x1ff, 0x2, 0x9, 0x8000, 0x76, 0x0, 0x7, 0x0, 0x94b, 0x5, @perf_config_ext={0x7, 0x10001}, 0x8000, 0xc800000000000000, 0x6, 0x3, 0x4, 0x9, 0x4}, r2, 0x3, r0, 0x2) 23:36:01 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') 23:36:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x19, &(0x7f00000000c0)={0x3, "69703674c3cb00"}, 0xf2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000400)=0xc) prlimit64(0x0, 0x0, &(0x7f00000004c0)={0xdc9}, &(0x7f0000000480)) [ 218.725249] syz_tun: refused to change device tx_queue_len 23:36:01 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) epoll_create(0x7) 23:36:01 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x24) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000280)=""/143) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e1d, @multicast1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000340)="95181c8871fd14df9432cfd99090edb19cd1b1ffa8", 0x15) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local}, 0x8) bind$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10) sendto$inet(r3, &(0x7f0000000380)="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", 0x5c8, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e22, @multicast1}, 0x10) 23:36:01 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000580)=0xcc) 23:36:01 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) 23:36:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x309}}, 0x0) 23:36:01 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) 23:36:01 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080)=0x227, 0x7fffc) getsockopt$inet6_mreq(r0, 0x29, 0xabc627f362b482c6, &(0x7f00000004c0)={@ipv4={[], [], @dev}, 0x0}, &(0x7f0000000500)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000540)={@empty, @dev={0xfe, 0x80, [], 0xb}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80000000, 0x3f, 0x80000000, 0x100, 0x1d450088, 0x1, r2}) 23:36:01 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x38) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r3 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x7, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000480)={r4, 0x3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0xe368adb30c792f1f, &(0x7f0000000340)={@local, @local, r5}, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000540)={0x1, [0x8000]}, 0x6) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) getpeername$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000600)=0x6e) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000280)=r6) openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000500), &(0x7f00000005c0)=0xc) unshare(0x40000000) bind$netlink(r3, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={r4, 0x7, 0x3cb6, 0x2}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x80000000000000, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}}) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x100000000, 0x2000) [ 219.038186] sched: DL replenish lagged too much [ 219.088909] IPVS: ftp: loaded support on port[0] = 21 23:36:02 executing program 4: mlock2(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mremap(&(0x7f000000a000/0x1000)=nil, 0x1002, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) 23:36:02 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) r6 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x4, 0x3, 0x783e}, 0xfff, 0x100000000, 0xfffffffffffffffa}) 23:36:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x87}, {0x6}]}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x80) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000000c0)=""/199) 23:36:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1a68, 0x100000000, 0x1, 0x7a0b, 0x3, 0x3, 0x2, 0x2ff, 0x40, 0x3c6, 0x1, 0x3, 0x38, 0x1, 0x10000, 0x9, 0x99}, [{0x7, 0x5, 0x158, 0x5, 0x2, 0x6, 0x0, 0x7}, {0x7, 0x9, 0x0, 0x80000001, 0x47e, 0x8, 0x4, 0x6}], "1b3c1052e0069e0895de02da43ae3629ce05b93a36b6139d0f0c9e78f54233b47a4167f6214a2cce1c1a03d9545fb197cb61f462936493cc8e5380b2108b24f802e81dee6e7208e5", [[], [], [], [], [], [], [], [], [], []]}, 0xfffffffffffffe8a) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) 23:36:02 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) 23:36:02 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)) [ 219.362619] IPVS: ftp: loaded support on port[0] = 21 23:36:02 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x38) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r3 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x7, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000480)={r4, 0x3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0xe368adb30c792f1f, &(0x7f0000000340)={@local, @local, r5}, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000540)={0x1, [0x8000]}, 0x6) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) getpeername$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000600)=0x6e) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000280)=r6) openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000500), &(0x7f00000005c0)=0xc) unshare(0x40000000) bind$netlink(r3, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={r4, 0x7, 0x3cb6, 0x2}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x80000000000000, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}}) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x100000000, 0x2000) 23:36:02 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setxattr$security_evm(&(0x7f00000023c0)='./file0\x00', &(0x7f00000024c0)='security.evm\x00', &(0x7f0000002440)=@v2={0x0, 0x2, 0x10, 0x2, 0x56, "56c4592c553bfda84efd12e12eda0dce0e4efeebac6ccdb2b230cef0c2f0fc5c08b833932000451490499e0c5dd8c07209893877d50c55ebf9b02bfda84190070e8be56fcddf3d9426aaad2691762e2c5f95c01f73e3"}, 0x60, 0x2) pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000002380)={0xfffffffffffffff7, 0xeb3, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203) kexec_load(0x6, 0x6, &(0x7f0000002280)=[{&(0x7f0000000000)="0d0e54daeaf0c32c19ef97c710b7ee23e1415efcea13389ca1a6128b658d1aeea98e1960f1af33ede1bd7fccd0e3d8f130b93014966b74eb844efe26883653a4360b264916d45683a3e6c174983718833c1f6dd6a6055c7e3c19d1c0b674b55cc6d953e950c323d4e537705575c8c0ff30aea4695981797a5e9cf2e2698db810247007dccc59062db3a0d5328421a16428212c32fc54c7c5d2b91946a7d732f6130b75917599123d3ea8287bad0208529c78d15bfb070c7a80ff2a", 0xbb, 0x5, 0x8}, {&(0x7f00000000c0)="00a0616408cb43c8ca39fff85a493a9dcf", 0x11, 0x0, 0x80}, {&(0x7f0000000180)="a173b5a277fc99725b8dd3a421cac492bff4ff47f69a9f2989d3ea624700d741d1de0d0be4fb7b474c27605025100a3b91154b187ae0f56be2f94faeb377d5c0d1c8916504d6127fb85296f7eb20af4d26dc703ed66598b39154a949a939d702aae257a0484e83019eece2033c7a993c0f39212b56ca188ed517921ef7ab990df099b05196197bcf1691ec8e36014c01d206a4ae6c03b5cf70eb7a10f50199b0244340f4b39519c5fac90e146fe864265b72bad8460aeec0368f9cb716460cb47c383a8977f6d0fdb460c4585918b2fcfcdad75d5318ad798d51d876eae1f9f7ddeaaaa75306343defc141a4f2be0530ad0e53e631e0bf656848239d8ae70e4e98e899c7ddfa7f22181e38c1fcd2eedc8b39fc68f30cc13e93e6445495e57e9fd26c53ea82f905f983acf9067a67767d8f1dd13928a2ff02f610f7c1ccfc768d6134f1bdfd7269ffd627833ffb5a41162fe608b146178f402501e107d1ccc22d5d992012c42b6197475821b01dbcdac2cf7bcf1eb4ab16d28f6ea8ef119154842cd3663b1bee912945c33a745f55a78420283652f7a8a5e05c307f951d4f623db106f4866cecd086b348dcabca25152f1c992ec542b2bca2fb4e6e452095317afab2f65ebf077f87f74e13d8d6841db2bad9b676a248b7877269bd8a32ad0202bf20afbd95c36e22414d5009258e4a53785664084345e89dcba8d26614f99ad189b33b07860613448609ac4cbeb71a0aa35fae6c81f74126f94b154ccd716463759e763a111b886f419c39e1cc66417aa7dfe6d3eaac9828279c4945e7a86b7b8e90be329d306e43cbc04af7ba2645b12b306fcd266f7cdad5a9db3a7a7f58e38ae58880aee08aebcef8a603d2955f82225ce117ac6454ea6b31bb68b0f4feaba0dc86b41a30f263f9efbecdff1ccde69a78ebe11b115974229571eeeb3416794cb28e3b290a275d33f3286ab6cd9d881a2144cbeb049f61da5c9286e4a128c01173397713c5b45b8fdd51abbfb9d241b41cdd4c28d896549e8a6d0a846f910d4c6b2a4c901d17cd195ef8f48c7eafd40964ce1cc14b93de0dbc5d460abe3e6f96b94b189e5d0ae367dabc414e791ff643438c811175c749d423c1c393ca6c9743dde8256252f5f586bea36e657f6e613e4dfcc953be9415c01a1323c2c65d1e64518639d91fea88e969413c03ecd81889e276ef135d96d68bef5ed5dfc875de99c4f84dc8a59295f80e6bd70d695ce31c864e7c8c701f1dd1124d3be8513432ee75476311b25dd797643835cf26718dc97215ae571a33e873f1b18bc976a92e1a8b36e8538510309ba6d46d482d4b465f5464d552b94b4d5f14fbf93778fafb223b3309f64c9ce6bafb0daf43bf63f73be192ee22299844c937cc623c143dff141b57f93aba01db17d8fecc602cf4b23683bd22f535fe74fe98f41644eebb60dbfdea3b0891d14627ea68276b20ee5b08c57e8dcb5b000632d61fdcd780f41aa839a14c8990fcbe98e7fb9747b07d2670f9548b6e19da675e4449d61c67822e81ee0b918dc2e0d662112338b10d19d675c95aca7fc2bcb530bbcf55369ebe61ccc5e9fdf526a11de0383b1c8cfad3183e4830794409cc8ce00e5b384971ccd28293c15f9715df60b90af319a22acbdb11d5493210aada8574e0a920dd3ba2001e87a5b2dfc55dfea9bde96bb20f27d45f8a595d58cf5fe6d977e04eeda111d62be8d412b5dca419460617cd8f96fa1d580352e06d4a3707187563bea3416a04d3c296ac1f158c91338804cc7f0afad87800fc730a942e247189c6ea0177a54065c5bee72d1d9331682603aae3e276d68120c8d63fa8f3aba3b9714cc994e000ce423d915380b68fe38382df96aac1a9378686ca241fe59a4905f28007d9bdca929b46e4a886e7f3c65738d554cb3c8c92500accdc20a0ee93c0572ef7f07caf8fc0e2f92889a6248fedfd1dcf569401a55847fb72bd707540a1fccee7f99116f6276d93cc3afe534a847dc0b8b7d20b1f7e5d151d2c2aa07acc2eb5e000492f2d980e2351fa32c4eeb51dad0db6542be39476b810769ce9ee0792c83427edc19958d72102ea6558f4444eeeb749852e5c7a646183d4fa752c9342001ec4c8e993a0676393cb22ce6b51aa33e515ce3476e970edc753fd0083e413ce4328381564aee850f81ac4caca45f60f184dbd0494c99a11a0796af34663203a23dedd9911b529be23dc8fada7b068b40b2d8b1ce2603160bbebc480c6b0e6bff3d4a9d5c48f7fc08526fbfc7348d252acfb8bf44d4fbd3b1aa7fae58cba6d7cc3102b18897d8b135eae67c7d9fbe8c34ee64b85750e4ead552890d8fbaec9d49dc3703c3b47a4d08b6f7b085c3c39447e651f02104ab2dbada6a15d97935a99283ae554f92b0fead7fe038db29e05e0c2f9d7bef888638ee50eaf6380bd0b534bcb1820f1cc926cdfb1937c2229241fc207402b0acad21c2bcf764566507d9760841b07c11dd9fc766235b3801fade42ae9a0dabedcd2780d6e5096af1471886e8716edbb1b9c50b32452a7bd6c50c5dd6bfd989fbd0c412058019d41ab94e4b12a23e9ec69dc4fed4492b1f95d30b0d11efb369c639597095ae3a8220b6f0cf576325fde780d5075487df809cb7c65c9eeac22d6c1028a54b44a6c863a33d4ca513cf0b90c37ea59aed9620c8f65505e3ae6ac385253cbbb515a0a814a48b2572fe61ac8b2a0a12e0cb7735c7d8e607f5f6ca8c3c111c9f07009c50e4fbc401d3c2fb19d572f5b61949967b4cf68af6465c778a404f7ec0b77ec964e09ccfdd03fa9677fda828b188c333f507ddbdaa9e0cdbd7838c705294f27d31d1ef80b18541e3753775d9e562922c0cae311354e32903b851e32f728a103b080aed58de47418ce72cdff247240323e4bccc27e3ec3b3f98232d4acc64f0e40af503584edcb2d96f076df0f2b85b0f6e290994c2d3658806351ca5f24e7babf443b5d4f7599078ed603c728632b294ff9cd3e5522c4aba9484f65d4a3734800dd1c9abf8e020310d1bf11fba5187e15b27d4a4b228756d0ba531dd763c4a11fc62dca882e3bd3f762621177a74bff01bbeafe53dfe34bc97af9125b8df38c7e23423c813429353037428196f0eb6d7d0de1a1683ca9317c015b934a025c7a2622214b2bbf907d50f53017569b723fc69236cd1be41cc51e75cd88d8b4a8642eee1a52799d1a1c08041d095374a55884105663767038562e8105530a45f786b954247c397034878a6695090af52c2eb54e868e9786bb331157d65be53322a4b3fc56200d4a56e3a5c6149eb35e59cb3069d370f88b2ef73761c3920adea2cb16465f27f9d1493d199e3d4d41c2599b3adef21f88391673c66ba97bd597b3c2d8636b55addc39b166c5e49f19f9f51a066d2de2782a8b9aa3cedd003253a6b6c0c04661fb754571433a96a30a1cf6759a7cf6dd9ba729726f5bf7fa1ad18bf3210c2af7f3ca12432941884987a40aeb954aa0a80570e04b0bf23accd64a3b58f3b740b66cba7899ea883845ecf8dcbf86b58872a966a53db6a349fbd3a8f57dc010dae9254acb368dd0156fb6e46c1bc0ab7c7ad1d90ac2e0c916e7fac37e6a66d3cc9780b39feaf486b160b49fdf5f3b88bcd3e19f37ac2c8e5e821581e2c27dbf1b845fd73022b2ebda6173716662f431d831c9ed17145cdd8d19c802852de94f61df884caa654aaebf61e934006295fa5795762c6184c338d13475e2c5091ce9b47f04fc52e4e6936bceee15caf20ea525ea947090333399999165680735ca57a3b1d04358228b1aadec2bb8039c995159938f31cdc6d59405f6c8f2d6b6bad6da465234aeb8487322205d46fbdaedef4b7f19b875bb8c78a75dedfbec0bc9b2e45f360773f01cca043572efc9500a71018cd8f31049543ea510a9b09afb85b37f11a0e5399d9f19b4c0a31ea7f738aa0f2ec8099694b186e371fcaa70eb3f03e8feaffb0e3bfa234badd7e631fb78487535d42ae41ceb4f19fb63111905825cd4e893721d88a15ca6b41d87c0a855b38c36687c9c4e988074b2161bd695500f8352cee40a1f187ae7e08e6d5a093e40b2d84fc1a3d9e64f01caa7e1bbb9b7b9769105aab3ebeb5842db2aa2117a58a2774c06c02f633cbcef500111b97def65c53334eb5435f948384cefbf34389f9dc79b3dfe3a8f844eacb8cace831ae2f9785264d86fe76413e146b9218d1095acf5627f68a87524f2eff7b71109d33e5845f95c5369dc807118c056e316f379f6955c8ac2a217befaca368818a68a1051d2fd021e655384ebe2b02da02635787c911bb8ca57a9f89713cf922e12c90363a202f8da4cc0d53ad06b1507960635dfabed6e8f461a2d34f021f8133e24b2b9fee1f04dc4cea5249505f43fd0a0ba0acf7d4e39afd32beb58795d130481b92f9db28133b3291fadf02a9682379741cc8a552bd9a7eae92f61e1a40cd8c1dd0bd7338befab985f98b0b6698641f642738d58303d56e07a49db575c0c648e3a7327d72336e3e24f161e62c26873aeaec8968e204b00b0138662004f74ed1d88017c50e8e763853e43b096edcb301914398eee7fc65d3220354857297e2baaf9492cfa5ed14d8e088fc0de0d820317786442da6aed869c7619027e295e18e04a1ca865a0e2e52e316ce7f6ef8cb43fdb6ae4612ed0e43ae889e1aaa20356e00b52c2e4506783a01d1bb771168d0800b84fe3bcba6e96d9397d97be6602125fb91a3ee2f5e28063e4316a6211c1644996b445d7d50197180d4b353fb68f3b55543a1b6f6387d64fede0acfc98040a3d2cc85d66bb17c764b0031fecd4076d769a29ca39503a14a10d34dc39c8d507510a5241ac5e6f0c96e7799414c8838bc353165c20ca4ec6f83c20fef9de1db5b942c6a98f53bf857b62c3c9347e98fdc4be321a65732b6a192afb67f06eaa7e2b5e3bd9cc118cc04ad43f0d5777a885e7d38bcb949833b1498b621072f93af9834d719532ba8e358a4af8e0c2efc7fff37c3d9776c5be227fe5ae66f13d5d96b87d12b8e564da72697cde25b2c473a7963854bd493a9db7494dc9d09acb3014eb8d01b4424df8dca7930c136f821f614658fe493f0f244b164a513deda17df58b564e76c9a497f93f5eaf68f37ab74c749b68b247f63a551b03effb62dfdcc4b3d1e556d43abb31cfe600b03e2aabcd0ea0cecb564108d79d9e816e34f46a0da355451739c9975441d6fd56d44c06faba0a093431f9223eb1bb7c7f8853982445ce2294aa597a22f2e3959a5b0ce39f6ee9df782ac206e9a52953ee5fb6b52f3e904888463e1a1653488cdd0cfc476c5c36366f64bcbc2420e385f677ddb89fc75b60e3fbd2ef132c9266b96d7f5ec933f67449b9699d7084a1685aa22a6376aebb13ccb8c2c66f360647afb5662a7b1fb9fa62a0cdc85fb0ac2d74127df58cbbd0c6423c0f98d0d87e9521fa19f7da0e35b9fb13139a86e53653eb21f18637d9aa9bd8b32c95c1c12f4ccf664bba5d40a7feb416ac8ac62aab45a6577f2ef628df80cae117db743da5e59a9e6636bdd00594c9a63bbd5c4eea9e71c6cc33ab865d838a86c5d7e1111a3540d53606cac6bd93270c1b49fa3973405f6796b150906f4fe10932913a4bfcf0bb35188fee7880ea92f73230c90fd2909133601621cb36474534428a6b9aa84840c367242bca675b82d88052bb238824c5a5e2049876af77e2cdd3c8530c997799befa697bf2ddb781ae4998e7504d9160988b34180bfa9f039d79ee19d3476a9cd83b272734e0d6783fe32ddf9a31", 0x1000, 0x8, 0x3}, {&(0x7f0000001180)="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", 0x1000, 0x1, 0xa105}, {&(0x7f0000002180)="954e00225798a3de2fbcd9c0bc606efd614ce5cf63c507bffb82dbfef01779d305a8592595ed86636692e8005d7b496d78a215d598bdfe92d4", 0x39, 0x9, 0x3}, {&(0x7f00000021c0)="16e6d628010af2f0f40f55645c7e6ba7d31085c3d1388b3e42ece83b6a01797c678a79154d7c913027edc4486a569fe831fbf30464d016e219db5a2921ac47319febff33cf5b66ab90ab8c835fc95cbf345eedd515a8b116cecbca2ca8f99592359d7c255720f453ba3c1fe874567a2c48f770eb68b61963765602acc77a4c76a4b216c09a53d0522d", 0x89, 0xf1, 0x40}], 0x160000) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0xfffffffffffffffd}}, 0x14}}, 0x0) 23:36:02 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x2f) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x200300) r1 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000003c0)=""/211, 0xd3, 0x1, &(0x7f0000000180)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) flistxattr(r1, &(0x7f00000002c0)=""/217, 0xd9) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x1bb404d7d8c13fed, 0x5, 0x100000000000d00, {0x600, 0xffffffffffffffff, 0xa4}}, 0xfffffefd) dup2(r1, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x6f, 0x6, 0x7f, 0x4}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x100000001, {{0x2, 0x4e21, @loopback}}}, 0x88) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x0, 0x0) recvfrom(r3, &(0x7f0000000500)=""/99, 0x63, 0x2000, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0xa8d) 23:36:02 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) [ 219.498174] IPVS: ftp: loaded support on port[0] = 21 23:36:02 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) 23:36:02 executing program 5: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0xce, @dev={0xac, 0x14, 0x14, 0x17}}}) keyctl$invalidate(0x15, r0) 23:36:02 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x201, 0x0) 23:36:02 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x18d053, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d00000000ffffffff25fec2541e21ccf67e1d7b5510029e63000000e565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x2, 0x1) accept$packet(r2, &(0x7f0000001540), &(0x7f0000001580)=0x14) 23:36:02 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) r3 = fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x1f, 0x7f, 0x7, 0x7ff, 0x0, 0x1f, 0x20060, 0x1, 0x5a, 0x81, 0x2, 0x8000, 0x9, 0x0, 0x40, 0x8e7, 0x7, 0x5, 0x100, 0x822, 0x7, 0x8, 0x800, 0x8001, 0x10000, 0x8, 0x7, 0x1d0, 0x6, 0x6, 0x8000000000000, 0x0, 0xea36, 0xb3f0, 0xfffffffffffff347, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x7f}, 0x900, 0x5, 0x100, 0x1, 0x7f, 0x9, 0x3}, r3, 0xb, r5, 0x1) 23:36:02 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x5) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0xfffffffffffff655, 0x4) 23:36:02 executing program 0: r0 = socket$inet(0x2, 0x4, 0xe) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x111002) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @random="71bb48e10948", 'veth0_to_team\x00'}}, 0x1e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) socket$inet(0x2, 0x200000002, 0x0) socket$l2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x2}, 0x1, 0x2, 0x4, 0x2}}, 0x26) 23:36:02 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x2f) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x200300) r1 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000003c0)=""/211, 0xd3, 0x1, &(0x7f0000000180)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) flistxattr(r1, &(0x7f00000002c0)=""/217, 0xd9) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x1bb404d7d8c13fed, 0x5, 0x100000000000d00, {0x600, 0xffffffffffffffff, 0xa4}}, 0xfffffefd) dup2(r1, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x6, 0x6f, 0x6, 0x7f, 0x4}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x100000001, {{0x2, 0x4e21, @loopback}}}, 0x88) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x0, 0x0) recvfrom(r3, &(0x7f0000000500)=""/99, 0x63, 0x2000, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0xa8d) 23:36:02 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:02 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f000076d000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0x7, 0x7ff, 0x1) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff80}, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x1000, 0x5a, 0x2) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 23:36:02 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000001c0)=""/186) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000280)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 23:36:02 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:02 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0xc) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="8918edd0fb5cd9540f275b6de9fdcf3179dd3c099e317f3302432c3f53b4ee12bef4937089b3b058ebb0878af0c1a11194e4e4a66353ec770f707cc061dc28ba98a3bf83fde6b5c990621073889cd2602811e3fc529b"], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x20) 23:36:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x18d053, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d00000000ffffffff25fec2541e21ccf67e1d7b5510029e63000000e565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x2, 0x1) accept$packet(r2, &(0x7f0000001540), &(0x7f0000001580)=0x14) 23:36:02 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:02 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000001c0)=""/186) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 23:36:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x18d053, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d00000000ffffffff25fec2541e21ccf67e1d7b5510029e63000000e565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x2, 0x1) accept$packet(r2, &(0x7f0000001540), &(0x7f0000001580)=0x14) 23:36:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80080000}, 0xffffffffffffff7e, &(0x7f0000000180)={&(0x7f00000005c0)=@migrate={0x0, 0x21, 0x400, 0x70bd2d, 0x25dfdbfb, {{@in6, @in, 0x4e23, 0x8, 0x4e20, 0x2, 0xb4d907fe5abe2682, 0x80, 0xa0, 0x6, r2, r3}}, [@srcaddr={0x0, 0xd, @in6=@mcast2}, @mark={0x0, 0x15, {0x35075d, 0x3}}, @sec_ctx={0x0, 0x8, {0x0, 0x8, 0x1, 0x1, 0x0, "635a65ee"}}, @algo_crypt={0x0, 0x2, {{'cbc-des3_ede-asm\x00'}, 0x0, "0e25b38ebe6ed9c5859719a9db17ed692c"}}, @replay_thresh={0x0, 0xb, 0xfff}, @algo_crypt={0x0, 0x2, {{'cbc-blowfish-asm\x00'}, 0x0, "90efeb00ae72b6aa8a7c50ad870595232230264ac3b8e1010247fdc15bc26771b318c62c70c4257048e60b3abbe39808873046c09f578b3726fab4be85a4cfd5322d550ce21e9f9200393823cc71ed666674282dc80790a72a08ad27348f881548e4f27b1d0b952c74484208b1a2a8db2806ee4199a2942a32dee9b28ec29633af6e0139234f85fe88f02584ee1d9d47b61e3b8ebffd1d26780fdd749a36995cdd"}}, @etimer_thresh={0x0, 0xc, 0x6}]}, 0xff7c}, 0x8}, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000002c0)=0x1ff, 0x4) 23:36:02 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x81, 0x0, &(0x7f0000000000)="06dd2e8d48bdfc3dd9254a290b37c290faa4fe7cfb5fe8fc788fde9eac78d6d7b7718407030570ef85bd1b3288111f108f326681fbe1d1e92e65e2718396a6087276c056059be2b9ec400df6d468c37dba59bc46734a4830f9cff3e0f90d8d2c8702b3a95bc77de7cfb47c3ffcd7f0d130f14f6d55717fb5ff3fafec3b593439e9"}) ioctl$int_out(r0, 0x5462, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000800)}}}], 0x0, 0x0, &(0x7f0000000500)}) write$binfmt_aout(r1, &(0x7f00000007c0)={{0x10b, 0x5, 0x80000000, 0xe5, 0x1e4, 0x2, 0x13d, 0x10001}, "d5", [[], [], [], [], [], [], [], []]}, 0x821) 23:36:03 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140), 0x0) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) [ 220.319388] binder: 7193:7195 ioctl 5462 20000100 returned -22 [ 220.358569] binder: 7193:7195 got transaction to invalid handle [ 220.395509] binder: 7193:7195 transaction failed 29201/-22, size 0-0 line 2855 [ 220.411226] binder: BINDER_SET_CONTEXT_MGR already set [ 220.418279] binder: 7193:7195 ioctl 40046207 0 returned -16 [ 220.430670] binder: 7193:7201 ioctl 5462 20000100 returned -22 [ 220.445607] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.451701] binder: 7193:7195 got transaction to invalid handle [ 220.458905] binder: 7193:7195 transaction failed 29201/-22, size 0-0 line 2855 [ 220.466331] binder: undelivered TRANSACTION_ERROR: 29201 23:36:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x7) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000008c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000900)=0x18) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x139, 0x6d, 0x20000000000014, 0x0, 0x0}, 0x1db) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @broadcast, 0x0, 0x11000000, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000840)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]}) dup3(r0, r3, 0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000006c0)="6bf32cc527ed18c0b842ad231ec9111f", 0x10) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000880)={0x5, 0x1f80000000000000, 0x1, 0x400, 0x5}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000000)=""/1) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/16, 0x10}, {&(0x7f0000000600)=""/49, 0x31}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/78, 0x4e}], 0xa, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000240)={0x8, 0x307152a3}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4810, r0, 0x180000000) ioctl$KDSIGACCEPT(r4, 0x40087446, 0xfffffffff6b86006) 23:36:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80002) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x6}}) close(r2) close(r1) 23:36:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) fstat(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0, 0x0}, &(0x7f0000001700)=0xc) r6 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001740)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000001840)=0xe8) lstat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = fcntl$getown(r1, 0x9) lstat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001ac0)={{{@in=@remote, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000001bc0)=0xe8) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001cc0)={0x0}, &(0x7f0000001d00)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001d40)={0x0, 0x0}, &(0x7f0000001d80)=0xc) r17 = getgid() sendmsg$netlink(r1, &(0x7f0000001f00)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000001580)=[{&(0x7f0000000080)={0x1f4, 0x21, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@generic="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", @nested={0x1c, 0x4a, [@typed={0x8, 0x6e, @ipv4=@remote}, @typed={0x8, 0x74, @ipv4=@broadcast}, @typed={0x8, 0x4b, @ipv4=@remote}]}, @generic="dff713cd97f56faf8a52097599cb068149b6dc0035fa09dba8669470c61902910b05727415ffb73034944292459c75b809bd48b78c393cd611ab63e9286fa1623625ed2d5e1cc0254ec381447f9cc4bbf45670e14315972d2e172b25e74df3aa40c8c484618ae15b124fdb7e043566c170550bbf2722847957bfc766713e58abb0aa6eb4d998a5cafede53cd9d", @generic="aba854453986d1f9d13ce5f65cdc7df2c8fdac06f61246a04195cf2495a5420e0d2bb43bb5d61e179dfdb3ba55", @generic="80d13bcc4ce628f0ea707146f84d00", @typed={0x4, 0x7e}]}, 0x1f4}, {&(0x7f0000000280)={0x68, 0x3a, 0xb10, 0x70bd29, 0x25dfdbff, "", [@generic="bdfb4b6a7bc9849969a9ae2b7ab3042843dc97dcf5a8d883fa1bf284809b451b5799da9beab0d51cf456848ef95186af4ae109843600405902c72f7fd35757b670b0c1429eabd10ac9f221254cc5e75c26954c74c243836e"]}, 0x68}, {&(0x7f00000003c0)={0x100, 0x16, 0x100, 0x70bd29, 0x25dfdbfd, "", [@generic='n', @generic="72035555bcd55a9c75e38883c09ff879edd6c54ea2625b1ac12b7af827c812c560b670cea63cb5af2e12ee61e8ad7f2c9bea37b7aaa2e637b3dcea1033edaa365534da20ea740c9d69480fe9e908ab8471392a393e0c4cf4ab870619681ae8ea9c7e2cc93d4f154ca49902950799c4eb1d83065424f119c5afa983c04b8cd692ba3cdc001ff6227a05ecef856c75b0bc43206d4953ed897bc5bc17ba074ed061987f7cb1ef031f47258831bc439dfcaf33c5956fd6635969c9f95ddedc5e50c914d579b724ad54989c15d1887d85e4897182f31f8a9ee33197d8e46b601cdafb6b9ee776d759ca64b47444888fdb"]}, 0x100}, {&(0x7f00000004c0)={0x10c0, 0x31, 0x420, 0x70bd2a, 0x25dfdbff, "", [@generic="9798e70171cf547ea1d03b4dd93550fe812937cad1fd7cf851672586e5d3ebae79f21226d87a6a23695f422cc21759ca0263dc92efd9e1f3a5ae9595788b926883b69eefaa725fd99d1aa9102a2ffdc8f8f29faf4ba5a05c3174cd41b38eb49b5d8096db274179504157db401f96e5eec0ec4a80cd97b877a62fc6419e1c33fcd1ac25b59c64891317a3c1224cced4e01d2003a806aa8b458d53865434f95282efeef7e75020", @typed={0x8, 0x20, @pid=r2}, @generic="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"]}, 0x10c0}], 0x4, &(0x7f0000001dc0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0x130, 0x4040810}, 0x810) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x8002) 23:36:03 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:03 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) fcntl$getown(r2, 0x9) pipe2(&(0x7f0000000140), 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 23:36:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x891d, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="faffff00000000de281ef24a0f69d070810114ab10f28bec1c03c234c28dd62d3ae601272e8ca10f65b799b6de8c123854f529e0136c0df785f3239fc9a9ce43aaec02388cd298a23cb678a5a62b181e7a16d0e49042ea1ca09b824aea32d3a5a6fb938f2c89aa1610f900"]}) close(r2) close(r1) 23:36:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f00000000c0)="70ddc611160dfecc1e9a2ea8654d7399320c812e6cbda0a3c7304a61f5b1af52bcac6387dc9d51ff2713a5fd9888048a567cee9bcbd91e89880696e624d216aa3d278462f090f450cf29b6d5f8ea25f39f60475d5c1b2999a95205d826a88462bb713f350485f0b11ca14aea0989ad9413d630d01ca6cc59cbb9a164ff7f673cd0b90cca8e149deab0089db5c6a60473a5d2f1f3c2c9949deb50050b1212fc12f4b33d108d99da72d9a7995054", 0xad, 0x8001, &(0x7f0000003700)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/sequencer\x00', 0x855b2276771fe263, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001540)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000001740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f0000000180)=ANY=[@ANYBLOB="60e0ff00e16a40f542286f86668928b01d24231091ad8e16b6be8142fbad5f4a4d490a67176a6d0aff3f66764ff5393041c98518eff28ebd6c121b7b59f1e570d390a28eba2b4ef14e5e0aed3bf77909e43fce2dd7a619e11320974a1794df598fba7a46003ff5607b0ece75b89145c2efbf0815ea505578f53c62e23b7f0914d1b2de280417f7d657699565f830397a27b2edbc808b2ac084e9d3f64865fa300ebb4293fa648b99d02688408397a7", @ANYRES16=r2, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x24004801) 23:36:03 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) fcntl$getown(r2, 0x9) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 23:36:03 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) ioprio_set$uid(0x3, r1, 0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x400001, 0x0) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000140)={0xb, 0x7, {0x57, 0x0, 0x3051e2e2, {0x1, 0x9}, {0x9, 0x10000}, @rumble={0x4, 0x40}}, {0x52, 0xb20, 0x2, {0x5, 0x1000}, {0x7, 0xffff}, @period={0x59, 0x3, 0xd56, 0x7fffffff, 0xfffffffffffffff7, {0x8001, 0xb, 0x100, 0x9}, 0x4, &(0x7f0000000080)=[0x100000001, 0xd9, 0x200, 0x5]}}}) 23:36:03 executing program 5: fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x100000001) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000880)=@assoc_value={r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000080)=0x20, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x4, 0x2) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) sendto$packet(r4, &(0x7f0000000140)="f3640fb0b849ddaae84fd2a2ffa7b3761b46", 0x12, 0x20000000, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x5, 0x6, @broadcast}, 0x14) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="09000000000000000000030000004b0001004e200000"], 0x1c}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000007c0)=0x5f, 0x8) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000600)) 23:36:03 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) dup2(r1, r1) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 23:36:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x7) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000008c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000900)=0x18) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x139, 0x6d, 0x20000000000014, 0x0, 0x0}, 0x1db) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @broadcast, 0x0, 0x11000000, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000840)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]}) dup3(r0, r3, 0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000006c0)="6bf32cc527ed18c0b842ad231ec9111f", 0x10) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000880)={0x5, 0x1f80000000000000, 0x1, 0x400, 0x5}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000000)=""/1) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/47, 0x2f}, {&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/16, 0x10}, {&(0x7f0000000600)=""/49, 0x31}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/78, 0x4e}], 0xa, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000240)={0x8, 0x307152a3}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4810, r0, 0x180000000) ioctl$KDSIGACCEPT(r4, 0x40087446, 0xfffffffff6b86006) 23:36:03 executing program 4: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) r2 = dup2(r1, r1) fcntl$getown(r2, 0x9) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 23:36:03 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair(0x19, 0x3, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x80, 0x9, 0x1, 0xe6ce, 0x8, 0xffffffffffffffff}, 0x3}, 0xa) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x4}}, 0xa) 23:36:03 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 23:36:03 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 23:36:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x400) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x4e24, 0x0, @mcast1}, r2}}, 0x3a) 23:36:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000040)={0xfd}, 0x8) r1 = socket(0x4, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, "6e72300000000000000000001d00", 0x1}, 0x18) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 23:36:03 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x65) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 23:36:03 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:20 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0xfffffffffffffed4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b9dcded342d54fc2107eef2e82f0ed00b6bd0000", @ANYRES32=0x0, @ANYRESHEX=0x0], 0x3}}, 0x0) [ 221.253153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 221.344956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:33:20 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) inotify_init1(0x800) 03:33:20 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) creat(&(0x7f00000000c0)='./file0\x00', 0x65) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:20 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setsig(r1, 0xa, 0x34) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001ac0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffffffff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, [], 0x5}, {0x0, 0x9, 0x0, [], 0x1}]}}) 03:33:20 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, 0x20, 0x5, 0x2, &(0x7f0000ffb000/0x3000)=nil}) clone(0x0, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)) [ 221.459571] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 03:33:20 executing program 3: socket(0x840000000015, 0x805, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:20 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) [ 221.582095] Disabled LAPIC found during irq injection 03:33:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x7, 0x70, 0x200, 0xa544, 0x6, 0x4, 0x0, 0x80, 0x800, 0xe, 0x3, 0x9, 0xce, 0x7, 0x40, 0x4123, 0x6, 0x40, 0x6, 0x3ff, 0x5, 0x1, 0x800, 0xf6a800, 0x4, 0x8, 0x9, 0x0, 0x800, 0x100000001, 0x3, 0x7fff, 0x400, 0x2, 0x401, 0x1, 0x3, 0xfff, 0x0, 0x14, 0x0, @perf_config_ext={0x9, 0x9}, 0x52a8, 0x6, 0xfffffffffffffffc, 0x5, 0x7, 0xbb0f, 0x5}) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=@routing, 0x8) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 03:33:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) r2 = geteuid() r3 = getuid() r4 = syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x81, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000005c0)={0x28, 0x2, 0x0, {0x5, 0x9, 0x1}}, 0x28) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x101000, 0x0) setsockopt$inet6_dccp_int(r5, 0x21, 0x0, &(0x7f0000000540)=0x1, 0x4) r6 = geteuid() lsetxattr$security_capability(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.capability\x00', &(0x7f00000004c0)=@v3={0x3000000, [{0x45, 0x2}, {0x2, 0xb7f1}], r6}, 0x18, 0x1) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xd0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="0f0232efb990cc05aef43f1c3065dc6ab3c777bfd6a34378d558b3b87c09b1ca9dba24e3bbf48efb712cd041479a441e36d5c2f9cfb834e2184ceb04ad8a6516d7c85c4c44c19f8d3644d994f1220e686b044bc8eba670691254b64e49fd3b66072f14cf19c1f409d80845705e6d9ecc5e08593e66c64454e57affcf25df57e2fb33224e0657937b6e45b547262863c6d3c2aad798968419a0eec31b01bfb9a6aef717ca71fa025bb5778c75da3da28c21000af0dc179e8441e3df6a7bb79e3f9107209c6b6cba4eeed711bb51b0e3ae07554520cc7ec58dd8b7632622175afa1c80cf840c1c5098f41febd4079a9a5d", 0xf0, 0x1}, {&(0x7f0000000180)="e34489b8eb9936f21fb01496c707f81f9f94c3e59ca63236711e49e83416e71c6d1514acd9d20ff2efa308bca0a0e90f50705b4bd75846b3800d48a6271c48c7269dade249e7edc65c3db1ec92de60fa1ffeb9e86d4e98bc39bb7ec3f0db704a49a3463e7ce06132d6632f7b050febece97e1e59e9285c29", 0x78, 0xfffffffffffffffb}], 0x104040, &(0x7f0000000380)=ANY=[@ANYBLOB='discard,nodots,dots,smackfsroot=fnodevnodev(self,uid=', @ANYRESDEC=r2, @ANYBLOB=',obj_role=,subj_type=^(]cgroup.B,uid<', @ANYRESDEC=r3, @ANYBLOB=',uid=', @ANYRESDEC=r2, @ANYBLOB=',obj_pe=bdev@&$selinux,s\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x100, 0x0, 0x6, 0x1, 0x800, 0x8000}, 0xffffffffffffff63) 03:33:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x400) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x4e24, 0x0, @mcast1}, r2}}, 0x3a) 03:33:20 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:20 executing program 3: socket(0x840000000015, 0x805, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f7274365f7374613ab0339799b181c5e333e1dfe53a24747300758f7ef19fc2d859") r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xfffffffffffffe01, 0x212801) r2 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) sendmsg$netlink(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbff, 0x800}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000180)={0x18, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x20, @u32=0x9}]}, 0x18}], 0x1, &(0x7f0000000440)=[@rights={0x28, 0x1, 0x1, [r0, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x48, 0x8000}, 0x40001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000100)=0x9) r5 = getpid() perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x219ec141, 0x2, 0xfffffffffffffffb, 0xffffffffffffff01, 0x0, 0x7, 0x2100, 0x1, 0x10000, 0x3, 0x8, 0x0, 0x1c00000000000000, 0x80000001, 0xc0000, 0x401, 0x9, 0x100000000, 0x1, 0x80000000, 0x6, 0x6, 0x1, 0x1, 0x2, 0xb7, 0x40, 0x1, 0x8, 0x3, 0xa7d6, 0x5, 0x7fff, 0x2, 0xdf31, 0x30eb, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x1000, 0x1, 0xade, 0x2, 0x8001, 0x200, 0x5}, r5, 0x4, 0xffffffffffffffff, 0x2) 03:33:20 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:20 executing program 3: socket(0x840000000015, 0x805, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x7, 0x70, 0x200, 0xa544, 0x6, 0x4, 0x0, 0x80, 0x800, 0xe, 0x3, 0x9, 0xce, 0x7, 0x40, 0x4123, 0x6, 0x40, 0x6, 0x3ff, 0x5, 0x1, 0x800, 0xf6a800, 0x4, 0x8, 0x9, 0x0, 0x800, 0x100000001, 0x3, 0x7fff, 0x400, 0x2, 0x401, 0x1, 0x3, 0xfff, 0x0, 0x14, 0x0, @perf_config_ext={0x9, 0x9}, 0x52a8, 0x6, 0xfffffffffffffffc, 0x5, 0x7, 0xbb0f, 0x5}) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=@routing, 0x8) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 03:33:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x400) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x4e24, 0x0, @mcast1}, r2}}, 0x3a) 03:33:20 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x200000b1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00c8"]) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000340)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000157, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fstat(r1, &(0x7f00000003c0)) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000040)={0x9, 0x5, 0x4000, 0xf7, &(0x7f0000000180)=""/247, 0x1000, &(0x7f0000000480)=""/4096, 0x6c, &(0x7f00000002c0)=""/108}) 03:33:20 executing program 2: keyctl$setperm(0x5, 0x0, 0x2000200) keyctl$update(0x2, 0x0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x10, &(0x7f0000000a40)={&(0x7f0000000a00)=""/35, 0x23}}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x811}) recvmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00'}) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x600802) [ 222.513290] device nr0 entered promiscuous mode 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:20 executing program 2: keyctl$setperm(0x5, 0x0, 0x2000200) keyctl$update(0x2, 0x0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e23}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x40, {0x2, 0x4e21, @remote}, 'team0\x00'}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="eb58906d6b66732e66617400020120000200068000f8", 0x16}], 0x0, &(0x7f0000000340)) 03:33:20 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgrp(0x0) r6 = geteuid() r7 = getpid() r8 = gettid() r9 = getpgid(r7) r10 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002ec0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) fstat(r0, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgrp(0xffffffffffffffff) r15 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000005a40)={{{@in=@broadcast, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000005b40)=0xe8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000005b80)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000005f00)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005f40)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000006040)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006080)={0x0, 0x0, 0x0}, &(0x7f00000060c0)=0xc) r23 = syz_genetlink_get_family_id$team(&(0x7f00000061c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000008780)={'team0\x00', r20}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000009040)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8140301}, 0xc, &(0x7f0000009000)={&(0x7f00000087c0)={0x828, r23, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r11}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r11}, {0x110, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r16}, {0x17c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xc63c}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1135}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r16}, {0x26c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r16}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x95}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r11}, {0x8c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xfadd, 0x2, 0x0, 0x3}, {0x3f, 0x0, 0x9, 0x9}, {0x7, 0x401, 0x1, 0x3}]}}}]}}, {{0x8, 0x1, r20}, {0xf8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}]}}]}, 0x828}}, 0x4000) sendmsg$netlink(r3, &(0x7f0000006140)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005e80)=[{&(0x7f00000003c0)={0x168, 0x16, 0x800, 0x70bd26, 0x25dfdbfd, "", [@nested={0x158, 0x95, [@typed={0x8, 0x6a, @pid=r5}, @generic="7c8a82e0d43e46b4f13a98649e17cd71028effa3828b9a20cb4acc01a0c6ef3bd7b1564276ff44e99e28fb495bb3689df6bcb01c7e0d2d4f0368c9b5c9b527b964be497003e6832f2888a828b0aad53c00a1547a43eda683f5481d894d7f61179e6c39fd204b85175546746d54a29fd080fe75521e", @generic="e5c7a45569ba60666798ef9a8662a537d75817112ba374a09f2b85d6aac914fc665a7077eaf3947f19844481a66458e1257540e9a91e38976bf80e2466e3c0da2b8ef516c7c66ec8c730c4e9db750ed9e4cc1e448b9ec7210d6dcad56386d3b3e95d91f27a37ff87b6280f0aad97a150d7354056e01fc41230425f37c65e8e1794a12c7bbeb074ba481065252a4e133b285b73110c08ba4a083db6cbf8a457ca45a04ff8d3297aa90175bb1d85b477790bd0c3d216dec5bcba9696da6a15387d47", @typed={0x4, 0x7e}, @typed={0x8, 0x90, @u32=0x100000001}, @typed={0x8, 0x1d, @ipv4=@rand_addr=0x5}]}]}, 0x168}, {&(0x7f0000000540)={0x1358, 0x13, 0x100, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x60, @uid=r6}, @generic="e9bde05261011aed44fd4b4f6c9d10cf0439e86eb506e4a06ec95b859fa74e324b938a7b122aa9fddc7d4c2ff838d6f9c214e594fbd43c21478f268400582018ffa799b7cbef47dac4d1f8fc9f48584ecad18e0a3ffa108d6bbcc1a5eed62ad0ced21f56798d3b67a85f6ce016650a13f8dab613c08361aca8d98244ce0b02a6de4534241dac8bfd5459b769a86428bb2b285f4364607b171f3bfbca7d51f50544818518e9c5a8550d52d6edef77c69ada95bc19890273e21df1889c454642513a9ad8a174e03d16ab205d9d849f849f44bbf579aaed872c773c07c069d9212b552bb87d7cb9eb3b390cb45b65", @typed={0x8, 0x8, @ipv4=@remote}, @typed={0x8, 0x28, @pid=r7}, @nested={0x1238, 0x68, [@generic="fc373e1a8e99778e3c1221051822c335ee171d830ca7c67cd024bfa379bf00de1db1fb2afc52cf6b56e4fabbc066694e4f5c3ba3b93629ade6a590f87117b9c45b4090e6064aa8a2c5b445bea83b4878fdd3792a11af3e680947b74f450ebbc875b124a75fb683d2c3d74036a2eef07dd92f4c29dd6dc35eb9dde5e673fd89bfc2e5cd996b1e2e1bf07c181119bd1ad9", @typed={0x8, 0x1c, @pid=r8}, @generic="d9976c8a9d4b7e8f5b3c06117bc9fdbcbbf38216b3ea58816aadadace4aa2f2b455461eb5642dc6ac94094b4c8a3249689a132598c75e0532dfc18fecf5c4175a6d2cfe71e719dca5b8d39dae96659354022c091dd1655a1b33599c4d815b88c5f7b3a2e0aa8af3627d9522505a626217b7ecc76b7909d1d80bdf4d78ce5539fd3f5f10ccfa7ea264a1800f19ec89d96dd1f537038c830c7835c44cfaf56e90edae38e50d28107937ab5516a1bc6762dd4e451991440d68349f890aafe7ee274e8f46d35dd0f587902e2d089cef31faf0124ace57b0b99", @generic="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", @typed={0x8, 0x13, @ipv4}, @generic="957d3884149b4940c2135686de0c609d4a0fab81f86a2d3f28a5eaced69d03bb1690abdef695a984f854984fac26d3e219b55749229b92cdad37078478247a9828de26c14a2c7e65981a64698404c6239fbcdc6486e6c2f0e06c597a3d7c9b4ba3fbfec076bc6623bfa9521dfcd76e9ef9de688c1d10a27b974f913a25b1110453e5b6353e34563fe42461af9b114c819e9a7a3f99a147df3489b935620d29", @typed={0x8, 0x68, @pid=r9}, @typed={0x14, 0x5e, @ipv6=@mcast2}]}, @typed={0x4, 0x4}, @typed={0x4, 0x84}]}, 0x1358}, {&(0x7f00000018c0)={0x1344, 0x3c, 0x0, 0x70bd27, 0x25dfdbfb, "", [@generic="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", @nested={0x190, 0x42, [@generic="255da4017cd58dd6b3e31ffdc7a2755a1b6e576131d58feaf8b6fc3abddcffdea422e41e312122b29dbf3ceddb54b32d39db8cfe053e0f5dd3a0196b1daf602747527e4d383d487c6c1121c6d1d27e52f55fb47202bccdeff49ebecf79e335fa0bf0feca30232febd8335200a9aa58139c0fcaa381d74a85ca3bb4b62ccfbca99f0285432fdd8d7bb1aec1caeab5a7268ce946976c09d0df0250d106112267fbd09d7ed4912777e5818483d1b6faacb03f811c2dafaf0aef925c930aa9d2f658d3", @typed={0xc8, 0x4, @binary="1fa6767b2c37bd6eab99d2b40c129ba5d33e41c77282f2eaacbf8faf330843949f9bd67398d000b186db6a2133f4006d86365de4c91e550808b1ae04c00cf7d624fd7bb91b0f0c9ff84f5d710e9fead0b6c24463c08ee059a768731139a77853026566f88f0daa786c4ae1e8bbcf6c629e0d758800858ea69c09aa38c11f3ebb96e51354f701d16f27cbb87d000e27e7aeeb31156da07ecbdddc647be39c117b80039796deac72cce2e922a175140b8af0e18349e71f02b21ffc0bbd657e93c9747590fd"}]}, @nested={0x74, 0x91, [@typed={0x8, 0x63, @uid=r10}, @typed={0x8, 0x8e, @fd=r2}, @generic="7e202355b1de8916f482ba8b43f9af27a707b03d8c22620329bf2074fcc52f7028713606fbdf2e72916dc230c35b78faa05337a903ca1fefe246c0d6f72e5e3f2adb5f21b80290a01372872e7b96a32e160756b51b4d17b33d2f34cdfd2d96ce"]}, @nested={0xdc, 0x3f, [@generic="44be1f8d5d94d43a3a9bcad964771fbf1974d0d732c2b33c2630cb820108ff224f387465d283113ad41a1caa7ea05369bd57e2a42207ca9a2e67d47a54a5d3ecfd588e30e32d25ae51618c30dcf7e0fdb26c4e7499984b395c02763b019090fe040bd43f3550f9654594b083c2ac00b75d0b68900698fee624d6b8449bb17f1501af0de5d15f46da4a7265dbb7fa19b312f2c449ba42362321e40a54ab1334d17a6aa139b17223ff5b379cb2034c5d0c1b4334f2e2bb67695bdf0ba32b4463a4d952aa21d63300f0b08755ff7ab45a9ccc2b57fdf1253d"]}, @nested={0x4, 0x66}, @typed={0x48, 0x70, @binary="e0958fb4de2ba192c1729b605eee446f8653d6617b4b5c6aaf5b70399b499f738523807034aaf8ca31290267127c020d4ccb4e24df4fc9a8d91ac7624f1299c99b"}, @typed={0x8, 0x6d, @fd=r1}, @generic]}, 0x1344}, {&(0x7f0000002c40)={0x270, 0x32, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="221a10369f4970c3a6f5eced9ab19f549283e57afcdbdfecc7a4ac98ef06dbcd95351269480a6296cd87cec12ee4fa78cdb9160bd94bcd7eaf1c0cb80e310c60df055982d7f6178dd5605a35c239bbb8c3b6c778f61df41ce0b5453c620482a51fbcb5b56b5a18d8a9b385ac30dcf958283ed60808ca355112e7a1dfabf40395df9aa62c097f712147db639c63edcb6eed3029201cd01d7f2464e305100f60c9a3c39a20d3ad8d52489972af2782c0f16d2ea7c8", @typed={0x8, 0x4, @str='\x00'}, @typed={0x70, 0x1c, @binary="d30632316be4530da246523e8ef383383c8065e0b3ac3c22b12d257ebb8772c01b5b575f4bf6136fcd83d69be69bc30990cc500f644e95a922cbe2e068fcc5c2efee1e83bd8d869130f5b8bd419bd8b8a029c0e26ad6938be59c4c1354529927bdd2c321f87813d665"}, @generic="453aef8f995b5d4bcef3225fe9f7d6a45baf924a326760929890bcfd3a7f8a6266026ff8a66f1e3c31f3c4475876fa29c85c15063ea2a7993229e168b56dc9658069af4b849354b2b19dc3ef561d09794336e447e7baf56768709795c0df1b7135", @typed={0x8, 0x61, @u32=0xfffffffffffff21f}, @typed={0xac, 0x45, @binary="10f82deef1c2452b55d9198261cc9498730b6cab7954dd5a10e7521ca01fbcab94a2f110f705a28a43a68e2b654d2b6418a30964f8824ea3e269143314219342cbd78f58c7107df90d20794a9bced24ae9d049cf320696f734422c16f082ea7215195775dbab9a26c82a016b21910a59d5b60f4481661ab6a01bef3c59ab0659451ac029bd7ebdb8da3105697c0533789a7f6aecc77934d6e8bb627246ceb37a16fd0b40450c"}, @typed={0x8, 0x84, @u32=0x8}, @typed={0x14, 0x18, @ipv6=@ipv4={[], [], @loopback}}]}, 0x270}, {&(0x7f0000002fc0)={0x132c, 0x22, 0x28, 0x70bd27, 0x25dfdbfc, "", [@nested={0xd4, 0x61, [@generic="5519c656476eca1a6db6f7a94695c537dfd37b3d958c8b113a7be6b31b74fe12390b861166b9315b7c5245c69a75cad886b612db8a0a6aa07bd5a2fd8c3c7f3abbdc55b180ba63d79e2162323ee00526a794599a537d5485357327e41ce731a8f27975fdb7e52e639e841dab0faaefa935a33a3b08fd7912bcf7f38bb7e27d59a05bf6d3206332c659e5041a75c903f9ce5c33d606e518fb1b094ed275", @typed={0xc, 0x29, @u64=0x5c}, @typed={0x8, 0x10, @str='\x00'}, @generic="5505d2633d3d67b40c71d694635c9ce2e0eca941d14cb9354c9e18a23b44"]}, @nested={0x1080, 0x3a, [@generic="4a6141bedb9047aa388a94c580b96776ee423ea01fb622159a2298d1ccd7b45bc0a2ca9dc6a0454637bcaa7604b5ab5ee7036b0499f7185eabb68e6ca6fe10ad305ad3e38834a4af0f307b3cb5e1a5b93a4722e7c945b8c6304ac14f6bda68c4794efac1be854fe634708366f4b143be22175023b6ba92989d", @generic="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"]}, @generic="4b2fbfea06c3ae3398925cbd1735d946e97ca523e660c034752f3c2fb89ef68fef55120d6177b0cea6d29d2d039310d699b4bd06120c7611164059510b2b50d2960309481767d362b8290a68ad10a8bd9846aed889db9f49137fde47d32617ee6043e926302e6536adc28165f66d5dbae7f94befa75521fe8d3c09fc216b513e134aaf9aee131c7dbdcf4ec2f99c39e043e98b325b1043621193ce3b4dd40feec66e2837ed4b9eb7560dd9eb2069ab598b8cfc9da87f63272ee97834082f70e48085112f08908dd772beb8723f04f877bda38ffc06138dcdec13097dd798ecea535de43be955d054c93aef7f36de92ce653fd7a447bc9e", @generic="33346dd07fcb0208a7b1e10b0b4bebb1233887d6074d3526580bdd7ec703f1e245b875002307ea4920aa59807d7f16bcc41c99caeec5eadb0465331f1be12f8b395137e51f6be128724155208e537bf3cfd020809223397b3e1a8a702242d7da890c7f800bfd6031e79951bd9976e5f7f41a5977bac3874507be5b664861eb681a2a5130340bae807cabf1b1404dc7657839c7fd6db8908a7ff74c1acaf6c1a8179cf918392a94d9c87ca0fd0038fd122a3f00e8ede8bd178d3453df6f71b166368c", @typed={0x4, 0x67}, @typed={0x8, 0x78, @uid=r12}]}, 0x132c}, {&(0x7f0000004300)={0x3a0, 0x20, 0x10, 0x70bd26, 0x25dfdbfd, "", [@nested={0x11c, 0x9, [@typed={0x4, 0x2b}, @typed={0xc, 0x3e, @u64=0x80}, @typed={0x4, 0x73}, @typed={0xc, 0x48, @u64=0x3}, @generic="1fc3fff6dfe0ea203ef76db567aef34697612ed8a636b6e4492afc254c2c2d78de52f96545de39a4bad43497a04159c7f4790654cdf912f20fa52226adb95006a919995269350c35ef3489951dbe6206cec06b868eb768c3568d21b6846418d004bc9ad2965e1f7d8320cb10c4ada1d6d27042b251583f4613b8db5afe6618d74e2ba63dbd62b9151c3333cc2df934473748c73b5fa67692088c50dba4fbbb79a294d56accc27e2acf049065d991a27a1668f3ecec002d12212171ee6a5b6c77f686e13050a50e9f4a008e5e80201c23ee4ea8123b853a5c4d107fac3d6ac034e0aa5009d2b5fcc089377f4df4f6b441e2b6c428fce6c0ba"]}, @typed={0x14, 0x6d, @ipv6=@loopback}, @generic="58a39db6e2cc1360938548045e5e9ba33d9b7f481d002ba222372dbe49a009dfb9b14202cffb4e34ad22337bad04ab05", @nested={0x230, 0x11, [@generic="9ab0ae4d769109cc6a3ec078a715f0851efe858851ed647a6ddbcd02ddcee8f632addbaf45bb3e4a5cf1d704f73b0a7ffab55d078161555da9d89045b89f", @typed={0x8, 0x23, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @generic="9924ab1b01844d5d1e5e2e3ff6b7c4722d11e6c3596d0489a3a269740a2d14cdb6e78c74eb781b2d5ff2cbcd0ef030708cea016610344cb1ef534854350e1415842f157f51b1371b340e6f6b9f3a06f866cf0089a32d930f1779f90a5ab088ff6b80c73102", @generic="b78ec932a89c47b413abf64f5e35b8abf0ede5acc5ad81829f4098906b552ccad15ee70aafd3f2a27a72bba54f963666f2739752fd236a2d4fa3c8bbc9aab140f0774746b0d9fa7e3831592d58ac2a36942f0226a3a6ade87d0f6608b5ea2911f4f771c7d9ef7bfddf70a98fe4d230d589c04974", @typed={0x8, 0x31, @fd=r2}, @typed={0x8, 0x7d, @str='\x00'}, @generic="4919ea0cad193d5825d51701025b4e325ab0047bc9f5f7e69c9aa6599a4f8b1a6a1b8064fc00623d532995d43d517b2488eebb726d30a400aa2cd5640f95b789dfda01c89d3e51a382c8cb30151eeb8e4a17072a9780dc4cd2783e4531b3847d64156856a7b36675669edd610915f308380bd3f39c9f301b55c1e9aa97359292f0065908df9b9c8934b540be1770cf2323065d65db33a7ded228aee0e291fab4adeaee81d55858e62d27b4ce09b5ce4274d0b2a878fd4d2d3de34b6351f348f7a537a4b929fc7402f664f8ebdbca7d408fec293cb645ccd7058c1bc649d5c94abc963dfbcf257493b9995eb8c78f0f74530db77f93", @typed={0x8, 0x8d, @ipv4=@loopback}]}]}, 0x3a0}, {&(0x7f0000004740)={0x12d0, 0x11, 0x400, 0x70bd2a, 0x25dfdbff, "", [@nested={0x104, 0x2f, [@typed={0x8, 0x4e, @u32=0x2}, @typed={0x8, 0x8b, @uid=r13}, @generic="2b595db1ad37b96d3e8f1a2593a000a0962da791bb815d20cbe242bf38e2882bb341e6f6235947b500e29bc243a84c5e78d8a37785a1bb761a7dacda7547fdcab3fdd13c4e5e960f50bff2e2d12716cfcc0c151eb6a7ce4cbc8113774fb29ae947bc63023d2e3193c815e8bb5a5a210f5e504dfc283d713649de5aedcabd0329854d98bdab7c667e0abdae3300d661c6432915a25b474a108228307dd1d50164c74e774624ab329f01931b1a7d47aba318160d2b5504075dc67566c7a50a7cb67f66452c53e25d0d3b755f9413983004d4b7415a5d662bef04870a32eda4ee65989b6c15d9555ef5f8d681eb44"]}, @typed={0x8, 0x83, @u32=0x2a}, @typed={0x14, 0x10, @ipv6=@ipv4={[], [], @loopback}}, @nested={0x108, 0x91, [@typed={0x2c, 0x91, @str='ppp0cpusetvboxnet1vmnet1vmnet1ppp0ppp1\x00'}, @generic="d3d06bfe1c2740a9af9ccb02384cc2f2369ba36c674de377a2ca5e29a7a05ef34d98309af4ab6e6568724ed5e14fcbc5bada07981aa1e63276361935a1476ee1b6112c2b5112010e8885c5ef2a5e3153653f82ea2de0675d3344db0e826842b2f810fac3083ce072fe4f78de566073b81934a62f8ee2ad08a84399772526073d2c53ae7e0a9c539f0389453ec2f95ebad6a03a46186f1d07c9e3bd4a9190a4d5a605e1ad034d3d94a5", @generic="39463830a92f9473336ea4eaba3c9e2887dc232a273fb56cbee61344", @typed={0x8, 0x7f, @pid=r14}, @typed={0x8, 0x61, @ipv4=@multicast2}]}, @generic="be88fb6f25c8a0c3beb86573274ff02c6d2cfe2e4f679f8ca13847f9ea61a651eb777f75c71f0ed36639b8d8f86a7434dbbeb5ce708a604aa1a39631525ec9d0a2fc280fd7de5acb32ddb2552d94ab0ffb951ae09063acec919d1dc6d1fd2a12e6b71c1058fb8f24e299acef6ffa5f608661283c74cb19a76ee3eb5c5f74de31103015185ce1fe5102b803dc942f53b03e0a659694", @generic="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"]}, 0x12d0}, {&(0x7f0000005bc0)={0x290, 0x1b, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@generic="a4ede8ea543edf", @nested={0xd0, 0x4d, [@generic="9a4b277ebaff243d9e6e917705b0aaceb6b36723d3e71f07e6ac62205e52efa21260ca8fb2875c2a155770d42397b9579e4a16c5670ebfadabb5a821e2df7de9694ddefeccf837871d66a5dda2b3cc3b37b3eefceec7b13d1fd979a31d1e98f13fe6c95831ea059ba70298047068bbdf04850b2532029b388f2bb81051497e453a22e3c166901f1150d9fbc331ea0b87554e7c19dee4b2f2dcb0c3cf918ef6683b105b73db91130505ee1111557d4d149183b176b04fc8ebc5f63aba", @typed={0x8, 0x7b, @pid=r15}, @typed={0x8, 0x9, @uid=r17}]}, @typed={0x8, 0x6d, @pid=r18}, @typed={0x8, 0x74, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @typed={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast1}}, @typed={0xc, 0x30, @u64=0x40}, @nested={0x178, 0x22, [@generic="49f589e5cc2fd9f3acbef2209bc46a4f1b78353461dfad6c254b23e29a86fb42a26049b81a4cd60e16e1b908e150deb2e3b39a9f416ed6b813f8aa427ae649dac09d38f311994879cf4bb494e25e2d59480beb7bec2e8dc90e9f897f78db8044c2886560a772616f4e99d25ec063b68da4951062d9d224ce577c5aaa474f3d1219603c1d34f64514ef8d328e9798b7eab60a463e9e4cb9ef91696d29b04880127663a14a0171277b39fb74365bc82a071d1136b887a7d0aef5a8e0e683a2dcb6f1ec53aabaa815cce197ce4f7320f4e2e2179c62530abc", @generic="983736fc01a420a66d872694a472ae91192ab2fd2d366d5501496b7a99a22c26932ac6f66814921d002c33377502ac0221c5a64a96e271941d07a0cc5316921b5069254c6f3806cfe0590749feb452", @generic="40ed759d55032ad96aa1a800236d528d2c790a35512eca6007502d8363c8a0cc245a6432440d7c37c009d0cf9735f19137962b6990fcfae769b4dfcbe8e7182c9c9773", @typed={0x8, 0x1a, @str='#\x00'}]}]}, 0x290}], 0x8, &(0x7f0000006100)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="000000001800000000000000010000000100f600", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x1}, 0x800) migrate_pages(0x0, 0x0, &(0x7f00000001c0)=0x4, &(0x7f0000000240)) finit_module(r1, &(0x7f0000006180)="6e6f6465768400", 0x2) r25 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x214800, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r25, 0x40086409, &(0x7f0000000140)={r26}) setsockopt$inet_sctp_SCTP_INITMSG(r25, 0x84, 0x2, &(0x7f0000000180)={0x20, 0x1000000000000000, 0x5, 0x40}, 0x8) futex(&(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000280), 0x0) 03:33:20 executing program 2: keyctl$setperm(0x5, 0x0, 0x2000200) keyctl$update(0x2, 0x0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) [ 222.942544] FAT-fs (loop5): Directory bread(block 64) failed [ 222.962692] FAT-fs (loop5): Directory bread(block 65) failed [ 222.969712] FAT-fs (loop5): Directory bread(block 66) failed [ 222.976256] FAT-fs (loop5): Directory bread(block 67) failed [ 222.982893] FAT-fs (loop5): Directory bread(block 68) failed 03:33:20 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd07d275ed81350705f256d6c4617783999d18aa4fc", 0x28, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) [ 222.989719] FAT-fs (loop5): Directory bread(block 69) failed [ 222.997800] FAT-fs (loop5): Directory bread(block 70) failed [ 223.014229] FAT-fs (loop5): Directory bread(block 71) failed [ 223.034955] FAT-fs (loop5): Directory bread(block 72) failed 03:33:20 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 223.042904] FAT-fs (loop5): Directory bread(block 73) failed 03:33:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000167a88f966e2f8ff82bee89fa897e8eb96f7e50183ab4471c4ea40bca3cacd58ae885e7f17d1d932a81c9409d06a64defeaefc2df64f7dd0ade6c150a4c95f7e405959bffe5104e6"]}) close(r2) close(r1) 03:33:20 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:20 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x10, &(0x7f0000000a40)={&(0x7f0000000a00)=""/35, 0x23}}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x811}) recvmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00'}) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x600802) 03:33:21 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:21 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x9, 0x400000) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2276, &(0x7f0000000340)) 03:33:21 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:22 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x100) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000480)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000003c0)={r1, 0x3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x27}}, &(0x7f0000000240)="47504c0083ff130f5fb00e5d5b644354b6e27770c5a6241e8defd6533e2ae106be655c6c526349216c30bb1f80fb450ec0d5be", 0x1, 0x353, &(0x7f0000000180)=""/153}, 0x34e) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1ff, 0x10000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000380)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000400)={r4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r5, @ANYBLOB="01634040020000000000000000000000000000000000000010000000000000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000018000000000000001800000000000000"], @ANYBLOB="0663044000000000"], 0x57, 0x0, &(0x7f0000000300)="82030d7140090f1e8bd8254490113c6702469af70884a3161bd5e111016b3f8acd9012a935e35e08469c36e4e994f33a56f5627d7e881e0e4e61fc3751b95e00e5cb929e1d7b0d14e80de47da5e851ef3181d8a7740419"}) semget(0x2, 0x2560a840aaa7109e, 0x80) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000500)=""/4) dup3(r2, r3, 0x80000) 03:33:22 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)="6181775ff1d66f084cad2c720c3171f90dd31fd0", 0x14, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:22 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x100000002) getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000e40)=""/4096, &(0x7f0000000000)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8914, &(0x7f0000000080)="153f6234488dd25d766070") 03:33:22 executing program 3: r0 = socket(0x0, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/9, 0x9, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0), 0xc, &(0x7f0000002980), 0x0, &(0x7f00000029c0), 0x0, 0x881}, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x2) write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="73a17bf2"], 0x1200e) sync_file_range(r0, 0x5, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) 03:33:22 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:22 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000900)=""/80, 0x50}}], 0x1, 0x0, &(0x7f0000000fc0)={0x77359400}) connect$can_bcm(r0, &(0x7f0000000240), 0x19) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, r1/1000+10000}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}}, 0x0) ioctl$sock_bt(r0, 0x8906, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x4, 0x4) 03:33:23 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/', &(0x7f0000000140)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00") 03:33:23 executing program 1: r0 = getpgrp(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000200)={@local, @remote}, &(0x7f00000003c0)=0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) chroot(&(0x7f0000000240)='./file0\x00') bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f00000000c0), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, &(0x7f00000002c0), 0x10000000000443) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x802, 0x0) fsetxattr$security_evm(r2, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000380)=@v1={0x2, "7d95aaa82bc1077172"}, 0xa, 0x1) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000002c80), &(0x7f0000000280), 0x3e4, 0x0) syz_open_procfs(r0, &(0x7f0000000300)='net/ip6_tables_targets\x00') ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000180)={0x9, 0x7, 0x7fff, 0x1f}) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0x9) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/84) 03:33:23 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:23 executing program 3: r0 = socket(0x0, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:23 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)="6181775ff1d66f084cad", 0xa, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/9, 0x9, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0), 0xc, &(0x7f0000002980), 0x0, &(0x7f00000029c0), 0x0, 0x881}, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x2) write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="73a17bf2"], 0x1200e) sync_file_range(r0, 0x5, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) 03:33:23 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:23 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:23 executing program 1: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000480)) close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"000000000000000000e9dc00", 0x200082}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 03:33:24 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:25 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) getgroups(0x0, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000200000000000000000100005d39d7e1cc3073a5a47c51e746e93bd6066fcbda3a84cf93f548678a77b709cd891da20ace1562aded102d67ba652912a94f6ec2f5b7c7a53347df2ba707dab1ff010000000000008036ead7c9"], 0x5d}}, 0x0) 03:33:25 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)="6181775ff1", 0x5, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:25 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') sendfile(r0, r1, &(0x7f0000000000), 0x800000080000002) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x1}}, 0x0) 03:33:25 executing program 3: r0 = socket(0x0, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x10000000000007) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000000140), 0x7b, 0x0) 03:33:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/185, 0x140}], 0x1, 0x0) 03:33:25 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:25 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) write$FUSE_INIT(r1, &(0x7f00000003c0)={0x50}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xffffbfffffffffff, 0x0) read$FUSE(r2, &(0x7f0000001440), 0x1000) 03:33:25 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:25 executing program 1: r0 = socket(0xa, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, "6e72303db4862c67c3da87001900", 0x4}, 0x7d) r2 = fcntl$dupfd(r1, 0x0, r0) execveat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)="6e72303db4862c67c3da87001900"], &(0x7f0000000180)=[&(0x7f0000000100)="6e72303db4862c67c3da87001900", &(0x7f0000000140)=',.em0vmnet0\x00'], 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) 03:33:25 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:25 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)={0x3c, &(0x7f0000000040)=""/60}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:25 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xc84, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 03:33:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:25 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)="618177", 0x3, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) [ 228.260738] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 228.288258] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:26 executing program 3: r0 = socket(0x840000000015, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:26 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)={0x3c, &(0x7f0000000040)=""/60}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) semget$private(0x0, 0x4, 0x0) munlockall() mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=ANY=[]}) [ 228.404296] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:26 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:26 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)={0x3c, &(0x7f0000000040)=""/60}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:26 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:26 executing program 3: r0 = socket(0x840000000015, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 228.703020] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:26 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)={0x3c, &(0x7f0000000040)=""/60}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:26 executing program 0: r0 = socket(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 03:33:26 executing program 1: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000400), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') exit(0x800000200000f2) sendfile(r0, r1, &(0x7f0000000140), 0x2000007fe) [ 228.969477] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:26 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:26 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000580)=ANY=[]) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xff54}, 0x1006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00', &(0x7f0000000700)=""/215, 0xd7) stat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)) sendfile(r1, r1, &(0x7f00000000c0)=0x10, 0x8080fffffffe) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x1}}, 0x1e) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000003c0), &(0x7f00000001c0)=0x68) 03:33:26 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) [ 229.274911] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:27 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000280)=0x2000007, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x303, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/9, 0x9}, 0x12160) 03:33:27 executing program 3: r0 = socket(0x840000000015, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:27 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, 0x0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) [ 229.451162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:33:27 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, 0x0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:27 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 229.496235] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) clock_gettime(0x0, &(0x7f0000003500)) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000000800)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40)=""/107, 0x6b}}], 0x1, 0x0, &(0x7f0000003540)) 03:33:27 executing program 3: socket(0x840000000015, 0x805, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:27 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, 0x0, 0x2000200) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001f64)) dup3(r1, r0, 0x0) 03:33:27 executing program 4: r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:27 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) [ 229.790991] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:27 executing program 3: socket(0x840000000015, 0x805, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000180)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) 03:33:27 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:27 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:27 executing program 1: r0 = socket$kcm(0x29, 0x200000000000000, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='io.stat\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000480)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10) close(r3) sendmsg(r2, &(0x7f0000000300)={&(0x7f0000000500)=@in6={0xa, 0x4e24, 0x6c1, @mcast2, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000700)="e2545afb73450a53eb11f9dd1edaa20aadb9ea9553d2b73f8ff7fd24c81825d9c9c84b4d7a1a8c37b5edff1e8ecd44c6c84e029ee2b074a05b15364c7222298bc114c6dfb389608ab539380e", 0x4c}], 0x1, &(0x7f0000000780), 0x0, 0xc044}, 0x1) r4 = socket$kcm(0x2, 0x8000000003, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8981, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400), 0x0, 0x20000001}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x24000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"000000000000000000e9dc00", 0x200082}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000440)={r2, r6}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x2, &(0x7f0000346fc8)=ANY=[@ANYBLOB="187000b9acfa0b60952875c40067e3ba5b2aff"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) close(r8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'yam0\x00', 0x200}) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x4, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x2c) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x4, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 03:33:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001f64)) dup3(r1, r0, 0x0) [ 229.981696] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:27 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:27 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x0, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:27 executing program 3: socket(0x840000000015, 0x805, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:27 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x0, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001f64)) dup3(r1, r0, 0x0) 03:33:27 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000002c0)="b1a26306f3a25a35c6b3857f1f3a458de782b68142db967f0bf257baf59d62dce63b852dfabc1f023791ee6a94d21c3fcbe5464ec8be5014abe7", 0x3a) 03:33:27 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x503}, 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:33:28 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:33:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001f64)) dup3(r1, r0, 0x0) 03:33:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8ec3, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x3f) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[]], 0x8) 03:33:28 executing program 0: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) r1 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000001f64)) 03:33:28 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:28 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:28 executing program 2: 03:33:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:28 executing program 1: 03:33:28 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:28 executing program 2: 03:33:28 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:29 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x90, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}]}, 0x108) 03:33:29 executing program 1: [ 231.437662] kernel msg: ebtables bug: please report to author: Valid hook without chain 03:33:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:29 executing program 2: 03:33:29 executing program 1: 03:33:29 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x90, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}]}, 0x108) 03:33:29 executing program 2: [ 231.696927] kernel msg: ebtables bug: please report to author: Valid hook without chain 03:33:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:29 executing program 1: 03:33:29 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) socket$inet6(0xa, 0x3, 0x800000000002) dup3(r1, r0, 0x0) 03:33:29 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x90, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}]}, 0x108) 03:33:29 executing program 2: 03:33:29 executing program 1: 03:33:29 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x90, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}]}, 0x108) [ 232.141090] kernel msg: ebtables bug: please report to author: Valid hook without chain 03:33:29 executing program 2: [ 232.285361] kernel msg: ebtables bug: please report to author: Valid hook without chain 03:33:29 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:29 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x90, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}]}, 0x108) 03:33:30 executing program 1: [ 232.494485] kernel msg: ebtables bug: please report to author: Valid hook without chain 03:33:30 executing program 2: 03:33:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) socket$inet6(0xa, 0x3, 0x800000000002) dup3(r1, r0, 0x0) 03:33:30 executing program 1: 03:33:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:30 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x90, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}]}, 0x108) 03:33:30 executing program 2: [ 232.867911] kernel msg: ebtables bug: please report to author: Valid hook without chain 03:33:30 executing program 4: 03:33:30 executing program 1: 03:33:30 executing program 1: 03:33:30 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488d") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:30 executing program 1: 03:33:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) socket$inet6(0xa, 0x3, 0x800000000002) dup3(r1, r0, 0x0) 03:33:30 executing program 2: 03:33:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000005c001100000024d30ad400000000000000000001ac1414aa000000000000000000000000000000000000000000000000ffffffffedffffff000000000000000000000000000000000000000000000a00000000000000000000000000"], 0x1}}, 0x800) 03:33:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x438, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0xfffffd28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000380), &(0x7f0000000580)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) 03:33:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:31 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 03:33:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:31 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"000000000000000000e9dc00", 0x200082}) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') 03:33:31 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488d") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x40000021, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:31 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488d") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:32 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d76") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:33 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d76") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:34 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d76") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:34 executing program 4: socket(0x840000000015, 0x805, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:34 executing program 1: socket(0x840000000015, 0x805, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:35 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d7660") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:36 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d7660") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r0, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000180)) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 03:33:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:36 executing program 1: r0 = getpgrp(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000200)={@local, @remote}, &(0x7f00000003c0)=0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) chroot(&(0x7f0000000240)='./file0\x00') bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f00000000c0), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, &(0x7f00000002c0), 0x10000000000443) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x802, 0x0) fsetxattr$security_evm(r2, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000380)=@v1={0x2, "7d95aaa82bc1077172"}, 0xa, 0x1) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000002c80), &(0x7f0000000280), 0x3e4, 0x0) syz_open_procfs(r0, &(0x7f0000000300)='net/ip6_tables_targets\x00') ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000180)={0x9, 0x7, 0x7fff, 0x1f}) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0x9) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000005c0)=""/84) 03:33:37 executing program 2 (fault-call:2 fault-nth:0): clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r0, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000180)) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) [ 239.623618] FAULT_INJECTION: forcing a failure. [ 239.623618] name failslab, interval 1, probability 0, space 0, times 1 [ 240.126985] CPU: 1 PID: 8078 Comm: syz-executor2 Not tainted 4.19.0-rc7+ #280 [ 240.134314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.143845] Call Trace: [ 240.146555] dump_stack+0x1c4/0x2b4 [ 240.150214] ? dump_stack_print_info.cold.2+0x52/0x52 [ 240.155472] ? __local_bh_enable_ip+0x160/0x260 [ 240.160203] should_fail.cold.4+0xa/0x17 [ 240.164287] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 240.169450] ? release_sock+0x1ec/0x2c0 [ 240.173441] ? release_sock+0x1ec/0x2c0 [ 240.177476] ? graph_lock+0x170/0x170 [ 240.181295] ? lock_acquire+0x1ed/0x520 [ 240.185339] ? nf_sockopt_find.constprop.0+0x2d/0x290 [ 240.190585] ? find_held_lock+0x36/0x1c0 [ 240.194718] ? ___might_sleep+0x1ed/0x300 [ 240.198879] ? arch_local_save_flags+0x40/0x40 [ 240.203514] __should_failslab+0x124/0x180 [ 240.207789] should_failslab+0x9/0x14 [ 240.211625] kmem_cache_alloc_node_trace+0x270/0x740 [ 240.216767] ? __might_fault+0x12b/0x1e0 [ 240.220876] __get_vm_area_node+0x130/0x3a0 [ 240.225217] __vmalloc_node_range+0xc4/0x750 [ 240.229691] ? do_replace+0x23b/0x4c0 [ 240.233512] ? do_replace+0x23b/0x4c0 [ 240.237324] vmalloc+0x6f/0x80 [ 240.240526] ? do_replace+0x23b/0x4c0 [ 240.244335] do_replace+0x23b/0x4c0 [ 240.248030] ? apparmor_cred_transfer+0x590/0x590 [ 240.252889] ? compat_target_to_user+0x340/0x340 [ 240.257707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.263258] ? ns_capable_common+0x13f/0x170 [ 240.267682] do_ebt_set_ctl+0xe7/0x110 [ 240.271584] nf_setsockopt+0x7d/0xd0 [ 240.275341] ip_setsockopt+0xd8/0xf0 [ 240.279105] raw_setsockopt+0xe2/0x100 [ 240.283018] sock_common_setsockopt+0x9a/0xe0 [ 240.287529] __sys_setsockopt+0x1ba/0x3c0 [ 240.291692] ? kernel_accept+0x310/0x310 [ 240.295774] ? lockdep_hardirqs_on+0x421/0x5c0 [ 240.300446] ? trace_hardirqs_on+0xbd/0x310 [ 240.304827] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.310205] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 240.315673] __x64_sys_setsockopt+0xbe/0x150 [ 240.320122] do_syscall_64+0x1b9/0x820 [ 240.324022] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 240.329394] ? syscall_return_slowpath+0x5e0/0x5e0 [ 240.334326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.339174] ? trace_hardirqs_on_caller+0x310/0x310 [ 240.344193] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 240.349213] ? prepare_exit_to_usermode+0x291/0x3b0 [ 240.354238] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.359091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.364469] RIP: 0033:0x457569 [ 240.367668] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 240.386570] RSP: 002b:00007f7219ba7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.394282] RAX: ffffffffffffffda RBX: 00007f7219ba7c90 RCX: 0000000000457569 [ 240.401559] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 240.408828] RBP: 000000000072bf00 R08: 0000000000000138 R09: 0000000000000000 [ 240.416099] R10: 0000000020000280 R11: 0000000000000246 R12: 00007f7219ba86d4 03:33:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r0, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000180)) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 03:33:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r0, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000180)) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) [ 240.423403] R13: 00000000004c3a17 R14: 00000000004d5a78 R15: 0000000000000004 [ 240.445898] syz-executor2: vmalloc: allocation failure: 256 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 240.457510] syz-executor2 cpuset=syz2 mems_allowed=0 [ 240.462929] CPU: 1 PID: 8078 Comm: syz-executor2 Not tainted 4.19.0-rc7+ #280 [ 240.470214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.479563] Call Trace: [ 240.482149] dump_stack+0x1c4/0x2b4 [ 240.485765] ? dump_stack_print_info.cold.2+0x52/0x52 [ 240.490998] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 240.496551] warn_alloc.cold.119+0xb7/0x1bd [ 240.500873] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 240.505719] ? __get_vm_area_node+0x130/0x3a0 [ 240.510202] ? rcu_read_lock_sched_held+0x108/0x120 [ 240.515207] ? __might_fault+0x12b/0x1e0 [ 240.519263] ? __get_vm_area_node+0x2e5/0x3a0 [ 240.523750] __vmalloc_node_range+0x472/0x750 [ 240.528239] ? do_replace+0x23b/0x4c0 [ 240.532029] vmalloc+0x6f/0x80 [ 240.535209] ? do_replace+0x23b/0x4c0 [ 240.538997] do_replace+0x23b/0x4c0 [ 240.542613] ? apparmor_cred_transfer+0x590/0x590 [ 240.547446] ? compat_target_to_user+0x340/0x340 [ 240.552195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.557722] ? ns_capable_common+0x13f/0x170 [ 240.562120] do_ebt_set_ctl+0xe7/0x110 [ 240.566007] nf_setsockopt+0x7d/0xd0 [ 240.569711] ip_setsockopt+0xd8/0xf0 [ 240.573429] raw_setsockopt+0xe2/0x100 [ 240.577317] sock_common_setsockopt+0x9a/0xe0 [ 240.581800] __sys_setsockopt+0x1ba/0x3c0 [ 240.585937] ? kernel_accept+0x310/0x310 [ 240.589996] ? lockdep_hardirqs_on+0x421/0x5c0 [ 240.594567] ? trace_hardirqs_on+0xbd/0x310 [ 240.598875] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.604224] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 240.609663] __x64_sys_setsockopt+0xbe/0x150 [ 240.614061] do_syscall_64+0x1b9/0x820 [ 240.617954] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 240.623307] ? syscall_return_slowpath+0x5e0/0x5e0 [ 240.628223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.633062] ? trace_hardirqs_on_caller+0x310/0x310 [ 240.638082] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 240.643086] ? prepare_exit_to_usermode+0x291/0x3b0 [ 240.648125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.652980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.658167] RIP: 0033:0x457569 03:33:38 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d7660") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 240.661353] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 240.680240] RSP: 002b:00007f7219ba7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.687940] RAX: ffffffffffffffda RBX: 00007f7219ba7c90 RCX: 0000000000457569 [ 240.695198] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 240.702454] RBP: 000000000072bf00 R08: 0000000000000138 R09: 0000000000000000 [ 240.709707] R10: 0000000020000280 R11: 0000000000000246 R12: 00007f7219ba86d4 [ 240.716970] R13: 00000000004c3a17 R14: 00000000004d5a78 R15: 0000000000000004 [ 240.747110] Mem-Info: [ 240.749693] active_anon:133467 inactive_anon:113 isolated_anon:0 [ 240.749693] active_file:8029 inactive_file:36325 isolated_file:0 [ 240.749693] unevictable:17 dirty:209 writeback:0 unstable:0 [ 240.749693] slab_reclaimable:11921 slab_unreclaimable:101998 [ 240.749693] mapped:54992 shmem:119 pagetables:1346 bounce:0 [ 240.749693] free:1254976 free_pcp:1043 free_cma:0 [ 240.845285] Node 0 active_anon:540312kB inactive_anon:452kB active_file:32116kB inactive_file:145300kB unevictable:68kB isolated(anon):0kB isolated(file):0kB mapped:220268kB dirty:936kB writeback:0kB shmem:476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 360448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 03:33:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:38 executing program 1 (fault-call:2 fault-nth:0): r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) [ 240.893710] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 03:33:38 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) [ 241.010725] lowmem_reserve[]: 0 2819 6323 6323 [ 241.024046] Node 0 DMA32 free:2889372kB min:30060kB low:37572kB high:45084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2890736kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1364kB local_pcp:1364kB free_cma:0kB 03:33:38 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x10, r0, &(0x7f00000002c0), 0x0) [ 241.089963] lowmem_reserve[]: 0 0 3503 3503 [ 241.122308] Node 0 Normal free:2107120kB min:37352kB low:46688kB high:56024kB active_anon:540212kB inactive_anon:452kB active_file:32116kB inactive_file:145300kB unevictable:68kB writepending:984kB present:4718592kB managed:3588044kB mlocked:0kB kernel_stack:6272kB pagetables:5532kB bounce:0kB free_pcp:2208kB local_pcp:1092kB free_cma:0kB 03:33:38 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x1d, r0, &(0x7f00000002c0), 0x0) [ 241.208932] lowmem_reserve[]: 0 0 0 0 [ 241.686890] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 03:33:39 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x8, r0, &(0x7f00000002c0), 0x0) 03:33:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 241.731651] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 703*4096kB (M) = 2889372kB [ 241.812642] Node 0 Normal: 4340*4kB (UM) 1139*8kB (UM) 701*16kB (UM) 385*32kB (UME) 158*64kB (UM) 50*128kB (UM) 85*256kB (U) 26*512kB (U) 2*1024kB (ME) 3*2048kB (UM) 488*4096kB (M) = 2108632kB [ 241.851621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.860588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 241.869530] 44501 total pagecache pages [ 241.873522] 0 pages in swap cache [ 241.877063] Swap cache stats: add 0, delete 0, find 0/0 [ 241.882440] Free swap = 0kB [ 241.885466] Total swap = 0kB [ 241.896841] 1965979 pages RAM [ 241.899960] 0 pages HighMem/MovableOnly [ 241.903937] 342307 pages reserved 03:33:39 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:39 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x12, r0, &(0x7f00000002c0), 0x0) 03:33:39 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000340)={'syz'}, &(0x7f0000000380)="c7bde85cb699112ef5d42d6a3017b7fd56bdbf", 0x13, 0xfffffffffffffff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) pread64(r2, &(0x7f00000002c0)=""/70, 0x46, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) keyctl$update(0x2, r0, &(0x7f00000003c0)="7b969e8e8689f4013688700a3ffd2ba911f494f3238180a9d65fa3a50ed6f437b771d920261f596c1c", 0x29) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x400000000000117, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @reserved}, 0x10) [ 241.915771] 0 pages cma reserved 03:33:39 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0xa, r0, &(0x7f00000002c0), 0x0) [ 241.975620] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:41 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x300000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:41 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:41 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x17, r0, &(0x7f00000002c0), 0x0) 03:33:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000340)={'syz'}, &(0x7f0000000380)="c7bde85cb699112ef5d42d6a3017b7fd56bdbf", 0x13, 0xfffffffffffffff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) pread64(r2, &(0x7f00000002c0)=""/70, 0x46, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) keyctl$update(0x2, r0, &(0x7f00000003c0)="7b969e8e8689f4013688700a3ffd2ba911f494f3238180a9d65fa3a50ed6f437b771d920261f596c1c", 0x29) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x400000000000117, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @reserved}, 0x10) [ 244.012659] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:41 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x11, r0, &(0x7f00000002c0), 0x0) 03:33:41 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:41 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 244.054500] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:41 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x3, r0, &(0x7f00000002c0), 0x0) 03:33:41 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xffffffff00000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 244.172391] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 244.198165] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:41 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x4, r0, &(0x7f00000002c0), 0x0) [ 244.299804] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 244.314257] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:44 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x100000000004) r1 = socket$inet6(0xa, 0x3, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="480000001400199009004b0101048c01010000ebbd2e2ab9f5440000632379eb000000000000551f5f0028213ee20607000000000000003f666674a8ffff00c7e5ed5e00000000c8", 0x48}], 0x1) 03:33:44 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3f00000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:44 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0xc, r0, &(0x7f00000002c0), 0x0) [ 247.085130] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:44 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0xf, r0, &(0x7f00000002c0), 0x0) 03:33:44 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[]}}, 0xfffffffffffffffd) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000831c20000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x100}) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000005c80)={@remote, 0x0}, &(0x7f0000005cc0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005d00)={@mcast2, 0x25, r4}) 03:33:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:44 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:44 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x5, r0, &(0x7f00000002c0), 0x0) 03:33:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:47 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xff00, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:47 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:47 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0xb, r0, &(0x7f00000002c0), 0x0) 03:33:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x2000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, &(0x7f0000000180), &(0x7f0000000080), 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) getegid() write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000040)) 03:33:47 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:47 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0xe, r0, &(0x7f00000002c0), 0x0) 03:33:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:47 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:47 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:48 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x16, r0, &(0x7f00000002c0), 0x0) 03:33:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:50 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x4, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:50 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x15, r0, &(0x7f00000002c0), 0x0) 03:33:50 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 03:33:50 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x60, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:50 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x6, r0, &(0x7f00000002c0), 0x0) 03:33:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) 03:33:51 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:51 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 253.511626] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 253.537619] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:53 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x9, r0, &(0x7f00000002c0), 0x0) 03:33:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:53 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x400000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:53 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0xfffffffffffff801, &(0x7f0000000100)="13050085e612c83d012e7c3f6234488dd259776070") bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000007a0a00fffffffffd63012c"], &(0x7f00000002c0)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x184, &(0x7f0000000300)=""/187}, 0x48) 03:33:53 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0xd, r0, &(0x7f00000002c0), 0x0) [ 256.281073] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 256.320093] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:54 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x13, r0, &(0x7f00000002c0), 0x0) 03:33:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:54 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:54 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000780)) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'rose0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}}) r0 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000680)={@mcast1}, &(0x7f0000000540)=0x2) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000700)={@dev={0xfe, 0x80, [], 0xc}, 0x12}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x6, 0x0, 0x0, 0x1, 0x0, 0x100000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0x6, 0x0, 0x2, 0x400, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x401, 0x0, 0x1, 0x0, 0x401, 0x28b, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xede2}, 0x400, 0x4, 0x8, 0x2}, 0x0, 0x5, r0, 0xa) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67f79cb0c6f5f4bf8ed60dce2176c22a20b22b9b24172b5569ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f671855d40a2c1c173d4bb121bc86270c32d39c4c0d09a29b8983169914d8df86417a802b772bb638f72ccdcbb46267b5751816c77b6739f484292d5ca5e1bc4efee06f4e07e6a795faee2af27a8f212", 0x115, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_extract_tcp_res(&(0x7f0000000380), 0x3, 0xfff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8100040}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000580)) accept$inet6(r0, 0x0, &(0x7f0000000500)) 03:33:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:54 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:54 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x14, r0, &(0x7f00000002c0), 0x0) 03:33:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(0xffffffffffffffff, r0, 0x0) 03:33:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) r1 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="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", 0x1000, 0xfffffffffffffffb) fstat(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, r3) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x15, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18001e0000000000000000000000613eb0d6250000000000000095000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) pread64(r0, &(0x7f00000011c0)=""/200, 0xc8, 0x0) 03:33:54 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:54 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:54 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x7, r0, &(0x7f00000002c0), 0x0) 03:33:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:54 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xff000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:55 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3f00, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:55 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0xfeffff00000000) 03:33:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:55 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:55 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r0, 0xffffffffffffffff, 0x0) 03:33:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:55 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x400000000000000) 03:33:56 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:56 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x7fffffe, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:56 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r0, 0xffffffffffffffff, 0x0) 03:33:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:56 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x1000000) 03:33:56 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:56 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r0, 0xffffffffffffffff, 0x0) [ 259.011465] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:57 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:57 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0xf000000) 03:33:57 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xff00000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) [ 259.720948] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:57 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x4000000) 03:33:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:57 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x60000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:57 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 03:33:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:58 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x4) 03:33:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x500, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x600000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:58 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x8) 03:33:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) [ 260.839317] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440), &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:33:58 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0xf00000000000000) 03:33:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) [ 261.014613] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:33:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x200000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:58 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x10000000000000) 03:33:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:59 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x7000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:59 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x100000) 03:33:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:33:59 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3f000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:33:59 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0xf) 03:34:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440), &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:01 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x700, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:01 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x800000000000000) 03:34:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xae) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:01 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x5, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:02 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x100000000000000) 03:34:02 executing program 3 (fault-call:5 fault-nth:0): r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:02 executing program 4: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) clock_gettime(0x8, &(0x7f0000000200)) write$evdev(r0, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) socket$inet(0x2, 0xb, 0x100) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) close(r0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x100) 03:34:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:02 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x7, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 264.835921] FAULT_INJECTION: forcing a failure. [ 264.835921] name failslab, interval 1, probability 0, space 0, times 0 [ 264.890023] CPU: 0 PID: 8642 Comm: syz-executor3 Not tainted 4.19.0-rc7+ #280 [ 264.897353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.906711] Call Trace: [ 264.906827] dump_stack+0x1c4/0x2b4 [ 264.906854] ? dump_stack_print_info.cold.2+0x52/0x52 [ 264.918399] should_fail.cold.4+0xa/0x17 [ 264.922479] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 264.927603] ? __lock_acquire+0x7ec/0x4ec0 [ 264.931851] ? graph_lock+0x170/0x170 [ 264.935665] ? graph_lock+0x170/0x170 [ 264.939488] ? find_held_lock+0x36/0x1c0 [ 264.939509] ? __lock_is_held+0xb5/0x140 [ 264.939537] ? ___might_sleep+0x1ed/0x300 [ 264.951779] ? arch_local_save_flags+0x40/0x40 [ 264.951795] ? print_usage_bug+0xc0/0xc0 [ 264.951811] ? rcu_bh_qs+0xc0/0xc0 [ 264.951904] ? dput.part.26+0x241/0x790 [ 264.967949] ? lock_downgrade+0x900/0x900 [ 264.972113] __should_failslab+0x124/0x180 [ 264.976367] should_failslab+0x9/0x14 [ 264.980199] kmem_cache_alloc+0x2be/0x730 [ 264.984354] ? __lock_acquire+0x7ec/0x4ec0 [ 264.988611] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 264.994184] ? may_expand_vm+0x1e3/0x810 [ 264.998259] vm_area_dup+0x7a/0x230 [ 265.001895] ? vm_area_alloc+0x1d0/0x1d0 [ 265.005967] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 265.010997] __split_vma+0xae/0x570 [ 265.014635] ? find_vma+0x34/0x190 [ 265.018192] do_munmap+0x308/0xf50 [ 265.021746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.027304] mmap_region+0x6a4/0x1cd0 [ 265.031124] ? __x64_sys_brk+0x7d0/0x7d0 [ 265.035209] ? find_held_lock+0x36/0x1c0 [ 265.039284] ? graph_lock+0x170/0x170 [ 265.043153] ? get_pid_task+0xd6/0x1a0 [ 265.043222] ? mpx_unmapped_area_check+0xd8/0x108 [ 265.051940] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 265.057409] ? arch_get_unmapped_area+0x750/0x750 [ 265.062267] ? lock_acquire+0x1ed/0x520 [ 265.066255] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 265.071316] ? cap_mmap_addr+0x52/0x130 [ 265.075310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.080859] ? security_mmap_addr+0x80/0xa0 [ 265.085200] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 265.090750] ? get_unmapped_area+0x292/0x3b0 [ 265.095186] do_mmap+0xa10/0x1220 [ 265.098664] ? mmap_region+0x1cd0/0x1cd0 [ 265.102735] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 265.106810] ? down_read_killable+0x1f0/0x1f0 [ 265.111328] ? security_mmap_file+0x174/0x1b0 [ 265.115841] vm_mmap_pgoff+0x213/0x2c0 [ 265.119750] ? vma_is_stack_for_current+0xd0/0xd0 [ 265.124604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.130236] ? check_preemption_disabled+0x48/0x200 [ 265.135305] ? __sb_end_write+0xd9/0x110 [ 265.139383] ksys_mmap_pgoff+0xf1/0x660 [ 265.143372] ? do_syscall_64+0x9a/0x820 [ 265.147358] ? find_mergeable_anon_vma+0xd0/0xd0 [ 265.152126] ? trace_hardirqs_on+0xbd/0x310 [ 265.156477] ? __ia32_sys_read+0xb0/0xb0 [ 265.160548] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.165926] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 265.171392] __x64_sys_mmap+0xe9/0x1b0 [ 265.175301] do_syscall_64+0x1b9/0x820 [ 265.179203] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 265.184580] ? syscall_return_slowpath+0x5e0/0x5e0 [ 265.189523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.194384] ? trace_hardirqs_on_caller+0x310/0x310 [ 265.199416] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 265.204461] ? prepare_exit_to_usermode+0x291/0x3b0 [ 265.209500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.214365] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.219558] RIP: 0033:0x457569 [ 265.222761] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.241670] RSP: 002b:00007f1691547c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 265.249392] RAX: ffffffffffffffda RBX: 00007f1691547c90 RCX: 0000000000457569 [ 265.256669] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020004000 [ 265.263946] RBP: 000000000072bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 265.271224] R10: 0000000000000032 R11: 0000000000000246 R12: 00007f16915486d4 [ 265.278503] R13: 00000000004c2836 R14: 00000000004d3bd0 R15: 0000000000000006 03:34:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440), &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:05 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0xf00) 03:34:05 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x700000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:05 executing program 3 (fault-call:5 fault-nth:1): r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:05 executing program 4: io_pgetevents(0x0, 0x7fff, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) clock_gettime(0x8, &(0x7f0000000200)) write$evdev(r0, &(0x7f0000000400), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/68) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) socket$inet(0x2, 0xb, 0x100) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) mlock2(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) close(r0) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x100) 03:34:05 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x5000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 267.729217] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 267.744905] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:05 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x1000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:05 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x300, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:05 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x2, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 267.895023] cgroup: fork rejected by pids controller in /syz2 [ 267.923287] FAULT_INJECTION: forcing a failure. [ 267.923287] name failslab, interval 1, probability 0, space 0, times 0 [ 267.957574] CPU: 0 PID: 8691 Comm: syz-executor3 Not tainted 4.19.0-rc7+ #280 [ 267.964872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.974244] Call Trace: [ 267.976848] dump_stack+0x1c4/0x2b4 [ 267.980501] ? dump_stack_print_info.cold.2+0x52/0x52 [ 267.985709] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 267.990658] ? graph_lock+0x170/0x170 [ 267.994484] should_fail.cold.4+0xa/0x17 [ 267.998560] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.003678] ? graph_lock+0x170/0x170 [ 268.007492] ? graph_lock+0x170/0x170 [ 268.011302] ? lock_acquire+0x1ed/0x520 [ 268.015286] ? graph_lock+0x170/0x170 [ 268.019115] ? find_held_lock+0x36/0x1c0 [ 268.023201] ? __lock_is_held+0xb5/0x140 [ 268.027285] ? ___might_sleep+0x1ed/0x300 [ 268.031452] ? arch_local_save_flags+0x40/0x40 [ 268.036047] ? kasan_check_write+0x14/0x20 [ 268.040300] __should_failslab+0x124/0x180 [ 268.044545] should_failslab+0x9/0x14 [ 268.048355] kmem_cache_alloc+0x2be/0x730 [ 268.052515] ? __vma_adjust+0xab6/0x1810 [ 268.056591] vm_area_dup+0x7a/0x230 [ 268.060228] ? vm_area_alloc+0x1d0/0x1d0 [ 268.064309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.069861] __split_vma+0xae/0x570 [ 268.073492] ? find_vma+0x34/0x190 [ 268.077046] do_munmap+0x387/0xf50 [ 268.080597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.086157] mmap_region+0x6a4/0x1cd0 [ 268.089988] ? __x64_sys_brk+0x7d0/0x7d0 [ 268.094061] ? find_held_lock+0x36/0x1c0 [ 268.098133] ? graph_lock+0x170/0x170 [ 268.101978] ? get_pid_task+0xd6/0x1a0 [ 268.105880] ? mpx_unmapped_area_check+0xd8/0x108 [ 268.110742] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 268.116215] ? arch_get_unmapped_area+0x750/0x750 [ 268.121073] ? lock_acquire+0x1ed/0x520 [ 268.125055] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 268.130079] ? cap_mmap_addr+0x52/0x130 [ 268.134066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.139615] ? security_mmap_addr+0x80/0xa0 [ 268.143951] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.149496] ? get_unmapped_area+0x292/0x3b0 [ 268.153915] do_mmap+0xa10/0x1220 [ 268.157386] ? mmap_region+0x1cd0/0x1cd0 [ 268.161456] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 268.165530] ? down_read_killable+0x1f0/0x1f0 [ 268.170042] ? security_mmap_file+0x174/0x1b0 [ 268.174552] vm_mmap_pgoff+0x213/0x2c0 [ 268.178466] ? vma_is_stack_for_current+0xd0/0xd0 [ 268.183318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.188865] ? check_preemption_disabled+0x48/0x200 [ 268.193894] ? __sb_end_write+0xd9/0x110 [ 268.197969] ksys_mmap_pgoff+0xf1/0x660 [ 268.201951] ? do_syscall_64+0x9a/0x820 [ 268.206294] ? find_mergeable_anon_vma+0xd0/0xd0 [ 268.211060] ? trace_hardirqs_on+0xbd/0x310 [ 268.215397] ? __ia32_sys_read+0xb0/0xb0 [ 268.219478] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.224855] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 268.230328] __x64_sys_mmap+0xe9/0x1b0 [ 268.234252] do_syscall_64+0x1b9/0x820 [ 268.238156] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 268.243554] ? syscall_return_slowpath+0x5e0/0x5e0 [ 268.248505] ? trace_hardirqs_on_caller+0x310/0x310 [ 268.253541] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 268.258647] ? recalc_sigpending_tsk+0x180/0x180 [ 268.263419] ? kasan_check_write+0x14/0x20 [ 268.267682] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.272550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.277747] RIP: 0033:0x457569 [ 268.280950] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.299867] RSP: 002b:00007f1691526c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 268.307620] RAX: ffffffffffffffda RBX: 00007f1691526c90 RCX: 0000000000457569 [ 268.314905] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020004000 [ 268.322193] RBP: 000000000072bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 268.329475] R10: 0000000000000032 R11: 0000000000000246 R12: 00007f16915276d4 [ 268.336747] R13: 00000000004c2836 R14: 00000000004d3bd0 R15: 0000000000000006 03:34:06 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ff8000/0x4000)=nil, 0x6, 0x1000000000, 0x6, &(0x7f0000ffa000/0x3000)=nil, 0x3}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f00000003c0)={0xe}, 0x4) 03:34:06 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x10) [ 268.594228] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.636861] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.674462] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.700531] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.710234] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.717177] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.723874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.731305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.738107] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.744787] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.751534] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.760874] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 268.776156] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.782967] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.789720] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.796657] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.803361] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.810338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.817115] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.823821] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.830556] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.830585] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.830605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 268.852946] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 269.457011] device bridge_slave_1 left promiscuous mode [ 269.462891] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.550575] device bridge_slave_0 left promiscuous mode [ 269.556045] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.618290] team0 (unregistering): Port device team_slave_1 removed [ 269.629040] team0 (unregistering): Port device team_slave_0 removed [ 269.643175] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 269.701984] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 269.758571] bond0 (unregistering): Released all slaves 03:34:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x3, [0x7, 0x2, 0x7]}, 0xa) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:08 executing program 3 (fault-call:5 fault-nth:2): r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:08 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x2) 03:34:08 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xfeffff0700000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x7, 0x2, 0x7, 0x3]}, 0xc) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 271.655865] FAULT_INJECTION: forcing a failure. [ 271.655865] name failslab, interval 1, probability 0, space 0, times 0 [ 271.715737] CPU: 1 PID: 8722 Comm: syz-executor3 Not tainted 4.19.0-rc7+ #280 [ 271.723045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.732402] Call Trace: [ 271.735014] dump_stack+0x1c4/0x2b4 [ 271.738662] ? dump_stack_print_info.cold.2+0x52/0x52 [ 271.743964] ? is_bpf_text_address+0xd3/0x170 [ 271.748492] should_fail.cold.4+0xa/0x17 [ 271.752569] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.757693] ? save_stack+0xa9/0xd0 [ 271.761328] ? save_stack+0x43/0xd0 03:34:09 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x200000000000000) 03:34:09 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0xfffffffffffffffd) [ 271.764964] ? kasan_kmalloc+0xc7/0xe0 [ 271.768859] ? kasan_slab_alloc+0x12/0x20 [ 271.773020] ? kmem_cache_alloc+0x12e/0x730 [ 271.777355] ? vm_area_dup+0x7a/0x230 [ 271.781161] ? __split_vma+0xae/0x570 [ 271.784986] ? do_munmap+0x387/0xf50 [ 271.788707] ? mmap_region+0x6a4/0x1cd0 [ 271.792689] ? do_mmap+0xa10/0x1220 [ 271.796335] ? vm_mmap_pgoff+0x213/0x2c0 [ 271.800403] ? ksys_mmap_pgoff+0xf1/0x660 [ 271.804558] ? __x64_sys_mmap+0xe9/0x1b0 [ 271.808633] ? do_syscall_64+0x1b9/0x820 [ 271.812704] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.818149] ? percpu_ref_put_many+0x11c/0x260 [ 271.822753] ? lock_downgrade+0x900/0x900 [ 271.826914] ? check_preemption_disabled+0x48/0x200 [ 271.831959] ? kasan_check_read+0x11/0x20 [ 271.833173] IPVS: ftp: loaded support on port[0] = 21 [ 271.836121] ? graph_lock+0x170/0x170 [ 271.845105] ? rcu_bh_qs+0xc0/0xc0 [ 271.848659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.854209] ? check_preemption_disabled+0x48/0x200 [ 271.859236] ? check_preemption_disabled+0x48/0x200 [ 271.864272] __should_failslab+0x124/0x180 [ 271.868519] should_failslab+0x9/0x14 [ 271.872327] kmem_cache_alloc+0x47/0x730 [ 271.876402] ? rcu_read_lock_sched_held+0x108/0x120 [ 271.881436] anon_vma_clone+0x140/0x710 [ 271.885430] ? unlink_anon_vmas+0xa60/0xa60 [ 271.889758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.895301] __split_vma+0x183/0x570 [ 271.899018] ? find_vma+0x34/0x190 [ 271.899037] do_munmap+0x387/0xf50 [ 271.899054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.899075] mmap_region+0x6a4/0x1cd0 [ 271.899101] ? __x64_sys_brk+0x7d0/0x7d0 [ 271.899118] ? find_held_lock+0x36/0x1c0 [ 271.899134] ? graph_lock+0x170/0x170 [ 271.899152] ? get_pid_task+0xd6/0x1a0 [ 271.899199] ? mpx_unmapped_area_check+0xd8/0x108 [ 271.899220] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 271.899239] ? arch_get_unmapped_area+0x750/0x750 [ 271.899254] ? lock_acquire+0x1ed/0x520 [ 271.899266] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 271.899280] ? cap_mmap_addr+0x52/0x130 [ 271.931628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.941899] ? security_mmap_addr+0x80/0xa0 [ 271.950696] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.959658] ? get_unmapped_area+0x292/0x3b0 [ 271.959676] do_mmap+0xa10/0x1220 [ 271.959697] ? mmap_region+0x1cd0/0x1cd0 [ 271.959708] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 271.959726] ? down_read_killable+0x1f0/0x1f0 [ 271.959743] ? security_mmap_file+0x174/0x1b0 [ 271.959761] vm_mmap_pgoff+0x213/0x2c0 [ 271.959789] ? vma_is_stack_for_current+0xd0/0xd0 [ 271.969632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.969655] ? check_preemption_disabled+0x48/0x200 [ 271.979598] ? __sb_end_write+0xd9/0x110 [ 271.979619] ksys_mmap_pgoff+0xf1/0x660 [ 271.979635] ? do_syscall_64+0x9a/0x820 [ 271.979653] ? find_mergeable_anon_vma+0xd0/0xd0 [ 271.979669] ? trace_hardirqs_on+0xbd/0x310 [ 271.979683] ? __ia32_sys_read+0xb0/0xb0 [ 271.979698] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.979712] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 271.979733] __x64_sys_mmap+0xe9/0x1b0 [ 271.979758] do_syscall_64+0x1b9/0x820 [ 271.995806] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 272.068434] ? syscall_return_slowpath+0x5e0/0x5e0 [ 272.073371] ? trace_hardirqs_on_caller+0x310/0x310 [ 272.078394] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 272.083414] ? recalc_sigpending_tsk+0x180/0x180 [ 272.088185] ? kasan_check_write+0x14/0x20 [ 272.092434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.097289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.102563] RIP: 0033:0x457569 [ 272.105757] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.124665] RSP: 002b:00007f1691526c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 272.132380] RAX: ffffffffffffffda RBX: 00007f1691526c90 RCX: 0000000000457569 [ 272.139651] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020004000 [ 272.146918] RBP: 000000000072bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 272.154201] R10: 0000000000000032 R11: 0000000000000246 R12: 00007f16915276d4 03:34:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:09 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x2000000) 03:34:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x3, [0x7, 0x2, 0x7]}, 0xa) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 272.161470] R13: 00000000004c2836 R14: 00000000004d3bd0 R15: 0000000000000006 03:34:09 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0xfeffff) 03:34:10 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x501480, 0x8) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000240)={0xeb, 0x2, 0xfffffffffffffffb, 0x800}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6a52bf08) r3 = socket$inet6(0xa, 0x80f, 0xfffffffffffffffd) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000280)={@loopback, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={r4, 0x1, 0x6}, 0x10) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@local, @loopback, @local, 0x0, 0x40, 0x0, 0x100, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000000c0)) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 03:34:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:10 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:10 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x8000000) [ 273.324675] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.331183] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.338749] device bridge_slave_0 entered promiscuous mode [ 273.365050] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.372082] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.379319] device bridge_slave_1 entered promiscuous mode [ 273.405328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 273.431695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 273.508207] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 273.537597] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 273.654937] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 273.662134] team0: Port device team_slave_0 added [ 273.688093] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 273.695197] team0: Port device team_slave_1 added [ 273.720699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.748156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.776246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.804686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.048116] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.054484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.061160] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.067540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.943737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.030783] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 275.117932] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 275.124085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.131725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.214156] 8021q: adding VLAN 0 to HW filter on device team0 03:34:13 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xffffff7f00000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000380)=0x40, 0x12) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x17) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x880) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0xec3cb9ac915778ed, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x7, 0x0, 0x7}, 0xb) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r5, 0x6, 0x1}, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0x94) r7 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000008c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fb000000ffffff7f0001000009000000000000000100000000000000abd6b72400000000000000000000000000000000000000000000000000000000ff00000005000000ba0d0000000000004400000000000000040000000000000075e10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000"]) close(0xffffffffffffffff) 03:34:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x2, [0x7, 0x2]}, 0x8) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:13 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0xfffffe00) 03:34:13 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x507000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 275.713451] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 275.781149] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 275.815240] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:13 executing program 1: r0 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) keyctl$setperm(0x5, r0, 0x100000) keyctl$update(0x2, 0x0, &(0x7f00000002c0), 0x0) 03:34:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:13 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x600, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:13 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x605000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x0, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x0, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x0, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:14 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000380)=0x40, 0x12) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x17) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x880) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0xec3cb9ac915778ed, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x7, 0x0, 0x7}, 0xb) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r5, 0x6, 0x1}, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0x94) r7 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000008c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fb000000ffffff7f0001000009000000000000000100000000000000abd6b72400000000000000000000000000000000000000000000000000000000ff00000005000000ba0d0000000000004400000000000000040000000000000075e10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000"]) close(0xffffffffffffffff) 03:34:14 executing program 1: r0 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="bd99ffa9471dde1f7f85d8452b762669bd2d08fc6fbf81471d107c6b694056b26e7528180925d055b2cca96532a483eb049bf8c4d42c26124ed43d7cbc8540e283370035aed80ce596fcde0a6e6734da898c99c576d29ec144e08c6fb834bfedeef8e53c0598a9e80a639dbc58b46b83bf45fcffbcf7cd903b4f01ea4ca01e2e75e95c2be93331592665163882a1c963b8f37109530121f6ce0b9713466379a995cc3718d7a8b29f9f8b112a448a439290a3203f5539f7db6e8959b331b05eb37c999d", 0xc3, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000340)="61daae6a797dc1ed3208de56618fc9730b6d1027e25f6e10f81c84d0989004a039b3807fd2cc7391d193c6a27368893cbd5d2ba37f0f9095104755128cf83502a1acfacc7efa7145f87ec119f610c79b1ae11696da04676b2935f2bf3c51f403d1cd0f32a0d4f2c7cee8175b2ab79cc5ec1f549764d7962235c2a45c381dfa874873df9eef47", 0x86, r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x220000, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001800)={0x0, 0xfffffffffffffffb, 0xc5, 0x3ff, @scatter={0x1, 0x0, &(0x7f0000001640)=[{&(0x7f0000000640)=""/4096, 0x1000}]}, &(0x7f0000001680)="840d936ea0875c499cb288b33d80e9daadd875469c0529294de73b5d31a182e1f3a453c3353d4e47c9ddca77ebe7d951bd71c48ab03515c02245021d5ba83fa7d5689cf44c77e34fd747f30870666cf97667737419f8e1ac01f6dbe89b0e8a6ac2905c54e0c2f97fd024ceab4545af9fc048d389c9bcf03f7c4dd4e03debe2c96604716cdd5e698121ac80c8717d7019ba296d7776e5a6fdedacc0c1700c33518f03eedf5c439de2173a3db6b57acc0d1a8b1e4d0cbe18c53126c90f7e1e986ef7da44e759", &(0x7f0000001780)=""/50, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000017c0)}) keyctl$setperm(0x5, r2, 0x40003) r4 = syz_open_dev$amidi(&(0x7f0000001880)='/dev/amidi#\x00', 0x3f, 0x200000) epoll_wait(r4, &(0x7f0000000580)=[{}], 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f00000000c0)=""/190, &(0x7f0000000180)=0xbe) bind$vsock_stream(r5, &(0x7f00000005c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) keyctl$unlink(0x9, r0, r0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x1e}}, 0x1c) keyctl$update(0x2, r2, &(0x7f00000002c0), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x800000000000, 0x1f, 0x0, 0x24, 0x8, 0x8, 0x0, 0xc09, 0x0}, &(0x7f0000000480)=0x20) flock(r6, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000004c0)={r7, 0x1ff}, 0x8) 03:34:14 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:14 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x20000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:14 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4002, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:14 executing program 1: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r3, 0xd}}, 0x10) 03:34:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) socket$inet6(0xa, 0x3, 0x800000000002) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:15 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xffffff7f, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:15 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xfeffff07, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) socket$inet6(0xa, 0x3, 0x800000000002) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:15 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000001c0)="be88516acab46d77873bd83f02bd94909bc0b2f12f2d1e2a3d9d629c2f2d5919b803a426ef791ce418a9759e48cdac2e3713b009bd51772e64324446d50d4156c0865a85e752ff738ff200808d4f93d9d291d0ceda4bdd4995e5fd544e8d5ec6975bd94722d64eb4911b248b05ae983f56aecc", 0xfffffffffffffded) 03:34:16 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4004, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:16 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x500000000000000, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x2, 0x3, 0x0, 0x0, 0x9, 0x2, 0x9}, &(0x7f0000000100)=0x20) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r1, &(0x7f0000009f9c)=""/100, 0x64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001240)={0x0, 0x80000}) r2 = memfd_create(&(0x7f0000000040)='\x00', 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x5, 0x20}, 0xc) openat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$update(0x2, r3, &(0x7f00000002c0), 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2400, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6) 03:34:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) socket$inet6(0xa, 0x3, 0x800000000002) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = gettid() perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x8000000200000100, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200100, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="660fd9ee3e0f080f225e67656a000f30baa000b852eeefbaf80c66b8bca5b58266efbafc0c66edf3f3650f18cf0f01d70f23bf", 0x33}], 0x1, 0x20, &(0x7f0000000140), 0x0) tkill(r0, 0x15) 03:34:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240), 0x4) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 278.549602] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:16 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x12, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 278.591204] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:16 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2b, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:16 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x30, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:16 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:16 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xf, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:17 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x400a, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:17 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x31, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:17 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="8b138c4cd1c91fc7e2ada79eb1e0077e", 0x10) keyctl$update(0x2, r0, &(0x7f0000000140), 0x0) 03:34:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x0]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240), 0x4) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:17 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:17 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x21, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:17 executing program 1: request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000000)='systemem1@%{][wlan1\x00', 0xfffffffffffffffe) socketpair(0xf, 0xa, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000280)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000000400)=0x19b) pipe2$9p(&(0x7f00000002c0), 0x4000) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x6, r2, 0x12, r0}, 0x10) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000240)=""/44) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0xffffffffffffff41, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/151) keyctl$update(0x2, r3, &(0x7f00000002c0), 0x0) faccessat(r1, &(0x7f0000000440)='./file0\x00', 0x40, 0x800) 03:34:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x0]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x2, 0x3, 0x0, 0x0, 0x9, 0x2, 0x9}, &(0x7f0000000100)=0x20) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r1, &(0x7f0000009f9c)=""/100, 0x64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001240)={0x0, 0x80000}) r2 = memfd_create(&(0x7f0000000040)='\x00', 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x5, 0x20}, 0xc) openat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$update(0x2, r3, &(0x7f00000002c0), 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2400, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6) 03:34:17 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x10, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:18 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x7fffdfffb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:18 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x100) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000100)={0x7004, 0x3000, 0x7, 0x2, 0xe2}) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:18 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x13, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:18 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x111640, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000140)={0x101, {{0xa, 0x4e22, 0x0, @local, 0x5}}}, 0x88) 03:34:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)) dup3(r1, r0, 0x0) 03:34:18 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xa, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:18 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rfcomm\x00') getsockname$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) 03:34:18 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r2) 03:34:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)) dup3(r1, r0, 0x0) 03:34:18 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x29, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:19 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:19 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00', @ifru_names='bond0\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22000, 0x0) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000080)=""/124, &(0x7f0000000100)=0x7c) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000200)={0x6, 0x5964, 0x2}) r3 = getegid() lchown(&(0x7f0000000000)='./file0\x00', r2, r3) 03:34:19 executing program 1: r0 = accept4$unix(0xffffffffffffff9c, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800) fstat(r0, &(0x7f0000000180)) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$update(0x2, r1, &(0x7f00000002c0)="7b5c437a64050000000b3614829bc4293bcf1579bea1e3a8d573e0f691944e99f798fcd7a6488d9e07e2db3eeea6456fe86cd85c9e6e1cf00a07ae357c3b50af9b82aff13cffb33f9b3b134eca456dabd9ba114defda5f150a7a5793ae31f9a27620b05eef5f852f520b524e8d08685a6aa0324bd3db28354c57e253cfd8ef2a0e774df329645ece29d5fd95a2875b262bdafdd2303950f1f62b51a2d54410f518dee8b009cf88decea3d7", 0x51) 03:34:19 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x8, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)) dup3(r1, r0, 0x0) 03:34:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:19 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x15, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 281.878801] bond0: cannot enslave bond to itself. [ 281.891539] bond0: cannot enslave bond to itself. 03:34:19 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000080)='a', 0x0, 0xfffffffffffffffd) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101040, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x10000, 0x10000}) keyctl$setperm(0x5, r0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x200401, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0x10) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:19 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x22, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488d") dup3(r1, r0, 0x0) 03:34:19 executing program 4: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xfffffffffffff000, @remote, 0x8}, @in={0x2, 0x4e23, @local}], 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x8, 0x18000) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000002c0)={0x6, 0x3f, [{0xbffffffffffffff9, 0x0, 0xffffffffffffffff}, {0x8001, 0x0, 0x7}, {0x4, 0x0, 0x20}, {0x0, 0x0, 0x1}, {0xcef0, 0x0, 0xffffffff}, {0x0, 0x0, 0x94c}]}) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) r4 = dup2(r0, r1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 03:34:19 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2e, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:20 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xff2f0000, 0x32, 0xffffffffffffffff, 0x0) 03:34:20 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) ioperm(0xc00000000000, 0xfffffffffffffff9, 0x2) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f0000000140)="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", 0xbc) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x400000) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0xc851}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000280)={0x1, r2}) 03:34:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488d") dup3(r1, r0, 0x0) 03:34:20 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2a, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:20 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x6, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:20 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x4, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:20 executing program 4: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x9) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f00000002c0), &(0x7f0000002600)=0x4) 03:34:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488d") dup3(r1, r0, 0x0) 03:34:20 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000140)={0x8000, {{0x2, 0x4e24, @rand_addr=0x55b}}, 0x1, 0x4, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e23, @multicast2}}]}, 0x290) fcntl$setflags(r1, 0x2, 0x1) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 03:34:20 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = socket$xdp(0x2c, 0x3, 0x0) rt_sigreturn() fcntl$setstatus(r1, 0x4, 0x800) eventfd2(0x7, 0x80000) keyctl$setperm(0x5, r0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000180)={0x1e, 0xc, 0xa, 0xc, 0xb, 0x10000, 0x3, 0xda}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000000c0)=0x10000, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) getpgrp(r2) r3 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xde, "e4007610d1681bb48249684c3cdb440aca0778f7ae58407e3dd3e520109317cf59e80b93f760ae27140de3aed7f8b912c82014c8219a69578a46a60600c3fec73729abd7c81770e5b31d1a9503ed1b4c14eab0a579223f380babdc0e4ccec6841f470043cb3949665372de12637130af0e351d092ce59a81e1ad3fa902a08c2e1c8135498ebcdc8cc69468e21053711b3a01ae9cb4c2d0b8d17d43141305300cf9e1afe57791cef72c9ae26c353f1898bebb35f32f3c9c0128fc3d5530c201f511d307b9a317632eb90e7eb07370999942491aca0b168fdecb68b251f32d"}, &(0x7f0000000400)=0xe6) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000440)={r4, 0x3}, 0x8) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000100)={0x1f, 0x19, 0x7, 0x1e, 0x1, 0x9, 0x5, 0x5e}) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x8000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000040000000000000000000000e0ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b10d000000"], 0x68) 03:34:20 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x80000) r2 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740)='/dev/snapshot\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x80000, 0x0) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff}, 0x0) r9 = accept4$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f0000000800), 0x800) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r11 = syz_open_dev$sg(&(0x7f0000000880)='/dev/sg#\x00', 0x5, 0x200000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000008c0)={0x0, 0x80000, 0xffffffffffffffff}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$l2tp(0x18, 0x1, 0x1) r15 = getpgrp(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000a40)=0xe8) r17 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffff9c, 0x0, 0x6, &(0x7f0000000a80)='-proc\x00'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d00)=0x0) r22 = getuid() r23 = getgid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000d40)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000e80)=0xe8) r26 = getgid() sendmsg$unix(r1, &(0x7f0000000fc0)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)="be6ced0353443cc187a59f6dd5e95e488012a8ce5a0b76f47cde65e03ce161d402433b982cc71255394b767554690b82d6c9de63e4b66a42bc5625f39f9fd2e306d32f25ede60dc8e5da22f297f10990e9bfa424c645e2c38cfeb74f4817124ae4fbfb033e9a0e1c1c939280d8d7dc3dba3ea266acf7c0871790458e23d20e7382cf86c5487aa0b6c26db5e497d4aa68d0d92d948bf44cbe6ed4fd9704b2e78038d59d606019d215af0d45feaff69d83461010196f1f7465300ee36f08e1fcbefd138cc111ce3b12c0709fe2bfda", 0xce}, {&(0x7f0000000480)="f67451a4c0bd02a17dbf71e4e165529ca085f72d2e3049da158c05216696b76bd661e2dd17cb7e50c37044ed599c560423a7336113e00ae98f8d12d5cee0128d62dd28f27ce1ce6bbfa568cde82cbe171ccb13f6bf0d910b3637bb2293db3492668e1b6038a049", 0x67}, {&(0x7f0000000500)="98eb10a91f1ca19d7580e84d95c38231f20a153ca98d84eba9591079241d6596362cb83e04c491e627bda34f9dbbadf59449e052251df5ff9180162d9e5e426ab9dbdad365729910f9e6b6619a0192118bf316c5f9f19e9b0ec79f0364b5abef269bd8ff638220a0283252bd1390f64ea40eb257549ffc6b8e907ab15ee893", 0x7f}, {&(0x7f0000000580)="6ec53444ce63417617ffda8fe509f8bfade115af46a99794ace2779dd86fd33eed837fc893ac054cfc3e5137bff03c3af82426ec2e31b3e8560771b09b354db7f1250a30d8951012c04aab525b63e3", 0x4f}], 0x4, &(0x7f0000000ec0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r5, r6, r7, r8, r9]}, @rights={0x28, 0x1, 0x1, [r10, r11, r12, r13, r14]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}], 0xf0, 0x4000000}, 0x4040) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r0}, &(0x7f0000000140)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f00000001c0)={'sm3-generic\x00'}, &(0x7f0000000240)}) 03:34:21 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x7, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") dup3(r1, r0, 0x0) 03:34:21 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2) keyctl$update(0x2, r0, &(0x7f00000000c0)="8c27251c269641e7b0d844593106b1dd0cb8d6f9cf0ea82fd03a7921b40fada328eaaa2d1d8c668354a68cb2dce23ac81d710baebeb745720fb2de80919d8b04a28b484fffd329685a5cf1ce4f7c4f2477e40efd2442a08c1caa39a6737d43b79c52", 0x62) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001200)={&(0x7f0000001180)={'tgr128-generic\x00'}, &(0x7f00000011c0)="03c877a5410eb0e065862e084d46c8e398369917bd6c36c6d2df1e32a499a4a37d9ede248732f521352bde03f3ad45a6", 0x30}) add_key$user(&(0x7f0000001240)='user\x00', &(0x7f0000001280)={'syz', 0x2}, &(0x7f00000012c0)="e926733b88db9a87d208648fa8994e69efca790a7861b23525128b228d0ad71d713be7cabab6f7563f0a4223e73d7ee67d790ceb18f519", 0x37, 0xfffffffffffffffb) 03:34:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x800) bind$bt_sco(r0, &(0x7f0000001440)={0x1f, {0x401, 0x8000, 0xa504, 0x8d, 0xfffffffffffffffd, 0x1ff}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000140)=@raw, &(0x7f0000000380)='GPL\x00', 0x7, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100}, 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001480)={0xb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000009a52b00bfa30000000000000703000000feacc913f9f0fff8ffffff79ffff2d6405000000000065040400010000000404000001020060b7030000000000006a0a0000010000008500ccc67ddefde7bc9f211a9000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x1800000000000006, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e100800", &(0x7f0000000300)=""/41, 0x69}, 0x28) 03:34:21 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1fff, 0x32, 0xffffffffffffffff, 0x0) 03:34:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:21 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) fstat(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x20, 0x7}, {0x4, 0x100000001}], r2}, 0x18, 0x1) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:21 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x19, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:21 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x800000000000006) ioctl(0xffffffffffffffff, 0x0, &(0x7f000000a880)="153f623448") clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000000000712600000000000035060000ff000000bf25000000000000070500000e0000000f65000000000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf250000000000000f65000000000000070500000e000000bf5400000000000007040000040000003d43010000000000950000000000000061540000000000006b25000000000000070500000e0000000f6500000000000007050000040000000f65000000000000bf5400000000000007040000040000003d3201000000000095000000000000004d54000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 03:34:21 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x400000000000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:21 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x28, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:21 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000000c0)={0x0, 0x0}) capset(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000140)={0xf5, 0xa8, 0x9, 0x20, 0x8001, 0x81}) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x101844, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 03:34:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") dup3(r1, r0, 0x0) [ 284.163531] capability: warning: `syz-executor1' uses deprecated v2 capabilities in a way that may be insecure 03:34:21 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2d, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") dup3(r1, r0, 0x0) 03:34:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fca"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:22 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000140)="3a4f0fb73818fa4f0798f54c6fadb54e6cfc1d4f00000000000000b7e1aac3e2f7ea24f4122ced9b44fc63f2484ee28a331ac8d251cff44764cec1f41d351a4389729593ab29ce97f7aba705d10cc995457984a65c8fb937f90b6a443b4f1cc8ed645e0f480317b3d7862ea31cf08a82de0e", 0x72) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffff, 0x2000) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) 03:34:22 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:22 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4000000000000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:22 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x800000000000006) ioctl(0xffffffffffffffff, 0x0, &(0x7f000000a880)="153f623448") clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 03:34:22 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x23, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") dup3(r1, r0, 0x0) 03:34:22 executing program 1: r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffff8) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x7fffffff, 0x2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) write$P9_RFSYNC(r1, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0x7) write$P9_RXATTRWALK(r2, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x38}, 0xf) ioctl$KDENABIO(r1, 0x4b36) 03:34:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") dup3(r1, r0, 0x0) 03:34:22 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x11, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:22 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)) 03:34:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fca"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:23 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:23 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x24, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:23 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x400000, 0x32, 0xffffffffffffffff, 0x0) 03:34:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") dup3(r1, r0, 0x0) 03:34:23 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r2, 0x20}], 0x1, 0x8) keyctl$setperm(0x5, r0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000580)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) r5 = getegid() r6 = fcntl$getown(r1, 0x9) r7 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0x0, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000840)='user\x00'}, 0x30) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getresgid(&(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0)) sendmsg$unix(r1, &(0x7f0000000b00)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000001c0)="87645c271e15192b256da041f91a9be643a8f03f22dae5482c13b3d464dd5b7aaac4940f971e2dc4e43339d8ae5cc14d489c7e87fc61412be8c49d5ac6c64f0cd26eeadb92bdd48f3f0533dc8da733ef4e90ac37089f1e59def2f652bc32e194ffe9c02696f1b6ebc00064df7827fad520cba00976", 0x75}, {&(0x7f0000000240)="fce5ebd4e008b0db9c7fb6f3f288c9ed21c4276e290aa97b0d6f9974cbe14ff5f2", 0x21}, {&(0x7f0000000280)="58fe", 0x2}, {&(0x7f00000002c0)="ee4aaacdeba0e345b7bbd03d59704ab3e5243786ba101f97f64a4dca47b14ca0db0a603efed6c339e1db1d352e6423827280a23baf01d14f0b685dddd4f6d4b1322d84acaac112c39fbf2124a4aabedf55ea9f4b16c20f9a4379ae157c02ff79efe984fba927f1962691d4b7126d9c98a54f1309c8d9fb22109294542608362b4027ce0c58b79667", 0x88}, {&(0x7f0000000380)="6b3b12fcc3ad532d8885e305f37e3518e49f76730553108164258afc7f5c8f04ce89c962f361fc051edc87fb07d684b2d05e10d93202ab9e08f5beee2ef0f12802e1dc1df86c2140a148627f88756e813468e5f16cfca5896e5aa4b152b2f75641d6860acbe9d65743331cfbd0290ecb7e2a4babe8506d548b6d1f4e6a53ee03189842bdcbc570569dbe817b7bcf144e3bd5fb54d0a7f5bf6ceee5f29b24247631d2411309b80941afe56a4ce06dbad5107723d96deea46ba6c1f4ebb9", 0xbd}, {&(0x7f0000000440)="3a57ae90ec99134ac09da72aeb09a8fedcf1b0c710c60db16906def765cad9a61cd8aa48762e0419c3c73761c7e34ff6a4951b5b76dd5146a209e3d8c5e4b56d7fbd92ff149224e4", 0x48}, {&(0x7f00000004c0)="0e5370f6b8e1fb784bf6d876", 0xc}], 0x7, &(0x7f0000000a00)=[@rights={0x18, 0x1, 0x1, [r1, r2]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r1, r2, r2, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r6, 0x0, r7}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x20, 0x1, 0x1, [r1, r2, r1]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xd8, 0x840}, 0x404c810) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:23 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x25, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fca"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:23 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xb, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(0xffffffffffffffff, r0, 0x0) 03:34:23 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x3f) keyctl$update(0x2, r0, &(0x7f0000000140)="ad13921b5d8bba57a1e178c2a0a3c4c55da67c6dd1e0d06de9b01fe8c561eb10271c0c21d103ba98f7166393e3f4342abdfb3b6ba3d5a17093aaf04e262f84a570ed9f309117591e3535b9033e42d400c5e8da33bc5469bb819f6ce8c875ac06e804f4db48e6f3d5bb75bbe4459b13c93285b6d6fb838b4d9ce833906bb398f5", 0xb66041200586c496) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x88000, 0x10) signalfd(r1, &(0x7f0000000100)={0x74}, 0x8) r2 = request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='syz', 0x0) keyctl$invalidate(0x15, r2) 03:34:23 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x17, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:24 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffb, 0x101100) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) keyctl$setperm(0x5, r0, 0x0) clock_getres(0x7, &(0x7f00000000c0)) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:24 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2f, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:24 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:24 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x16, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:24 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000000c0)='a', 0x1, 0xfffffffffffffffd) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x44000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000100)={{0x6, 0x7}, 'port1\x00', 0x82, 0xc, 0x0, 0x8, 0x4386f919, 0x7, 0x0, 0x0, 0x3, 0x47}) 03:34:25 executing program 0: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r0, 0xffffffffffffffff, 0x0) 03:34:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) 03:34:25 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xd, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:25 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x4240, 0x0) ftruncate(r0, 0xb00000) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x400000) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) 03:34:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:25 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x32, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:25 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x100000000000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:25 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x18, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:25 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) rt_sigreturn() 03:34:25 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x3, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:25 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0xffffffffffffff00, 0x0, 0x6000, 0x8, 0x10000, 0xd5, 0x2, 0x4, 0x0, 0x4}, 0x10) 03:34:25 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2c, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:26 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x600, 0x0) keyctl$setperm(0x5, r0, 0x1000000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)=r1) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x6, 0x200, 0x6fd4df0e}}, 0x28) 03:34:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') 03:34:26 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x200000, 0x32, 0xffffffffffffffff, 0x0) 03:34:26 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0xc, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280), 0x21b) sendfile(r1, r1, &(0x7f00000000c0), 0xfdef) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xfff, 0x4) r2 = socket(0xb, 0x804, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x3, 0x7ff}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={r3, 0x2}, &(0x7f00000001c0)=0x8) sendfile(r1, r1, &(0x7f0000000100), 0xe08c) socket$pppoe(0x18, 0x1, 0x0) 03:34:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:26 executing program 1: r0 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="1a2d00", 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000080)='a', 0x1, r0) keyctl$setperm(0x5, r1, 0x1008) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) keyctl$instantiate(0xc, r0, &(0x7f0000000040)=ANY=[@ANYBLOB="67291576dd6661756c7420757361723a1a2d0020303030303030303030303030303030303030303700"], 0x2a, 0xfffffffffffffffd) 03:34:26 executing program 1: add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='syz', 0x0) r0 = request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='eth1em1GPL\x00', 0xfffffffffffffff8) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000380)="8877dcd506b5f7c71524cef2ab18a0d3df059e5873289dc4164714ef8233cbfce089dec0fe60280c9076fd6346097a23764301c67915eaddf05cc8f8bf5c537e", 0x143, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) 03:34:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x3, 0x180000]}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000000000ff7f000000000000010000c0090000"]) 03:34:26 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x14, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:26 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"0a617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:26 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1, 0x7, 0x8}, 0xc) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:26 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80803, 0xfc) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080), 0x4) 03:34:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) poll(&(0x7f0000000340)=[{}, {r0}], 0x2, 0xfffffffffffffff7) [ 289.171831] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 289.289614] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:27 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:27 executing program 1: r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f00000002c0)="39984b8778e168dedc2f98b422467c61", 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) sysfs$2(0x2, 0x1, &(0x7f00000000c0)=""/241) keyctl$update(0x2, r0, &(0x7f0000000000), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000300)) 03:34:27 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 03:34:27 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"25617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 289.472144] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:27 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f0000000240)="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", 0x21b) [ 289.513548] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x20000440) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000100), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:27 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e637400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:27 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = shmget$private(0x0, 0xa000, 0x0, &(0x7f0000ff5000/0xa000)=nil) shmctl$SHM_LOCK(r1, 0xb) 03:34:27 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xff1f000000000000, 0x32, 0xffffffffffffffff, 0x0) [ 289.695330] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 289.752786] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:27 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e0a7400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:27 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000740)={@mcast2}, &(0x7f0000000780)=0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 03:34:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2f, 0x80000003) 03:34:27 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x31cf, 0x10000) connect$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, {0x7, 0x1, 0xbbd0, 0x10001, 0x8, 0x5}, 0x6}, 0xa) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) connect$netlink(r1, &(0x7f0000000140)=@unspec, 0xc) 03:34:27 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xff2f000000000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@routing, 0x8) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000000), 0x4) [ 290.132591] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 290.148228] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:27 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000000c0)="e97d41ffa26a97ed142b9088671dfdb9854a980f8ce0616b16a00df408964a6da13d0b7cdaecd6a1df2ada0848c6434bc1041bb5e50105577c080a7b16165865139d5a69e1450e062a87a42220415bf8e9e87bb0cb82965f1a3db79d08460f1d650b5f37be9c2a01bfbc57c05cd8752ec95bea3c8fef97514cbaff5a8359512ed132d1058c20aa", 0xfffffffffffffd5a, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440), 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:27 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e257400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:28 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e097400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:28 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xa00000000000000, 0x32, 0xffffffffffffffff, 0x0) [ 290.320294] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:28 executing program 1: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="0aa37e1ab57c4a6d7ad6cbcd45f77a993ed3a0540505aac520b780f97e0be940faa67454e6f1d4585e992e6eb9f0b60df543553ff15268e7a2e37f527eadb453f0e5aa2210aeee9d01685d896a23ac12bb431185263bf7e9a69063b80d0e65cfc8fb9d37192b5b7bc229d740552686cccc09c27681dd1c6d820cd66296363db273", 0x81, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:28 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000740)={@mcast2}, &(0x7f0000000780)=0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 03:34:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f0000150000000000ba53ad1a00000100180000000000080012000000030000000000000400000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000"], 0x9c}}, 0x0) 03:34:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440), 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:28 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000000c0)="ae0a1a22c62cab371f6fd9e4f68aafc275564226177e3309f3687e59c0c0041a8eea1e900d62b32c7475aa564cb1b728eb872f658000f0a1d26b534d3bf2bcd88a33717789b45b66917a287ff403837bf9fa08bd529151e4cf2cb59c9cf5d751b99202ca1fe24bbed37c580e59b14f3c58ef84e0045bda6f7d0ec9a7efc3cb365716e888959f15e78ee819e9866e069c681c0da5dc609dfd3fa267675191235644579b7459019e106d6b6e2f07bcf7f43d36670dc19e52c16b4a4d824cd9f21440544217ac74820a84d321", 0xcb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20a00, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0xa5, 0x2}) [ 290.505594] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:28 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e610a00000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440), 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:28 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e612500000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="153f6234488dd25d766070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000380)="66b8003800000f23d00f21f86635100000090f23f80f21760f01b700103e0f01c9b89b000f00d0b859000f00d866b80500000066b9867100000f01d90f51a503000f9217d24331", 0x47}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 03:34:28 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x800000, 0x32, 0xffffffffffffffff, 0x0) [ 290.598482] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:28 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x9, 0x4102) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000140)={0x8, 0xe24, [{0x8, 0x0, 0x1}, {0x20, 0x0, 0x6}, {0x248, 0x0, 0x7}, {0x1, 0x0, 0x20}, {0x5}, {0x7, 0x0, 0xc2}, {0x8, 0x0, 0x7}, {0x5, 0x0, 0x6}]}) keyctl$update(0x2, r0, &(0x7f00000000c0)="46af8a82d3af", 0x6) keyctl$setperm(0x5, r0, 0x0) 03:34:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:28 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7fffffff, 0x145b02) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:28 executing program 4: setitimer(0x1, &(0x7f00000000c0), &(0x7f0000000100)) [ 290.827889] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:28 executing program 0: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') sendfile(r0, r3, &(0x7f0000000000)=0x2f, 0x80000003) 03:34:28 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x40000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:28 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r0, &(0x7f0000001580)=@sco, &(0x7f0000001600)=0x80, 0x80800) r1 = socket$inet6(0xa, 0x0, 0x4000008) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x400000000000001}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@dev}}, 0xe8) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e24}}) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") close(r1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001680)={0x6, 0xb, 0x8, 0x7bf8}, &(0x7f00000016c0)=0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) sendto$llc(r3, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x2, 0x1, @local}, 0x10) 03:34:28 executing program 0: syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000580)=ANY=[]) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xff54}, 0x1006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00', &(0x7f0000000700)=""/215, 0xd7) stat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)) sendfile(r1, r1, &(0x7f00000000c0)=0x10, 0x8080fffffffe) connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x1}}, 0x1e) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000003c0), &(0x7f00000001c0)=0x68) 03:34:28 executing program 1: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x7f, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="c9", 0x1, 0x3}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f636f6d70726573732c756e686964652c6e5e6a6f6c6965742c756e6869be9d64652c6f626a5f75c6165b7365723d73797a6881199a10fd6ca2cb4a2903c49fd8ea24a68800009798bf"]) keyctl$update(0x2, r0, &(0x7f0000000600)="91125c95bb0dc27eb1761db7331b51949211c16ca602de484908aae2fce8f21618efb3823b62fa08890905b376ecf6a4c7ee998b7595d58bbca082fa6ad5beeee8c5588bc9fcc85572a025af81682ace4906904dbf163da4ec58829f1a9d8987fff1f0b4d05f6b23da0f058a53c2d540abaa336e2a1e4c6ab35efb65dfef9822603d9721e3ec45c16a6e9e", 0x8b) r1 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x76, 0x20000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fedbdf250300000008000600060000001400020008000b000200000008000500ffffff7f08000500040000005800010008000b007369700008000800810000000c00070000000000100000000c000700040000003c0000000c00070010000000080000000c00070027000000080000000c000700280000000100000008000800000000001c00030008002500ac14140f7e2e617283842c080003000200000008000500e00000020c0003000800010002000000080006000001000008"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000280)={0x3, 0x2, 0xffffffffffff7fff, 0x100, 0x8, 0x100000001}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x6}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={r3, 0x10000}, &(0x7f00000006c0)=0x8) 03:34:28 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617407000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 291.284506] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)="6d656d6f72792e6576f6656e7473", 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)={0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) ftruncate(r0, 0x100c841) write$P9_RREADDIR(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="c1"], 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 03:34:29 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000010000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 291.516928] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 291.575398] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:29 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000003f0000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0xa198) 03:34:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xbc, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da15}}, 0x21b}}, 0x0) 03:34:29 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xbfdc, 0x8000) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000100)=0x1000000, 0x4) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) [ 291.791107] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:29 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xff1f, 0x32, 0xffffffffffffffff, 0x0) [ 291.846166] netlink: 168 bytes leftover after parsing attributes in process `syz-executor4'. [ 291.881812] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:29 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="b067bfaa4429e67c37b8de25cf7780873a5bab5ddc8483b73055d747c6b1c522c01a", 0x22, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="6daa8ddb0c30124c46a6b6f976a91e829fa53d7c1569d9ce679af9c450fe17acf02f6fb2268592412d87eb2cfe117497d90c6be199d693", 0x37, r1) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:29 executing program 4: r0 = socket(0x10, 0x420000000000003, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x81, 0x1a, 0x201}, 0x800}}, 0x0) 03:34:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:29 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000005000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) 03:34:29 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x10000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0xb09, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 03:34:29 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000030000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 292.057147] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 292.069123] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:29 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xa00, 0x32, 0xffffffffffffffff, 0x0) 03:34:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x113, 0x0, &(0x7f000031e000), 0x1c) [ 292.171599] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:29 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x7, {{0x2, 0x4e24, @rand_addr=0x3}}}, 0x88) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) ptrace$getregs(0xe, r2, 0xd6, &(0x7f0000000100)=""/117) 03:34:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0x0) 03:34:29 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61747fffffff000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 292.267766] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0x0) 03:34:30 executing program 1: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f00000000c0)="c1b3753df1ac23fa0000e7bc04cfff172b6b38f12988228a670447ccc1b67ad24e42178b62dfa903e24d530ad0c5902a53a2c54d80e19354c0de", 0x3a, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) [ 292.351938] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 292.372371] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:30 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xa, 0x32, 0xffffffffffffffff, 0x0) 03:34:30 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617403000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:30 executing program 4: clone(0x2102001bfb, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:34:30 executing program 1: r0 = semget$private(0x0, 0x0, 0x1) semctl$IPC_INFO(r0, 0x7ec2db75c11cb853, 0x3, &(0x7f0000000640)=""/139) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000100)={"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"}) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) r3 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="74dd1115117c9f8a", 0x8, r3) 03:34:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0x0) 03:34:30 executing program 4: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$rds(r1, &(0x7f0000001c00)={&(0x7f0000000080), 0x10, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40)}, 0x0) [ 293.001670] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:30 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:30 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000ffffffff0000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 293.071165] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:30 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 03:34:30 executing program 1: request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='selinuxtrustedwlan1\x00', 0xfffffffffffffffc) r0 = request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='syz', 0xfffffffffffffff8) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, r0) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) 03:34:30 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000001000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 293.162666] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 293.272770] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 293.290642] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:31 executing program 5: 03:34:31 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x28000, 0x8) timerfd_gettime(r1, &(0x7f0000000100)) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:31 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xa000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:31 executing program 4: 03:34:31 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000003f000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:31 executing program 5: 03:34:31 executing program 4: [ 293.859730] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xcd1a, 0x404a00) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x3, 0x0, 0x9, 0x6, 'syz0\x00', 0x4}, 0x5, 0x22, 0xff, r1, 0x3, 0x6, 'syz0\x00', &(0x7f0000000100)=["02252600", 'user\x00', 'ppp0\x00'], 0xe, [], [0x9, 0x3, 0x2, 0x3f]}) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$update(0x2, r2, &(0x7f00000002c0), 0x0) 03:34:31 executing program 5: [ 293.909327] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:31 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400070000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:31 executing program 4: [ 294.105109] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 294.118853] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:32 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 03:34:32 executing program 5: 03:34:32 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) keyctl$setperm(0x5, r0, 0x0) r1 = semget(0x1, 0x5, 0x200) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000140)=[{0x0, 0x7f, 0x1000}, {0x6, 0x10000, 0x1800}], 0x2, &(0x7f00000001c0)={r2, r3+30000000}) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000280)) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='\x00', 0x1, 0x3) gettid() 03:34:32 executing program 4: 03:34:32 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000600000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:32 executing program 4: 03:34:32 executing program 5: 03:34:32 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000007fffffe0000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 294.737564] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 294.767848] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:32 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) clock_nanosleep(0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)="0ca1389c6860e14275684cd6800e23c8aff5e20aa33f5e8303f3166b7e838db1b7817ab3ab19f1be3cd4252a76a6c1ef6c09b830f73eeb472f79af289118fd965afa138df2697c602ff9b94314c6fe01") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x5) keyctl$update(0x2, 0x0, &(0x7f00000002c0), 0x0) 03:34:32 executing program 4: 03:34:32 executing program 5: [ 294.849380] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:33 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000070000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:33 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2fff, 0x32, 0xffffffffffffffff, 0x0) 03:34:33 executing program 5: 03:34:33 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x6, 0x80) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0x6, 0x3, 0x6, 0x3}, 0x8) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:33 executing program 4: 03:34:33 executing program 5: 03:34:33 executing program 4: 03:34:33 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000060000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 295.565094] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 295.594407] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:33 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x800, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:33 executing program 4: 03:34:33 executing program 5: [ 295.712296] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 295.738664] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:34 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8000000000000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:34 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000ff000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:34 executing program 5: 03:34:34 executing program 4: 03:34:34 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x6) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:34 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400050000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:34 executing program 5: 03:34:34 executing program 4: [ 296.375440] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:34 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) io_setup(0xc832, &(0x7f0000000140)=0x0) socketpair$inet(0x2, 0x80f, 0x607, &(0x7f0000000180)={0xffffffffffffffff}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x40, 0x0) r4 = request_key(&(0x7f0000000380)='logon\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='syz', 0xfffffffffffffff9) keyctl$reject(0x13, r0, 0x1f, 0xce6, r4) io_cancel(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0xee, r2, &(0x7f00000001c0)="8af0765451c867fb738f1fe421b49ef34753e683281dc3e7076d92f1003e53ae019312ee90630fcdfffddc16371d37221549aabc98c7e5c4989a514495f23633aa424b3fbb053e7b4251eedcaf7936fe598e7a7254ce71c4623cb282f8866a64d8feeb96f250bf7315b91fcf9279a091600cbc8619ca8277217de50cf6fe6916326899b26a78", 0x86, 0x6, 0x0, 0x0, r3}, &(0x7f0000000300)) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000100)={r6}) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000340)="a28c80094d9c2ec9dacaa6e3e86c2255", 0x10) 03:34:34 executing program 4: [ 296.485959] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:34 executing program 5: 03:34:34 executing program 4: 03:34:34 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000004000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:34 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x40000000000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:34 executing program 5: 03:34:34 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000004000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x2000, 0x4}) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) iopl(0x8) keyctl$setperm(0x5, r1, 0x0) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) 03:34:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:34 executing program 5: 03:34:34 executing program 4: [ 297.269120] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:34 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000006000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:35 executing program 4: 03:34:35 executing program 5: 03:34:35 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080), 0x0) close(r0) 03:34:35 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0xfffffffffffffdff) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x31, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_getoverrun(r1) 03:34:35 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xff1f0000, 0x32, 0xffffffffffffffff, 0x0) 03:34:35 executing program 5: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80803, 0xfc) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0), 0x4) 03:34:35 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000740)={@mcast2}, &(0x7f0000000780)=0x14) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[]}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 03:34:35 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xbd, "a1cdcbc0dc5eff4ce9baa9fd21c5b6349c521419dd403669b0d3c2bee0232e13d356fe2b118ad78f1d669428d514ea44feceed9d11476071b1355c3fd02e78fff5e7e91852ff2383fae704a92884e8cf4aea1fa7c12c479c744f8a88e634744ee58e2ec5e66e35ab06aab7bb181e9a21c9992d95f015c08b54b7e49e6be57652f1122ed54d8f9f43f21208ac6be390eea088171dd8ff1dbc8e167ac056ca0ef5afcec8b0577fc90889b4a1e2f91b13c625f64373855c979ce7c4397c9d"}, &(0x7f0000000240)=0xc5) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={r2, 0x20, 0xa, [0x9, 0x0, 0x8, 0x2, 0x6, 0x4, 0x3ff, 0x7, 0x5, 0x10001]}, &(0x7f00000002c0)=0x1c) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000340)) 03:34:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 03:34:35 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x1, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) keyctl$update(0x2, r0, &(0x7f0000000100)="055cebd3e1319acd9c0b1486ffccda0390a1454a0ffceba6aab2ff5587cd48c2a9fa54b54e932bc008b54c64fb943f117e5c3815d8e928d828cea41ebf992a9292f2a42921301f20097897a45cedf8ad4351f097e86a730e2223182d61bbb802aeb44b188ac709ab57302fef2a5244542db91c3c9b73527a6f10e5160fa850c05edc58f3aa15d9bd8e21d1086b34bcd7a1aaf9ebdec68356b2b0a40b20bbfecd6adcfd21b8fcffbe950360bc08162008b91d3d959cfb0f", 0x9e) 03:34:35 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xff2f, 0x32, 0xffffffffffffffff, 0x0) 03:34:35 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000740)={@mcast2}, &(0x7f0000000780)=0x14) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[]}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 03:34:35 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617404000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:35 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x10000, 0x0) readahead(r1, 0x80000000, 0x5) 03:34:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000140)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000080)={{0x0, 0x1}, {0xffffff80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x4]}) 03:34:36 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0xc5, 0x2) sendmmsg$inet_sctp(r1, &(0x7f0000000580)=[{&(0x7f0000000200)=@in6={0xa, 0x4e22, 0x2, @remote, 0x7}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="d948a4f247e28f7b94b9da8bed64e772f259439672fdbb8f819e71e45f51c3418321caf252f8", 0x26}, {&(0x7f0000000280)="3469ee4471f48011be5f6afd07ebec636f60a7ae27cee04e15dc7bcc660b6dd088a329dc4a15472b33c830aeacce87455be08511a0d4aa9c1758a962200646dcc07807accdda4925eeb838327177794da64e04f8c8668c6a2368009ffb4841377aa1ddc5271081db777596216d4a9d6836b5d67ac3a2b4a8ce83e84dd6f49ff2c21dc36b46e5724edce4352da3da86fad52c5eab725119a48d4139721f6c09dd9faad9dcc88cec9e90b757f40b407be874ab3d1d44386c340b0df9c45fc0cd079c8b553e248682e1fa085175f0b47a599329dcfaebd857a6d52adb3fa3f49588dc2951a556d0acf3", 0xe8}, {&(0x7f0000000380)="7947ae697e255b1fd5fc61d2189c0b43ecfacb04522a99c59aaee4ee018bd717564d8dc8696791a1041d5b1c58398d0388bca0167ef66105d1d057ee00588d74202853041a14d994c1c4b488554e56e15d0f67878af3102b9d9b67dd56f44887988d734a9a0a7a944348402dc31898ce11f0ff994a561283c0d06a108556022e84f5adf8e6439a5ddc9291ec7ffd307296e0024efe243eccf6837cbff13d6a7ef850402fbb62d302da7bef3633acb93d27d40df63605bc2890", 0xb9}, {&(0x7f0000000440)="07e95021ded4f13024b37b65aed67362c6aa48f496e19ebc27bf8a7bef94993049b5853b3f2633b521dcfb26015cfe65d1598bbe9f774a96939923606f57b09751b3a81a51ab440e01c60622fb51e1ff6987c8946a525c9421c2ed6615f4ce1d9ee276d1169981c45e9fac2237b691a0efd67ed1628936be1ac2465f8a4f5284155fda5b9e8e6551930fabd7a5e2f73136a54bd556afa4e8bef59fc7f8a837a7e199e4c9df199fe825fbd8707d60dceaff21e69a8021e55c7f03f8bf0537c852eb228295d5fddc63", 0xc8}], 0x4}], 0x1, 0x800) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000740)={'gretap0\x00', 0x9002}) keyctl$revoke(0x3, r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x418800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sco\x00') r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r4}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000006c0)=0xe8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000700)={r5, 0x1, 0x6}, 0x10) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 298.328397] IPVS: ftp: loaded support on port[0] = 21 03:34:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000140)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000080)={{0x0, 0x1}, {0xffffff80}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x4]}) 03:34:36 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4000, 0x32, 0xffffffffffffffff, 0x0) 03:34:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:36 executing program 1: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, r0) keyctl$setperm(0x5, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) r3 = add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="f9", 0x1, 0xfffffffffffffffb) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="bca0aacd4408cd000bab4d600329acdc3a30d6668860eaf5ea47be38729bf828f3c217049052439f404a63a6f85a403b19ff9223ed2dbc61512e758eeaa78a5ec41d0419230e191475c35a7b5043eddcd1c4aa1ef213bec1721e624fde76d7383de80dea4fc310a4fcdc6054218c78260b5276135b5a6ab1ce91027db111b4d6f2f8e8947e925a1e2e3b5c7a2f0b76298aee86ecf23bb90a46ecd4a8850d20d2805a134932286ac8adc810e2882dbdbaf6ddae3899b1af08c9855b08b6b6ee9e6ee6ca1ffd6c45226dd31eabd74c09aed849652e7d2a31a98c88bb513a7f", 0xde, r3) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) 03:34:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440), 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:36 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x15) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x12) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x1) keyctl$update(0x2, r0, &(0x7f0000000180)="e56a8166d4c499b8c7a76b054256b18833b4575d892ca29cd15273322217d773035ec9f04008a48d6f12ed142a88a7c9bfa8a6f3bb52a14070c8352029cde49162ceabb0538ff4ba124144af70b25936142e1888bd33fe4949a087d9bcca5eaddbcb1f79", 0x215) 03:34:36 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f0000001200), 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f00000011c0)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vsock\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000001140)=0xbafa, 0x8) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) [ 299.157304] device bridge_slave_1 left promiscuous mode [ 299.162870] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.227777] device bridge_slave_0 left promiscuous mode [ 299.233400] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.308430] team0 (unregistering): Port device team_slave_1 removed [ 299.322213] team0 (unregistering): Port device team_slave_0 removed [ 299.338415] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 299.376824] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 299.466630] bond0 (unregistering): Released all slaves [ 300.044880] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.051451] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.059595] device bridge_slave_0 entered promiscuous mode [ 300.104858] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.111406] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.119169] device bridge_slave_1 entered promiscuous mode [ 300.162343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 300.205271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 300.337113] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 300.383290] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 300.589900] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 300.597393] team0: Port device team_slave_0 added [ 300.640323] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 300.648170] team0: Port device team_slave_1 added [ 300.691670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 300.699234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.717026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.754672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.799122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 300.806252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.814793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.839187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 300.846223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.856585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.187561] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.193917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.200606] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.206978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.214134] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 301.606639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.104264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.188634] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 302.273489] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 302.279824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.289163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.374929] 8021q: adding VLAN 0 to HW filter on device team0 03:34:40 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617405000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:40 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000, 0x32, 0xffffffffffffffff, 0x0) 03:34:40 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) keyctl$setperm(0x5, r0, 0x0) r1 = semget(0x3, 0x0, 0x4) semctl$IPC_RMID(r1, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x4, 0x7, 0x5, 0xd6, 0x3, 0x80000000, 0xfffffffffffffff7, 0x6, 0xfff, 0xfffffffffffffff7, 0x4, 0x7, 0x81}, {0x6b, 0x0, 0xfffffff6ffffffff, 0x3, 0x8, 0x0, 0x4, 0xf7a6, 0x7d5, 0x3, 0xffffffff, 0x0, 0x172}, {0x40, 0x8, 0x5, 0x2, 0x277e, 0x5, 0x5, 0x81, 0x1, 0x8, 0x0, 0x70111f09, 0x5}], 0x9}) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) keyctl$setperm(0x5, r0, 0xffffffff) keyctl$revoke(0x3, r0) 03:34:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 302.915955] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:40 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x20000000000000) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x200) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffff7) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000200)) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000300)=""/148, &(0x7f00000001c0)=0xffffffffffffff70) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) [ 302.996779] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 303.008403] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:40 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617406000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:40 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="1d", 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:40 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x200000000000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:40 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000180)) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x1f, 0x4) [ 303.125180] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 303.198460] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:40 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000007fffffff0000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:40 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0xfffffffffffffe3f, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:41 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) [ 303.394934] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:41 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000050000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 303.436217] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 303.573470] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 303.615298] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") dup3(r1, r0, 0x0) 03:34:41 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x4000000) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:41 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617407fffffe000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 303.973033] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:41 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400ff0000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 304.080690] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:41 executing program 4 (fault-call:12 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:41 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:41 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x400000000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:41 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617460000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:41 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:41 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) signalfd(r3, &(0x7f00000000c0)={0x35a}, 0x8) [ 304.270256] FAULT_INJECTION: forcing a failure. [ 304.270256] name failslab, interval 1, probability 0, space 0, times 0 [ 304.304146] CPU: 1 PID: 10758 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 304.310584] FAULT_INJECTION: forcing a failure. [ 304.310584] name failslab, interval 1, probability 0, space 0, times 0 [ 304.311544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.311552] Call Trace: [ 304.311580] dump_stack+0x1c4/0x2b4 [ 304.311606] ? dump_stack_print_info.cold.2+0x52/0x52 [ 304.311631] ? find_held_lock+0x36/0x1c0 [ 304.311663] should_fail.cold.4+0xa/0x17 [ 304.351819] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 304.356930] ? check_preemption_disabled+0x48/0x200 [ 304.361962] ? graph_lock+0x170/0x170 [ 304.365957] ? find_held_lock+0x36/0x1c0 [ 304.370040] ? __f_unlock_pos+0x19/0x20 [ 304.374024] ? find_held_lock+0x36/0x1c0 [ 304.378112] ? ___might_sleep+0x1ed/0x300 [ 304.382263] ? kasan_check_write+0x14/0x20 [ 304.386502] ? arch_local_save_flags+0x40/0x40 [ 304.391094] ? wait_for_completion+0x8a0/0x8a0 [ 304.395690] __should_failslab+0x124/0x180 [ 304.399937] should_failslab+0x9/0x14 [ 304.403746] kmem_cache_alloc+0x2be/0x730 [ 304.407897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 304.413443] ? check_preemption_disabled+0x48/0x200 [ 304.418470] getname_flags+0xd0/0x5a0 [ 304.422280] getname+0x19/0x20 [ 304.425477] do_sys_open+0x383/0x700 [ 304.429207] ? filp_open+0x80/0x80 [ 304.432761] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 304.438229] __x64_sys_open+0x7e/0xc0 [ 304.442039] do_syscall_64+0x1b9/0x820 [ 304.445932] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 304.451302] ? syscall_return_slowpath+0x5e0/0x5e0 [ 304.456239] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.461091] ? trace_hardirqs_on_caller+0x310/0x310 [ 304.466110] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 304.471137] ? prepare_exit_to_usermode+0x291/0x3b0 [ 304.476166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.481027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.486227] RIP: 0033:0x4111a1 [ 304.489423] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 304.508327] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 304.516043] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 304.523316] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 304.530589] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 304.537861] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 304.545130] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 [ 304.552605] CPU: 0 PID: 10759 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #280 [ 304.559985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.562839] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 304.569343] Call Trace: [ 304.569373] dump_stack+0x1c4/0x2b4 [ 304.569400] ? dump_stack_print_info.cold.2+0x52/0x52 [ 304.569421] ? mark_held_locks+0x130/0x130 [ 304.569450] should_fail.cold.4+0xa/0x17 [ 304.569471] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 304.602627] ? print_usage_bug+0xc0/0xc0 [ 304.606701] ? rcu_bh_qs+0xc0/0xc0 [ 304.610255] ? dput.part.26+0x241/0x790 [ 304.614252] ? graph_lock+0x170/0x170 [ 304.618067] ? find_held_lock+0x36/0x1c0 [ 304.622142] ? graph_lock+0x170/0x170 [ 304.625958] ? aa_file_perm+0x469/0x1060 [ 304.630035] ? find_held_lock+0x36/0x1c0 [ 304.634111] ? __lock_is_held+0xb5/0x140 [ 304.638191] ? ___might_sleep+0x1ed/0x300 [ 304.638219] ? arch_local_save_flags+0x40/0x40 [ 304.638240] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 304.638262] __should_failslab+0x124/0x180 [ 304.656651] should_failslab+0x9/0x14 [ 304.660466] kmem_cache_alloc_trace+0x2d7/0x750 [ 304.665154] ? aa_file_perm+0x490/0x1060 03:34:42 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174feffff07000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 304.669245] alloc_pipe_info+0x16b/0x590 [ 304.673324] ? aa_path_link+0x5e0/0x5e0 [ 304.677311] ? pipe_read+0x940/0x940 [ 304.681057] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 304.685999] ? common_file_perm+0x236/0x7f0 [ 304.690336] ? find_held_lock+0x36/0x1c0 [ 304.694476] splice_direct_to_actor+0x6fc/0x8f0 [ 304.699172] ? graph_lock+0x170/0x170 [ 304.703010] ? pipe_to_sendpage+0x400/0x400 [ 304.707355] ? apparmor_file_permission+0x24/0x30 [ 304.712217] ? do_splice_to+0x190/0x190 [ 304.716216] ? security_file_permission+0x1c2/0x230 [ 304.721254] ? rw_verify_area+0x118/0x360 [ 304.725481] do_splice_direct+0x2d4/0x420 [ 304.729687] ? splice_direct_to_actor+0x8f0/0x8f0 [ 304.734548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 304.740098] ? __sb_start_write+0x1b2/0x370 [ 304.744442] do_sendfile+0x62a/0xe20 [ 304.748179] ? do_compat_pwritev64+0x1c0/0x1c0 [ 304.752789] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 304.758344] ? _copy_from_user+0xdf/0x150 [ 304.762518] __x64_sys_sendfile64+0x15d/0x250 [ 304.767026] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 304.771638] do_syscall_64+0x1b9/0x820 [ 304.775537] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 304.780923] ? syscall_return_slowpath+0x5e0/0x5e0 [ 304.785869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.790724] ? trace_hardirqs_on_caller+0x310/0x310 [ 304.795760] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 304.800791] ? prepare_exit_to_usermode+0x291/0x3b0 [ 304.805829] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.810693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.815887] RIP: 0033:0x457569 [ 304.819094] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.838006] RSP: 002b:00007fb98ce41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 304.845734] RAX: ffffffffffffffda RBX: 00007fb98ce41c90 RCX: 0000000000457569 [ 304.853013] RDX: 00000000200001c0 RSI: 0000000000000005 RDI: 0000000000000005 [ 304.860291] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 304.867571] R10: 000000000000a198 R11: 0000000000000246 R12: 00007fb98ce426d4 [ 304.874853] R13: 00000000004c34d0 R14: 00000000004d5298 R15: 0000000000000006 [ 304.902087] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 304.955609] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:43 executing program 4 (fault-call:12 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:43 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:43 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x20000000000000, 0x32, 0xffffffffffffffff, 0x0) 03:34:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:43 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:43 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000003000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 305.905940] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 305.911030] FAULT_INJECTION: forcing a failure. [ 305.911030] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 305.926227] CPU: 1 PID: 10785 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 305.933599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.942955] Call Trace: [ 305.945567] dump_stack+0x1c4/0x2b4 [ 305.949223] ? dump_stack_print_info.cold.2+0x52/0x52 [ 305.954432] ? print_usage_bug+0xc0/0xc0 [ 305.956984] FAULT_INJECTION: forcing a failure. [ 305.956984] name failslab, interval 1, probability 0, space 0, times 0 [ 305.958501] ? __lock_acquire+0x7ec/0x4ec0 [ 305.958528] should_fail.cold.4+0xa/0x17 [ 305.958550] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 305.958574] ? __lock_acquire+0x7ec/0x4ec0 [ 305.958598] ? mark_held_locks+0x130/0x130 [ 305.958616] ? graph_lock+0x170/0x170 [ 305.958633] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 305.958650] ? _kstrtoull+0x188/0x250 [ 305.958667] ? _parse_integer+0x180/0x180 [ 305.958683] ? graph_lock+0x170/0x170 [ 305.958699] ? lock_release+0x970/0x970 [ 305.958715] ? arch_local_save_flags+0x40/0x40 [ 305.958737] ? find_held_lock+0x36/0x1c0 [ 305.958758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 305.958774] ? should_fail+0x22d/0xd01 [ 305.958790] ? get_pid_task+0xd6/0x1a0 [ 305.958809] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 305.958826] ? check_preemption_disabled+0x48/0x200 [ 305.958851] __alloc_pages_nodemask+0x34b/0xde0 [ 305.958867] ? find_held_lock+0x36/0x1c0 [ 305.958888] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 305.958908] ? __f_unlock_pos+0x19/0x20 [ 305.958930] ? find_held_lock+0x36/0x1c0 [ 305.958966] ? ___might_sleep+0x1ed/0x300 [ 305.958992] ? trace_hardirqs_off+0xb8/0x310 [ 305.959015] cache_grow_begin+0x91/0x8c0 [ 305.959032] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 305.959050] ? check_preemption_disabled+0x48/0x200 [ 305.959073] kmem_cache_alloc+0x665/0x730 [ 305.959089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 305.959107] ? check_preemption_disabled+0x48/0x200 [ 305.959131] getname_flags+0xd0/0x5a0 [ 305.959150] getname+0x19/0x20 [ 305.959167] do_sys_open+0x383/0x700 [ 305.959188] ? filp_open+0x80/0x80 [ 305.959217] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 305.959240] __x64_sys_open+0x7e/0xc0 [ 305.959261] do_syscall_64+0x1b9/0x820 [ 305.959278] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 305.959297] ? syscall_return_slowpath+0x5e0/0x5e0 [ 305.959313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.959331] ? trace_hardirqs_on_caller+0x310/0x310 [ 305.959348] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 305.959367] ? prepare_exit_to_usermode+0x291/0x3b0 [ 305.959390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.959423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.959448] RIP: 0033:0x4111a1 [ 306.179543] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 306.198458] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 03:34:43 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000020000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 306.206175] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 306.213461] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 306.220734] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 306.228011] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 306.235287] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 [ 306.242609] CPU: 0 PID: 10780 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #280 [ 306.249988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.259342] Call Trace: [ 306.259369] dump_stack+0x1c4/0x2b4 [ 306.259391] ? dump_stack_print_info.cold.2+0x52/0x52 [ 306.259411] ? __kernel_text_address+0xd/0x40 [ 306.275295] should_fail.cold.4+0xa/0x17 [ 306.279373] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 306.284499] ? mark_held_locks+0xc7/0x130 [ 306.284522] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 306.284542] ? retint_kernel+0x2d/0x2d [ 306.284563] ? trace_hardirqs_on_caller+0xc0/0x310 [ 306.302352] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 306.307127] ? trace_hardirqs_off+0x310/0x310 [ 306.311645] ? find_held_lock+0x36/0x1c0 [ 306.315733] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 306.320518] ? retint_kernel+0x2d/0x2d [ 306.321298] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 306.324438] ? __should_failslab+0x9c/0x180 [ 306.324458] ? write_comp_data+0x22/0x70 [ 306.324479] __should_failslab+0x124/0x180 [ 306.324503] should_failslab+0x9/0x14 [ 306.324524] __kmalloc+0x2d4/0x760 [ 306.352872] ? alloc_pipe_info+0x29e/0x590 03:34:44 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400600000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 306.357140] alloc_pipe_info+0x29e/0x590 [ 306.361240] ? pipe_read+0x940/0x940 [ 306.365165] ? splice_direct_to_actor+0xf6/0x8f0 [ 306.365299] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 306.370035] splice_direct_to_actor+0x6fc/0x8f0 [ 306.370055] ? pipe_to_sendpage+0x400/0x400 [ 306.370078] ? apparmor_file_permission+0x24/0x30 [ 306.370093] ? do_splice_to+0x190/0x190 [ 306.370110] ? security_file_permission+0x1c2/0x230 [ 306.370131] ? rw_verify_area+0x118/0x360 [ 306.370151] do_splice_direct+0x2d4/0x420 [ 306.409626] ? splice_direct_to_actor+0x8f0/0x8f0 [ 306.409652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 306.409668] ? __sb_start_write+0x1b2/0x370 [ 306.409689] do_sendfile+0x62a/0xe20 [ 306.420072] ? do_compat_pwritev64+0x1c0/0x1c0 [ 306.420103] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 306.420119] ? _copy_from_user+0xdf/0x150 [ 306.420137] __x64_sys_sendfile64+0x15d/0x250 [ 306.420154] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 306.420185] do_syscall_64+0x1b9/0x820 [ 306.455415] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 306.460799] ? syscall_return_slowpath+0x5e0/0x5e0 [ 306.465747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.470608] ? trace_hardirqs_on_caller+0x310/0x310 [ 306.475646] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 306.480683] ? prepare_exit_to_usermode+0x291/0x3b0 [ 306.482920] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 306.485715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.485743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.485757] RIP: 0033:0x457569 [ 306.485773] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.485788] RSP: 002b:00007fb98ce41c78 EFLAGS: 00000246 [ 306.519803] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 306.526306] ORIG_RAX: 0000000000000028 [ 306.526317] RAX: ffffffffffffffda RBX: 00007fb98ce41c90 RCX: 0000000000457569 [ 306.526327] RDX: 00000000200001c0 RSI: 0000000000000005 RDI: 0000000000000005 [ 306.526336] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 306.526346] R10: 000000000000a198 R11: 0000000000000246 R12: 00007fb98ce426d4 [ 306.526356] R13: 00000000004c34d0 R14: 00000000004d5298 R15: 0000000000000006 03:34:44 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174003f0000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:44 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:44 executing program 5 (fault-call:2 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 03:34:44 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x80000000000000, 0x32, 0xffffffffffffffff, 0x0) [ 306.757498] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 306.789870] FAULT_INJECTION: forcing a failure. [ 306.789870] name failslab, interval 1, probability 0, space 0, times 0 03:34:44 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x87, "1e515edce1304c4bb8584b1e1f16de493b7d07515fe0670a8d274de0c3146bb72b492c98523b1a08e5f35eee5676c3e359a6e40d2974dd3316d1b7aa3c74c87b189d267386e5c7d125acf687c1e934fcc7f03c09513bff6d36a503e1c70841208d600dc743445e590b8016426dfad8b913d7c1f305800229c50d9ad0cbed7d00dd406c5748a121"}, &(0x7f0000000300)=0x8f) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={r2, 0x75bc4ffc, 0x12, 0xffffffffffffffff, 0x1f, 0xac}, &(0x7f0000000380)=0x14) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x40, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x840, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000100)="5388029d5d5a544df1d5f0ee1104c3134dc961176efec3caf5a5134cd911ce50c3b6032e312f717e4c9a87036ce4440e408404d8b9dfde29c107a9091561a37ffdd7ec79bdd87227ac09fa3dd095d07eafa92e2a4c816f9965e4d6d7285ec2ae309f94b30bc67ec551788c0dace073f05c5c7c7b8112f947fe54aeb0614d57c6d9a3b137c27be93dac3e0fa4f7bdd27b1c08854cb2bc4832f1504ab06918cfafb4741a3967cfd05d116ea981a281afc12985ec1b2ab4fb57b19578f53026f0ad26ba93cf551e8ca3dd5a1293995e61c0f9a591a1ea6d9445", 0xd8) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) [ 306.817836] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 307.006685] CPU: 0 PID: 10822 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 307.014143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.023514] Call Trace: [ 307.026122] dump_stack+0x1c4/0x2b4 [ 307.029778] ? dump_stack_print_info.cold.2+0x52/0x52 [ 307.034992] ? print_usage_bug+0xc0/0xc0 [ 307.039083] should_fail.cold.4+0xa/0x17 [ 307.043165] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 307.048297] ? graph_lock+0x170/0x170 [ 307.052113] ? __lock_acquire+0x7ec/0x4ec0 [ 307.056374] ? find_held_lock+0x36/0x1c0 [ 307.060466] ? ___might_sleep+0x1ed/0x300 [ 307.064626] ? mark_held_locks+0x130/0x130 [ 307.068876] ? arch_local_save_flags+0x40/0x40 [ 307.073475] ? print_usage_bug+0xc0/0xc0 [ 307.077563] __should_failslab+0x124/0x180 [ 307.081812] should_failslab+0x9/0x14 [ 307.085625] kmem_cache_alloc+0x2be/0x730 [ 307.089798] ? graph_lock+0x170/0x170 [ 307.093614] ? mark_held_locks+0x130/0x130 [ 307.097863] __alloc_file+0xa8/0x470 [ 307.101595] ? file_free_rcu+0xd0/0xd0 [ 307.105509] ? find_held_lock+0x36/0x1c0 [ 307.109595] ? is_bpf_text_address+0xac/0x170 [ 307.114109] ? lock_downgrade+0x900/0x900 [ 307.118278] ? check_preemption_disabled+0x48/0x200 [ 307.123310] alloc_empty_file+0x72/0x170 [ 307.127395] path_openat+0x170/0x5160 [ 307.131224] ? rcu_bh_qs+0xc0/0xc0 [ 307.134776] ? unwind_dump+0x190/0x190 [ 307.138682] ? __lock_is_held+0xb5/0x140 [ 307.142752] ? graph_lock+0x170/0x170 [ 307.146576] ? path_lookupat.isra.43+0xc00/0xc00 [ 307.151348] ? unwind_get_return_address+0x61/0xa0 [ 307.156288] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 307.161316] ? expand_files.part.8+0x571/0x9a0 [ 307.165921] ? find_held_lock+0x36/0x1c0 [ 307.170004] ? __alloc_fd+0x347/0x6e0 [ 307.173829] ? lock_downgrade+0x900/0x900 [ 307.177993] ? getname+0x19/0x20 [ 307.181375] ? kasan_check_read+0x11/0x20 [ 307.185540] ? do_raw_spin_unlock+0xa7/0x2f0 [ 307.189967] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 307.194562] ? __lock_is_held+0xb5/0x140 [ 307.198644] ? _raw_spin_unlock+0x2c/0x50 [ 307.202804] ? __alloc_fd+0x347/0x6e0 [ 307.206618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.212177] do_filp_open+0x255/0x380 [ 307.215997] ? may_open_dev+0x100/0x100 [ 307.220000] ? get_unused_fd_flags+0x122/0x1a0 [ 307.224598] ? __alloc_fd+0x6e0/0x6e0 [ 307.228420] do_sys_open+0x568/0x700 [ 307.232151] ? filp_open+0x80/0x80 [ 307.235707] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 307.241174] __x64_sys_open+0x7e/0xc0 [ 307.245001] do_syscall_64+0x1b9/0x820 [ 307.248902] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 307.254281] ? syscall_return_slowpath+0x5e0/0x5e0 [ 307.259236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.264095] ? trace_hardirqs_on_caller+0x310/0x310 [ 307.269126] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 307.274162] ? prepare_exit_to_usermode+0x291/0x3b0 [ 307.279215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.284081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.289281] RIP: 0033:0x4111a1 [ 307.292490] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 307.311404] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 307.319132] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 307.326413] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 307.333696] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 307.340983] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 307.348266] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 03:34:45 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:46 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffd, 0x0) write$9p(r1, &(0x7f0000000100)="58b84ee211cff009b9d74c42cd2785669a0357981201fb0e6be1f941231b265c01a4006d29b71c7d8f3e06ae89acca291477840c1471e44a7da94ff669c726d209e248b826a557bddac198faebcdd88429a50d3165849df79ff61c824766fa1382d0418d549da58aa4d02c697e47c6e9175390749c4946165360771ce468c4e1817d566ac9a59f7ae2aefe9c34326f5dcf93630ccf1247b7d6a2b69818ccdc3a935d5d87ce1bae2f4fbfb8f1d0a58ed514f7b2f5b123d7930354b6d6f6b1f2e2c4866ee99a9de5af2dcb03418c21d824d74626a8d6bbcaa0040297942a840f4058cad306e0f3b2c94f", 0xe9) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)="35fdd5ba19bcd4d457675e82ad52ebc99d8d7d919d354ab7cbb24b69cbdfc9f367eaa5bda80cc3cd855a45e2d079e7f09c267fdcf01ac19e3e9fe3c702d72187aa08fd608533c9dcee4ac790c4521f7b686a4197ea3be3395f479c5f5bc7c2741ac26233f1b52321a219dbbcf7e980b25db5c9ff1e343672a652e685c41da4bf5784eef6eb2e61416bd681d1e8a77a0139b73c1763bcbeeadad0b26cee9ce3cb2b764ce3adf13d9ad24f4a344c55c2459db9a1cb3acc9bb89c2aaeeac8cf0da6f2d664e798e6a64e772bbb2b46bcf4", 0xcf, r2) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:46 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000020000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:46 executing program 5 (fault-call:2 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0xf00000000000000, 0xa198) 03:34:46 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4000000, 0x32, 0xffffffffffffffff, 0x0) [ 308.599114] FAULT_INJECTION: forcing a failure. [ 308.599114] name failslab, interval 1, probability 0, space 0, times 0 [ 308.614533] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 308.631581] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x8000000000000000, 0xa198) 03:34:46 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1f, 0x10800) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000100)={"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"}) [ 308.650792] CPU: 0 PID: 10849 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 308.658181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.667556] Call Trace: [ 308.670164] dump_stack+0x1c4/0x2b4 [ 308.673812] ? dump_stack_print_info.cold.2+0x52/0x52 [ 308.679016] ? lock_downgrade+0x900/0x900 [ 308.683178] ? check_preemption_disabled+0x48/0x200 [ 308.688280] should_fail.cold.4+0xa/0x17 [ 308.692354] ? rcu_bh_qs+0xc0/0xc0 [ 308.695910] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:34:46 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2000, 0x0) ioctl(r0, 0xffffffffffffffff, &(0x7f0000000140)="a7e142456dc5f14a5771b6393691ccc8d8b7a44d1b4743af20c9d1d19151960a89b016ded76f2e6c05a017bd3002ef39ab630e1f96e486813fc1ca3f3fce4420c4d9cbc2c530fb3649d3a557303f14998407d5e671b21cfcdce9162d14429511bcf92034ef37d65281c537f0f19ba4418b92492610d2ec981e029bdb52b845dd480d172f241b4dfbcdf2253cacbdcd49c797b94ef3448c3173243b89d60a2ccbe521c3a6f4fe1edca854920dd2f800232292524b93d22c7f10272a305dacbbb2d7733acf8d2bdd811aac56c97f46cd") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x529, 0x4e24, 0x10de, 0x2, 0x20, 0x80, 0x6c, r2, r3}, {0xfffffffffffffffe, 0x4, 0x8000, 0xf7, 0x4, 0x16ab, 0x8001, 0x240000000000}, {0x8, 0x2, 0x800, 0xef12}, 0x4, 0x6e6bb4, 0x2, 0x1, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4d6}, 0xa, @in6=@mcast2, 0x3501, 0x1, 0x0, 0x3, 0x6c, 0x4, 0x2}}, 0xe8) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 308.701037] ? graph_lock+0x170/0x170 [ 308.704851] ? kernel_text_address+0x79/0xf0 [ 308.709288] ? __kernel_text_address+0xd/0x40 [ 308.713796] ? unwind_get_return_address+0x61/0xa0 [ 308.718780] ? __save_stack_trace+0x8d/0xf0 [ 308.723124] ? find_held_lock+0x36/0x1c0 [ 308.727231] ? ___might_sleep+0x1ed/0x300 [ 308.731394] ? do_syscall_64+0x1b9/0x820 [ 308.735464] ? arch_local_save_flags+0x40/0x40 [ 308.740079] __should_failslab+0x124/0x180 [ 308.744327] should_failslab+0x9/0x14 [ 308.748144] kmem_cache_alloc_trace+0x2d7/0x750 [ 308.752826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 308.758373] ? check_preemption_disabled+0x48/0x200 [ 308.763407] ? check_preemption_disabled+0x48/0x200 [ 308.768450] apparmor_file_alloc_security+0x168/0xaa0 [ 308.773656] ? percpu_ref_put_many+0x13e/0x260 [ 308.778251] ? rcu_pm_notify+0xc0/0xc0 [ 308.782150] ? apparmor_socket_getpeersec_stream+0xab0/0xab0 [ 308.787964] ? rcu_read_lock_sched_held+0x108/0x120 [ 308.792992] ? kmem_cache_alloc+0x33a/0x730 [ 308.797336] security_file_alloc+0x4c/0xa0 03:34:46 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) r1 = fcntl$getown(0xffffffffffffffff, 0x9) tgkill(r0, r1, 0x1f) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$update(0x2, r2, &(0x7f00000002c0), 0x0) [ 308.801582] __alloc_file+0x12a/0x470 [ 308.805398] ? file_free_rcu+0xd0/0xd0 [ 308.809303] ? find_held_lock+0x36/0x1c0 [ 308.813389] ? is_bpf_text_address+0xac/0x170 [ 308.817900] ? lock_downgrade+0x900/0x900 [ 308.822056] ? check_preemption_disabled+0x48/0x200 [ 308.827086] alloc_empty_file+0x72/0x170 [ 308.831159] path_openat+0x170/0x5160 [ 308.834974] ? rcu_bh_qs+0xc0/0xc0 [ 308.838526] ? unwind_dump+0x190/0x190 [ 308.842433] ? __lock_is_held+0xb5/0x140 [ 308.846504] ? graph_lock+0x170/0x170 [ 308.850322] ? path_lookupat.isra.43+0xc00/0xc00 [ 308.855093] ? unwind_get_return_address+0x61/0xa0 [ 308.860029] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 308.865049] ? expand_files.part.8+0x571/0x9a0 [ 308.865073] ? find_held_lock+0x36/0x1c0 [ 308.865097] ? __alloc_fd+0x347/0x6e0 [ 308.865116] ? lock_downgrade+0x900/0x900 [ 308.881677] ? getname+0x19/0x20 [ 308.885052] ? kasan_check_read+0x11/0x20 [ 308.889217] ? do_raw_spin_unlock+0xa7/0x2f0 [ 308.893631] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 308.898224] ? __lock_is_held+0xb5/0x140 [ 308.902368] ? display_pipe_crc_irq_handler+0xc0/0x3c0 [ 308.907659] ? _raw_spin_unlock+0x2c/0x50 [ 308.911810] ? __alloc_fd+0x347/0x6e0 [ 308.915613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 308.921169] do_filp_open+0x255/0x380 [ 308.924978] ? may_open_dev+0x100/0x100 [ 308.928972] ? get_unused_fd_flags+0x122/0x1a0 [ 308.933561] ? __alloc_fd+0x6e0/0x6e0 [ 308.937374] do_sys_open+0x568/0x700 [ 308.941092] ? filp_open+0x80/0x80 [ 308.944636] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 308.950099] __x64_sys_open+0x7e/0xc0 [ 308.953906] do_syscall_64+0x1b9/0x820 [ 308.957794] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 308.963164] ? syscall_return_slowpath+0x5e0/0x5e0 [ 308.968096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.972953] ? trace_hardirqs_on_caller+0x310/0x310 [ 308.977992] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 308.983019] ? prepare_exit_to_usermode+0x291/0x3b0 [ 308.988046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.992904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.998091] RIP: 0033:0x4111a1 [ 309.001290] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 309.020241] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 309.027954] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 309.035226] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 309.042505] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 03:34:46 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000200000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 309.049773] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 309.057042] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 03:34:46 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) setrlimit(0x2, &(0x7f0000000040)={0x0, 0x200000004}) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x800000a) keyctl$update(0x2, r0, &(0x7f00000000c0)="075be8d0d9d44e6970866ed1f41a265456d52f299d0af313f01ae7f4e478c4ccf93fe5a33fc68d85844c003d56c6c056a1292ab5b412748f664261f2b03dd54ab1a4824050c3d72e53b57940afce2ca7884fad816c2e65e42f790eea9eecd525714d14241c1e55e09ad19228d0abded6613bf200f44282f439334dfa553837c4ff3a5fb9b9f172721ee32e7fbd65f608c9812b32bec594c27f", 0x99) 03:34:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x804, 0xa198) 03:34:46 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f00000000c0)='a', 0x1, 0xfffffffffffffffd) r1 = semget(0x3, 0x3, 0x41c) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f0000000140)=""/176) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) [ 309.167643] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 309.206383] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:46 executing program 5 (fault-call:2 fault-nth:4): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:46 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) [ 309.420458] FAULT_INJECTION: forcing a failure. [ 309.420458] name failslab, interval 1, probability 0, space 0, times 0 [ 309.488243] CPU: 1 PID: 10904 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 309.496047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.505408] Call Trace: [ 309.508026] dump_stack+0x1c4/0x2b4 [ 309.511676] ? dump_stack_print_info.cold.2+0x52/0x52 [ 309.516883] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 309.522352] ? __dequeue_signal+0x7d0/0x7d0 [ 309.526689] should_fail.cold.4+0xa/0x17 [ 309.530764] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 309.535886] ? graph_lock+0x170/0x170 [ 309.539699] ? ptrace_notify+0x130/0x130 [ 309.544359] ? save_stack+0xa9/0xd0 [ 309.548011] ? find_held_lock+0x36/0x1c0 [ 309.552102] ? ___might_sleep+0x1ed/0x300 [ 309.556267] ? arch_local_save_flags+0x40/0x40 [ 309.560862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.566420] ? setup_sigcontext+0x7d0/0x7d0 [ 309.570770] __should_failslab+0x124/0x180 [ 309.575019] should_failslab+0x9/0x14 [ 309.578831] kmem_cache_alloc+0x2be/0x730 [ 309.582995] ? exit_to_usermode_loop+0x8c/0x380 [ 309.587680] ? exit_to_usermode_loop+0x8c/0x380 [ 309.592364] getname_flags+0xd0/0x5a0 [ 309.596179] ? do_syscall_64+0x6be/0x820 [ 309.600260] getname+0x19/0x20 [ 309.603466] do_sys_open+0x383/0x700 [ 309.607189] ? filp_open+0x80/0x80 [ 309.610774] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 309.616246] __x64_sys_open+0x7e/0xc0 [ 309.620059] do_syscall_64+0x1b9/0x820 [ 309.623955] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 309.629335] ? syscall_return_slowpath+0x5e0/0x5e0 [ 309.634275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.639140] ? trace_hardirqs_on_caller+0x310/0x310 [ 309.644168] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 309.649200] ? prepare_exit_to_usermode+0x291/0x3b0 [ 309.654245] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.659110] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.664305] RIP: 0033:0x4111a1 [ 309.667509] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 309.686418] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 309.694141] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 309.701419] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 309.708695] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 309.715970] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 309.723252] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 03:34:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:48 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000040000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0xf00, 0xa198) 03:34:48 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7) 03:34:48 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x40000000000000) 03:34:48 executing program 5 (fault-call:2 fault-nth:5): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) [ 310.648832] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:48 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x9a381, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) 03:34:48 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000002000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0xf, 0xa198) [ 310.707910] FAULT_INJECTION: forcing a failure. [ 310.707910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.719776] CPU: 1 PID: 10923 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 310.727143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.736504] Call Trace: [ 310.739114] dump_stack+0x1c4/0x2b4 [ 310.742772] ? dump_stack_print_info.cold.2+0x52/0x52 [ 310.747988] ? find_held_lock+0x36/0x1c0 [ 310.752073] should_fail.cold.4+0xa/0x17 [ 310.756147] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 310.761263] ? ___might_sleep+0x1ed/0x300 [ 310.761293] ? mark_held_locks+0x130/0x130 [ 310.761314] ? get_signal+0xf73/0x1980 [ 310.769682] ? _raw_spin_unlock_irq+0x27/0x80 [ 310.769696] ? _raw_spin_unlock_irq+0x27/0x80 [ 310.769712] ? lockdep_hardirqs_on+0x421/0x5c0 [ 310.769730] ? trace_hardirqs_on+0xbd/0x310 [ 310.769748] ? kasan_check_read+0x11/0x20 [ 310.778123] ? get_signal+0xf73/0x1980 [ 310.778142] ? __dequeue_signal+0x7d0/0x7d0 [ 310.778157] ? kasan_check_write+0x14/0x20 [ 310.778175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.778192] ? should_fail+0x22d/0xd01 [ 310.778221] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 310.787293] __alloc_pages_nodemask+0x34b/0xde0 [ 310.787312] ? ptrace_notify+0x130/0x130 [ 310.787332] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 310.787347] ? save_stack+0xa9/0xd0 [ 310.787369] ? find_held_lock+0x36/0x1c0 [ 310.787403] ? ___might_sleep+0x1ed/0x300 [ 310.848248] ? trace_hardirqs_off+0xb8/0x310 [ 310.852670] cache_grow_begin+0x91/0x8c0 [ 310.856745] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 310.862292] ? check_preemption_disabled+0x48/0x200 [ 310.867319] kmem_cache_alloc+0x665/0x730 [ 310.871486] getname_flags+0xd0/0x5a0 [ 310.875295] ? do_syscall_64+0x6be/0x820 [ 310.879361] getname+0x19/0x20 [ 310.882558] do_sys_open+0x383/0x700 [ 310.886280] ? filp_open+0x80/0x80 [ 310.889826] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 310.895289] __x64_sys_open+0x7e/0xc0 [ 310.899098] do_syscall_64+0x1b9/0x820 [ 310.902988] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 310.908366] ? syscall_return_slowpath+0x5e0/0x5e0 [ 310.913300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.918162] ? trace_hardirqs_on_caller+0x310/0x310 [ 310.923185] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 310.928224] ? prepare_exit_to_usermode+0x291/0x3b0 [ 310.933259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.938117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.943312] RIP: 0033:0x4111a1 [ 310.946512] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 310.965426] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 310.973147] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 310.980428] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 310.987699] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 310.994971] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 311.002247] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 03:34:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 311.024620] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 311.107873] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:48 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x800000) 03:34:48 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400060000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:48 executing program 1: arch_prctl(0x1007, &(0x7f00000000c0)="88def0c0bd208ea354db5649e5dacaea3c8a0c11a4772c3e2f455eb30d7920143f4c0de81333e43b2f825a20a1ae99c4dd40fc1825e3ae84ea0bad8b5282303306a697e8ffacfe25e55132ddb5ffd276f0fb9ac0413fd5de5714f2ee5a97f8d4998c119ece0008be10f5b196d03e044821f41c5a6a6906b4c390e93f20faaf22303bdedcf845531567652b2378f66327fc585163994fac9599d8255271f4") socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xfffffffffffffffb, 0x1) connect$vsock_stream(r0, &(0x7f00000001c0), 0x10) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) 03:34:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 311.278481] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:49 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617402000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:49 executing program 5 (fault-call:2 fault-nth:6): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:49 executing program 1: r0 = request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='user\x00', 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000080)='a', 0x15fa469d1034803f, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) [ 311.520620] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 311.570475] FAULT_INJECTION: forcing a failure. [ 311.570475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.582380] CPU: 1 PID: 10969 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 311.589764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.599125] Call Trace: [ 311.601747] dump_stack+0x1c4/0x2b4 [ 311.605401] ? dump_stack_print_info.cold.2+0x52/0x52 [ 311.610615] ? find_held_lock+0x36/0x1c0 [ 311.614705] should_fail.cold.4+0xa/0x17 [ 311.618786] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.623909] ? ___might_sleep+0x1ed/0x300 [ 311.628083] ? mark_held_locks+0x130/0x130 [ 311.632361] ? get_signal+0xf73/0x1980 [ 311.636265] ? _raw_spin_unlock_irq+0x27/0x80 [ 311.640771] ? _raw_spin_unlock_irq+0x27/0x80 [ 311.645282] ? lockdep_hardirqs_on+0x421/0x5c0 [ 311.649875] ? trace_hardirqs_on+0xbd/0x310 [ 311.654217] ? kasan_check_read+0x11/0x20 [ 311.658377] ? get_signal+0xf73/0x1980 [ 311.662281] ? __dequeue_signal+0x7d0/0x7d0 [ 311.666614] ? kasan_check_write+0x14/0x20 [ 311.670865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.676416] ? should_fail+0x22d/0xd01 [ 311.680317] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.685443] __alloc_pages_nodemask+0x34b/0xde0 [ 311.690126] ? ptrace_notify+0x130/0x130 [ 311.694203] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 311.699247] ? save_stack+0xa9/0xd0 [ 311.702918] ? find_held_lock+0x36/0x1c0 [ 311.707013] ? ___might_sleep+0x1ed/0x300 [ 311.711179] ? trace_hardirqs_off+0xb8/0x310 [ 311.715616] cache_grow_begin+0x91/0x8c0 [ 311.719692] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.725250] ? check_preemption_disabled+0x48/0x200 [ 311.730285] kmem_cache_alloc+0x665/0x730 [ 311.734459] getname_flags+0xd0/0x5a0 [ 311.738272] ? do_syscall_64+0x6be/0x820 [ 311.742346] getname+0x19/0x20 [ 311.745550] do_sys_open+0x383/0x700 [ 311.749276] ? filp_open+0x80/0x80 [ 311.752832] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 311.758298] __x64_sys_open+0x7e/0xc0 [ 311.762110] do_syscall_64+0x1b9/0x820 [ 311.766012] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 311.771393] ? syscall_return_slowpath+0x5e0/0x5e0 [ 311.776332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.781191] ? trace_hardirqs_on_caller+0x310/0x310 [ 311.786242] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 311.791274] ? prepare_exit_to_usermode+0x291/0x3b0 [ 311.796312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.801182] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.806389] RIP: 0033:0x4111a1 [ 311.809596] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 311.828514] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 311.836248] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 311.843528] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 311.850820] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 311.858096] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 311.865378] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 03:34:50 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000ff0000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x7fffffffffffffff, 0xa198) 03:34:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 312.992923] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 313.009054] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:50 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000060000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:50 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xff2f) 03:34:50 executing program 5 (fault-call:2 fault-nth:7): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:50 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x80, 0x80800) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000380)=0x77d0, 0x2) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '@eth0vboxnet1\x00'}, &(0x7f0000000140)='em1\'wlan0%.(\x00', 0xd, 0x3) 03:34:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x10, 0xa198) 03:34:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 313.253656] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 313.300553] FAULT_INJECTION: forcing a failure. [ 313.300553] name failslab, interval 1, probability 0, space 0, times 0 [ 313.317525] CPU: 0 PID: 11002 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 313.324909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.334275] Call Trace: [ 313.336883] dump_stack+0x1c4/0x2b4 [ 313.340548] ? dump_stack_print_info.cold.2+0x52/0x52 [ 313.345774] ? lock_downgrade+0x900/0x900 [ 313.349952] ? check_preemption_disabled+0x48/0x200 [ 313.355008] should_fail.cold.4+0xa/0x17 [ 313.359078] ? rcu_bh_qs+0xc0/0xc0 [ 313.362636] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 313.367769] ? graph_lock+0x170/0x170 [ 313.371578] ? kernel_text_address+0x79/0xf0 [ 313.375999] ? __kernel_text_address+0xd/0x40 [ 313.380511] ? unwind_get_return_address+0x61/0xa0 [ 313.385453] ? __save_stack_trace+0x8d/0xf0 [ 313.389815] ? find_held_lock+0x36/0x1c0 [ 313.393910] ? ___might_sleep+0x1ed/0x300 [ 313.398065] ? do_syscall_64+0x1b9/0x820 [ 313.402146] ? arch_local_save_flags+0x40/0x40 [ 313.406778] __should_failslab+0x124/0x180 [ 313.411027] should_failslab+0x9/0x14 [ 313.414844] kmem_cache_alloc_trace+0x2d7/0x750 [ 313.419531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.425084] ? check_preemption_disabled+0x48/0x200 [ 313.430116] ? check_preemption_disabled+0x48/0x200 [ 313.435157] apparmor_file_alloc_security+0x168/0xaa0 [ 313.440360] ? percpu_ref_put_many+0x13e/0x260 [ 313.444952] ? rcu_pm_notify+0xc0/0xc0 [ 313.448855] ? apparmor_socket_getpeersec_stream+0xab0/0xab0 [ 313.454669] ? rcu_read_lock_sched_held+0x108/0x120 [ 313.459705] ? kmem_cache_alloc+0x33a/0x730 [ 313.464042] security_file_alloc+0x4c/0xa0 [ 313.468289] __alloc_file+0x12a/0x470 [ 313.472097] ? file_free_rcu+0xd0/0xd0 [ 313.475996] ? find_held_lock+0x36/0x1c0 [ 313.480077] ? is_bpf_text_address+0xac/0x170 [ 313.484584] ? lock_downgrade+0x900/0x900 [ 313.488742] ? check_preemption_disabled+0x48/0x200 [ 313.493768] alloc_empty_file+0x72/0x170 [ 313.498010] path_openat+0x170/0x5160 [ 313.501821] ? rcu_bh_qs+0xc0/0xc0 [ 313.505377] ? unwind_dump+0x190/0x190 [ 313.509285] ? __lock_is_held+0xb5/0x140 [ 313.513352] ? graph_lock+0x170/0x170 [ 313.517169] ? path_lookupat.isra.43+0xc00/0xc00 [ 313.521934] ? unwind_get_return_address+0x61/0xa0 [ 313.526874] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 313.531902] ? expand_files.part.8+0x571/0x9a0 [ 313.536507] ? find_held_lock+0x36/0x1c0 [ 313.540574] ? __alloc_fd+0x347/0x6e0 [ 313.544377] ? lock_downgrade+0x900/0x900 [ 313.548533] ? getname+0x19/0x20 [ 313.552141] ? kasan_check_read+0x11/0x20 [ 313.556304] ? do_raw_spin_unlock+0xa7/0x2f0 [ 313.560722] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 313.565315] ? __lock_is_held+0xb5/0x140 [ 313.569394] ? _raw_spin_unlock+0x2c/0x50 [ 313.573552] ? __alloc_fd+0x347/0x6e0 [ 313.577366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.582925] do_filp_open+0x255/0x380 [ 313.586734] ? may_open_dev+0x100/0x100 [ 313.590736] ? get_unused_fd_flags+0x122/0x1a0 [ 313.595330] ? __alloc_fd+0x6e0/0x6e0 [ 313.599142] ? do_syscall_64+0x6be/0x820 [ 313.603232] do_sys_open+0x568/0x700 [ 313.606959] ? filp_open+0x80/0x80 [ 313.610516] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 313.615983] __x64_sys_open+0x7e/0xc0 [ 313.619793] do_syscall_64+0x1b9/0x820 [ 313.623690] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 313.629072] ? syscall_return_slowpath+0x5e0/0x5e0 [ 313.634007] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.638860] ? trace_hardirqs_on_caller+0x310/0x310 [ 313.643888] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 313.648916] ? prepare_exit_to_usermode+0x291/0x3b0 [ 313.653952] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.658812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.664009] RIP: 0033:0x4111a1 [ 313.667220] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 313.686131] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 313.693859] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 313.701136] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 313.708417] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 313.715691] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 313.722966] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 [ 313.732013] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:51 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000007000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:51 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x400, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000001c0)) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$update(0x2, r1, &(0x7f00000002c0), 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x170) perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x70, 0xe0f, 0x9c, 0x6, 0x0, 0x0, 0xa6a1, 0x2, 0xa, 0x1ff, 0x101, 0x1, 0xffff, 0x7f, 0x200, 0xffffffff00000001, 0x2, 0x100, 0xa68, 0x10001, 0x101, 0x23, 0x1, 0x1, 0xfd, 0x5, 0x4, 0x6, 0x4, 0x7f4e, 0xd95, 0x8001, 0x7, 0x40, 0x9, 0xe80d, 0xfffffffffffffff8, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x1210, 0x7, 0x4, 0x7, 0x1ff, 0x7d0d, 0x207eff31}, r2, 0x4, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000140)={0x6, 0x7fff800000000, 0x0, 0x100, 0x9, 0x0, 0x7, 0x0, 0xb4, 0x6}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000002c0)={0x9, 0x1, 0x7f, 0x3d, &(0x7f0000000180)=""/61, 0xc6, &(0x7f0000000340)=""/198, 0x9b, &(0x7f0000000440)=""/155}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000100)=0x1ff, 0x2) 03:34:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 313.957741] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:51 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400030000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:51 executing program 5 (fault-call:2 fault-nth:8): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:51 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x2) 03:34:51 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) gettid() 03:34:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x804000000000000, 0xa198) 03:34:51 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400200000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:51 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 314.220346] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 314.252904] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 314.321346] FAULT_INJECTION: forcing a failure. [ 314.321346] name failslab, interval 1, probability 0, space 0, times 0 [ 314.407690] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 314.415810] CPU: 0 PID: 11049 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 314.423528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.432906] Call Trace: [ 314.435521] dump_stack+0x1c4/0x2b4 [ 314.439175] ? dump_stack_print_info.cold.2+0x52/0x52 [ 314.444393] ? finish_wait+0x25d/0x430 [ 314.448303] should_fail.cold.4+0xa/0x17 [ 314.452381] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.457505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.457561] ? open_wait+0x7f9/0xa20 [ 314.457585] ? sg_poll+0x5c0/0x5c0 [ 314.470362] ? finish_wait+0x430/0x430 [ 314.474264] ? mark_held_locks+0x130/0x130 [ 314.478537] ? arch_local_save_flags+0x40/0x40 [ 314.483135] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 314.488265] ? __might_sleep+0x95/0x190 [ 314.492263] __should_failslab+0x124/0x180 [ 314.496516] should_failslab+0x9/0x14 [ 314.500332] kmem_cache_alloc_trace+0x4b/0x750 03:34:52 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400feffff070000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:52 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400030000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 314.504928] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 314.510140] sg_open+0x56f/0x1330 [ 314.513604] ? trace_hardirqs_on+0xbd/0x310 [ 314.517946] ? sg_build_reserve+0x1c0/0x1c0 [ 314.522366] ? m_show+0x5d0/0x5d0 [ 314.525832] ? chrdev_open+0xde/0x710 [ 314.529644] ? lock_downgrade+0x900/0x900 [ 314.533802] ? kasan_check_read+0x11/0x20 [ 314.537965] ? do_raw_spin_unlock+0xa7/0x2f0 [ 314.542389] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 314.547003] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.552553] ? refcount_inc_checked+0x29/0x70 [ 314.557065] ? sg_build_reserve+0x1c0/0x1c0 [ 314.561399] chrdev_open+0x25a/0x710 [ 314.565119] ? apparmor_capable+0x6c0/0x6c0 [ 314.569456] ? cdev_put.part.0+0x50/0x50 [ 314.573554] ? errseq_sample+0xe5/0x130 [ 314.577556] do_dentry_open+0x499/0x1250 [ 314.581627] ? cdev_put.part.0+0x50/0x50 [ 314.585700] ? chown_common+0x730/0x730 [ 314.589686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.595244] ? security_inode_permission+0xd2/0x100 [ 314.600273] ? inode_permission+0xb2/0x560 [ 314.604528] vfs_open+0xa0/0xd0 [ 314.607816] path_openat+0x12bf/0x5160 [ 314.611710] ? rcu_bh_qs+0xc0/0xc0 [ 314.615260] ? unwind_dump+0x190/0x190 [ 314.619197] ? path_lookupat.isra.43+0xc00/0xc00 [ 314.623972] ? unwind_get_return_address+0x61/0xa0 [ 314.628927] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 314.633953] ? expand_files.part.8+0x571/0x9a0 [ 314.638552] ? find_held_lock+0x36/0x1c0 [ 314.642629] ? __alloc_fd+0x347/0x6e0 [ 314.646445] ? lock_downgrade+0x900/0x900 [ 314.650597] ? getname+0x19/0x20 [ 314.653980] ? kasan_check_read+0x11/0x20 [ 314.658142] ? do_raw_spin_unlock+0xa7/0x2f0 [ 314.662565] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 314.667161] ? __lock_is_held+0xb5/0x140 [ 314.671249] ? _raw_spin_unlock+0x2c/0x50 [ 314.675406] ? __alloc_fd+0x347/0x6e0 [ 314.679225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.684791] do_filp_open+0x255/0x380 [ 314.688603] ? may_open_dev+0x100/0x100 [ 314.692606] ? get_unused_fd_flags+0x122/0x1a0 [ 314.697196] ? __alloc_fd+0x6e0/0x6e0 [ 314.701020] ? do_syscall_64+0x6be/0x820 [ 314.705096] do_sys_open+0x568/0x700 [ 314.708819] ? filp_open+0x80/0x80 [ 314.712370] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 314.717833] __x64_sys_open+0x7e/0xc0 [ 314.721646] do_syscall_64+0x1b9/0x820 [ 314.725546] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 314.730919] ? syscall_return_slowpath+0x5e0/0x5e0 [ 314.735867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.740730] ? trace_hardirqs_on_caller+0x310/0x310 [ 314.745758] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 314.750785] ? prepare_exit_to_usermode+0x291/0x3b0 [ 314.755818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.760679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.765877] RIP: 0033:0x4111a1 [ 314.769080] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 314.787992] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 314.795713] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 03:34:52 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) getgroups(0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xee01, 0xee01]) keyctl$chown(0x4, r0, r1, r2) 03:34:52 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x8040000, 0xa198) [ 314.802980] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 314.810241] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 314.817503] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 314.824760] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 03:34:52 executing program 5 (fault-call:2 fault-nth:9): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:52 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x4}, 0xc) dup(r1) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) 03:34:52 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x4000000) 03:34:52 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0xffffffffffffffff, 0xa198) [ 315.018034] FAULT_INJECTION: forcing a failure. [ 315.018034] name failslab, interval 1, probability 0, space 0, times 0 [ 315.086705] CPU: 0 PID: 11088 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #280 [ 315.094110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.103465] Call Trace: [ 315.103511] dump_stack+0x1c4/0x2b4 [ 315.103537] ? dump_stack_print_info.cold.2+0x52/0x52 [ 315.103558] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 315.103585] should_fail.cold.4+0xa/0x17 [ 315.103619] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 315.129450] ? kernel_text_address+0x79/0xf0 03:34:52 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f0000000340)="c9f50dff01000000000000baf467fd95cd909595d866ae19351a223c9a9f0ec01f6d16c1a77bfcf7e9e1495f6017756b03bcee554b19ce9b281b92e323b2ec2f21e62ecb466de50412b63e5ce001fa38df7b75e6461595fa0b895a344729a7bea08dc2d64e4bfbe4e87bafeb40728dae5c900cb41f1ea76de5f9445a0fe632bdfa6161eefa6bfc4d67470b9b42e710551bd95b66ea7a4127bd", 0x966743e6) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x100, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000100)=0x2c) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="66c9d23fba9bc863237fd332adb4057cae416e05ddfb050391e1153932034b8797543c986b68e2f86cc775feb1e4fa1c59c3257cabe3fc44ba7b92494fc789b55341dff530548716eabe0d57c1d72ff8df372499cceb18f9c6c2d69f11dbced7501eb682f24f5c06530fee8040ef84c828436fb47538e3506a01bdae7462bf4da6d07f4ecac89b0ad4a13b6682f0d795d2a70c4f8f634d51e793f9d9266e62e43c55cb006dd1b0450814a50fea7110f291ad851126443764a4fa7fd7798d560f1a", 0xc1, r2) [ 315.133872] ? __kernel_text_address+0xd/0x40 [ 315.138384] ? unwind_get_return_address+0x61/0xa0 [ 315.143327] ? __save_stack_trace+0x8d/0xf0 [ 315.147682] ? save_stack+0xa9/0xd0 [ 315.151315] ? save_stack+0x43/0xd0 [ 315.154949] ? kasan_kmalloc+0xc7/0xe0 [ 315.158845] ? kmem_cache_alloc_trace+0x152/0x750 [ 315.163698] ? chrdev_open+0x25a/0x710 [ 315.167598] ? do_dentry_open+0x499/0x1250 [ 315.171844] ? vfs_open+0xa0/0xd0 [ 315.175310] ? path_openat+0x12bf/0x5160 [ 315.179380] ? do_filp_open+0x255/0x380 [ 315.183369] ? do_sys_open+0x568/0x700 03:34:52 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400000, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @host}, 0x10) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x881) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0xe000000000000000) [ 315.187265] ? __x64_sys_open+0x7e/0xc0 [ 315.191260] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.196644] ? graph_lock+0x170/0x170 [ 315.200482] __should_failslab+0x124/0x180 [ 315.204735] should_failslab+0x9/0x14 [ 315.208544] __kmalloc+0x63/0x760 [ 315.212012] ? mark_held_locks+0xc7/0x130 [ 315.216182] ? sg_build_indirect.isra.15+0x11f/0x9f0 [ 315.221314] sg_build_indirect.isra.15+0x11f/0x9f0 [ 315.226262] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 315.231741] sg_build_reserve+0xdd/0x1c0 [ 315.235822] sg_open+0xaef/0x1330 [ 315.239301] ? sg_build_reserve+0x1c0/0x1c0 [ 315.243643] ? m_show+0x5d0/0x5d0 [ 315.247108] ? chrdev_open+0xde/0x710 [ 315.250929] ? lock_downgrade+0x900/0x900 [ 315.255094] ? kasan_check_read+0x11/0x20 [ 315.259266] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 315.263872] ? refcount_inc_checked+0x29/0x70 [ 315.268387] ? sg_build_reserve+0x1c0/0x1c0 [ 315.272715] chrdev_open+0x25a/0x710 [ 315.276435] ? apparmor_capable+0x6c0/0x6c0 [ 315.280768] ? cdev_put.part.0+0x50/0x50 03:34:52 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000ffffffff00000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 315.284841] ? errseq_sample+0xe5/0x130 [ 315.288836] do_dentry_open+0x499/0x1250 [ 315.292913] ? cdev_put.part.0+0x50/0x50 [ 315.296992] ? chown_common+0x730/0x730 [ 315.300982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.306539] ? security_inode_permission+0xd2/0x100 [ 315.311577] ? inode_permission+0xb2/0x560 [ 315.315834] vfs_open+0xa0/0xd0 [ 315.319127] path_openat+0x12bf/0x5160 [ 315.323029] ? rcu_bh_qs+0xc0/0xc0 [ 315.326575] ? unwind_dump+0x190/0x190 [ 315.330491] ? path_lookupat.isra.43+0xc00/0xc00 03:34:53 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='a', 0x1, 0xfffffffffffffffd) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) keyctl$setperm(0x5, r0, 0x0) keyctl$update(0x2, r0, &(0x7f00000002c0), 0x0) [ 315.335268] ? unwind_get_return_address+0x61/0xa0 [ 315.340220] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 315.345255] ? expand_files.part.8+0x571/0x9a0 [ 315.349860] ? find_held_lock+0x36/0x1c0 [ 315.353943] ? __alloc_fd+0x347/0x6e0 [ 315.357758] ? lock_downgrade+0x900/0x900 [ 315.361915] ? getname+0x19/0x20 [ 315.365298] ? kasan_check_read+0x11/0x20 [ 315.369462] ? do_raw_spin_unlock+0xa7/0x2f0 [ 315.373892] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 315.378483] ? __lock_is_held+0xb5/0x140 [ 315.378515] ? _raw_spin_unlock+0x2c/0x50 [ 315.378532] ? __alloc_fd+0x347/0x6e0 [ 315.378549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.378575] do_filp_open+0x255/0x380 [ 315.396089] ? may_open_dev+0x100/0x100 [ 315.396124] ? get_unused_fd_flags+0x122/0x1a0 [ 315.396142] ? __alloc_fd+0x6e0/0x6e0 [ 315.396162] ? do_syscall_64+0x6be/0x820 [ 315.396186] do_sys_open+0x568/0x700 [ 315.396222] ? filp_open+0x80/0x80 [ 315.423650] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 315.429127] __x64_sys_open+0x7e/0xc0 [ 315.432947] do_syscall_64+0x1b9/0x820 [ 315.436847] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 315.442248] ? syscall_return_slowpath+0x5e0/0x5e0 [ 315.447192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.452064] ? trace_hardirqs_on_caller+0x310/0x310 [ 315.457098] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 315.462125] ? prepare_exit_to_usermode+0x291/0x3b0 [ 315.467155] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.472015] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.477228] RIP: 0033:0x4111a1 [ 315.480432] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 315.481164] IPVS: ftp: loaded support on port[0] = 21 [ 315.499554] RSP: 002b:00007f1cbddd67a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 315.499572] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 315.499580] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00007f1cbddd6850 [ 315.499589] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 03:34:53 executing program 5 (fault-call:2 fault-nth:10): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) [ 315.499598] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f1cbddd76d4 [ 315.499608] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 03:34:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x18, 0xa198) 03:34:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x8040000, 0xa198) 03:34:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:53 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xff2f000000000000) 03:34:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x10000000, 0xa198) 03:34:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x10, 0xa198) 03:34:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/.ev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) [ 316.827742] device bridge_slave_1 left promiscuous mode [ 316.833285] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.887439] device bridge_slave_0 left promiscuous mode [ 316.892895] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.947298] team0 (unregistering): Port device team_slave_1 removed [ 316.957146] team0 (unregistering): Port device team_slave_0 removed [ 316.966628] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 317.009756] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 317.066564] bond0 (unregistering): Released all slaves [ 317.530775] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.537577] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.544969] device bridge_slave_0 entered promiscuous mode [ 317.590280] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.597124] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.604499] device bridge_slave_1 entered promiscuous mode [ 317.650752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 317.694108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 317.829179] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 317.875624] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 318.086715] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 318.094134] team0: Port device team_slave_0 added [ 318.134968] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 318.142461] team0: Port device team_slave_1 added [ 318.184206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 318.191466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.207528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.244508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 318.251696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.259863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.304223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 318.311579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.319967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.365538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 318.372764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.389173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.701425] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.707869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.714543] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.720968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.729042] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 319.206850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.633276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.722410] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 319.808461] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 319.814594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.822262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.914921] 8021q: adding VLAN 0 to HW filter on device team0 03:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x408, 0xa198) 03:34:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000400000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:58 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x4000000000000000) 03:34:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='//ev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x7fffffffffffffff, 0xa198) [ 320.424452] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 320.433271] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0xffffffffffffff7f, 0xa198) 03:34:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/.g#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 320.558923] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:58 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x2fff) [ 320.649849] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev//g#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x408, 0xa198) 03:34:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000600000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x100000000000000, 0xa198) 03:34:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 320.853113] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 320.877311] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000ff0000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0xffffffffffffff7f, 0xa198) 03:34:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)="2f6465762f736723fe", 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:58 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x1fff) 03:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x1000000000000000, 0xa198) 03:34:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 321.073697] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000070000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0xffffffffffffff7f, 0xa198) [ 321.120277] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)="2f6465762f73672302", 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0xf000000, 0xa198) 03:34:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) [ 321.310059] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 321.326374] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:59 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x400000) 03:34:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x18000000, 0xa198) 03:34:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x8000000000000000, 0xa198) 03:34:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:59 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000050000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) [ 321.554479] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x1000000, 0xa198) [ 321.651488] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:59 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400040000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:59 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x100000000000000) 03:34:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x1800, 0xa198) [ 321.825815] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 321.867649] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:34:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01ab", 0x18) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:34:59 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000600000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:34:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:34:59 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x200000) 03:34:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0)=0x1800000000000000, 0xa198) [ 322.047263] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 322.100919] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:35:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:35:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01ab", 0x18) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:35:00 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400002000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:35:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x1, [0x7]}, 0x6) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="8fcaf1fc"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$evdev(r1, &(0x7f0000000440)=[{{0x77359400}}], 0x18) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) sendfile(r1, r1, &(0x7f00000001c0), 0x7fffffffffffffff) 03:35:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)="2f6465762f736723ff", 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:35:00 executing program 3: r0 = socket(0x840000000015, 0x805, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x1012, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa) [ 323.358105] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 323.398269] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:35:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01ab", 0x18) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) 03:35:01 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000007fffffff00000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:35:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)="2f6465762f7367230e", 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) 03:35:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f", 0x1c) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/180, 0x34000}], 0x1, &(0x7f0000001e40)=""/213, 0xd5}}], 0x400002d, 0x0, &(0x7f0000005c00)={0x77359400}) [ 323.680514] kernel msg: ebtables bug: please report to author: Hook order must be followed 03:35:01 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000ff00000000000000000000000000000000000600", 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {}]}, 0x138) 03:35:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x82) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) r3 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") dup3(r1, r0, 0x0) [ 323.946903] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 431.986451] rcu: INFO: rcu_preempt self-detected stall on CPU [ 431.992718] rcu: 1-....: (9186 ticks this GP) idle=bba/1/0x4000000000000002 softirq=15870/15870 fqs=2 [ 432.003080] rcu: (t=10500 jiffies g=19285 q=622) [ 432.008041] rcu: rcu_preempt kthread starved for 4258 jiffies! g19285 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 432.018612] rcu: RCU grace-period kthread stack dump: [ 432.023802] rcu_preempt I23064 10 2 0x80000000 [ 432.029446] Call Trace: [ 432.032051] __schedule+0x86c/0x1ed0 [ 432.035781] ? __sched_text_start+0x8/0x8 [ 432.039993] ? __mod_timer+0x6f6/0x1870 [ 432.043984] ? add_timer_on+0x9f0/0x9f0 [ 432.047969] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 432.053083] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 432.058199] ? lockdep_hardirqs_on+0x421/0x5c0 [ 432.062790] ? trace_hardirqs_on+0xbd/0x310 [ 432.067125] ? kasan_check_read+0x11/0x20 [ 432.071280] ? prepare_to_swait_event+0x25a/0x800 [ 432.076140] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.081605] schedule+0xfe/0x460 [ 432.084989] ? __schedule+0x1ed0/0x1ed0 [ 432.088969] ? prepare_to_swait_event+0x25a/0x800 [ 432.093830] ? __init_swait_queue_head+0x150/0x150 [ 432.098770] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 432.103884] ? __lockdep_init_map+0x105/0x590 [ 432.108387] ? lockdep_init_map+0x9/0x10 [ 432.112459] schedule_timeout+0x140/0x260 [ 432.116615] ? usleep_range+0x1a0/0x1a0 [ 432.120604] ? __next_timer_interrupt+0x1a0/0x1a0 [ 432.125461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.131015] rcu_gp_kthread+0x9d9/0x2310 [ 432.135121] ? rcu_gp_init+0x1830/0x1830 [ 432.139190] ? update_curr+0x344/0xbe0 [ 432.143085] ? graph_lock+0x170/0x170 [ 432.146894] ? __account_cfs_rq_runtime+0x790/0x790 [ 432.151922] ? __lock_acquire+0x7ec/0x4ec0 [ 432.156194] ? graph_lock+0x170/0x170 [ 432.160008] ? mark_held_locks+0x130/0x130 [ 432.164259] ? __lock_is_held+0xb5/0x140 [ 432.168324] ? __account_cfs_rq_runtime+0x790/0x790 [ 432.173381] ? set_next_entity+0x2f0/0xaf0 [ 432.177619] ? mark_held_locks+0x130/0x130 [ 432.181859] ? rcu_read_lock_sched_held+0x108/0x120 [ 432.186885] ? update_load_avg+0x2470/0x2470 [ 432.191306] ? __enqueue_entity+0x10d/0x1f0 [ 432.195649] ? graph_lock+0x170/0x170 [ 432.199461] ? match_held_lock+0x291/0x8d0 [ 432.203704] ? graph_lock+0x170/0x170 [ 432.207518] ? match_held_lock+0x290/0x8d0 [ 432.211777] ? match_held_lock+0x290/0x8d0 [ 432.216020] ? _raw_spin_unlock_irq+0x27/0x80 [ 432.220523] ? _raw_spin_unlock_irq+0x27/0x80 [ 432.225023] ? lockdep_hardirqs_on+0x421/0x5c0 [ 432.229612] ? trace_hardirqs_on+0xbd/0x310 [ 432.233937] ? kasan_check_read+0x11/0x20 [ 432.238099] ? mark_held_locks+0x130/0x130 [ 432.242355] ? audit_add_watch+0xf1/0xdc0 [ 432.246519] ? kasan_check_write+0x14/0x20 [ 432.250759] ? finish_task_switch+0x2f5/0x900 [ 432.255260] ? __switch_to_asm+0x40/0x70 [ 432.259346] ? preempt_notifier_register+0x200/0x200 [ 432.264455] ? __switch_to_asm+0x34/0x70 [ 432.268520] ? __switch_to_asm+0x34/0x70 [ 432.272588] ? __switch_to_asm+0x40/0x70 [ 432.276653] ? __switch_to_asm+0x40/0x70 [ 432.280718] ? __switch_to_asm+0x34/0x70 [ 432.284783] ? __switch_to_asm+0x40/0x70 [ 432.288847] ? __switch_to_asm+0x34/0x70 [ 432.292913] ? __switch_to_asm+0x34/0x70 [ 432.296981] ? __switch_to_asm+0x40/0x70 [ 432.301050] ? __switch_to_asm+0x40/0x70 [ 432.305120] ? __switch_to_asm+0x34/0x70 [ 432.309185] ? __switch_to_asm+0x40/0x70 [ 432.313257] ? __schedule+0x874/0x1ed0 [ 432.317157] ? __switch_to_asm+0x40/0x70 [ 432.321222] ? __switch_to_asm+0x40/0x70 [ 432.325300] ? graph_lock+0x170/0x170 [ 432.329128] ? __sched_text_start+0x8/0x8 [ 432.333292] ? find_held_lock+0x36/0x1c0 [ 432.337381] ? __kthread_parkme+0xce/0x1a0 [ 432.341623] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 432.346736] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 432.351846] ? lockdep_hardirqs_on+0x421/0x5c0 [ 432.356438] ? trace_hardirqs_on+0xbd/0x310 [ 432.360768] ? kasan_check_read+0x11/0x20 [ 432.364925] ? __kthread_parkme+0xce/0x1a0 [ 432.369166] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 432.374625] ? kasan_check_write+0x14/0x20 [ 432.378873] ? do_raw_spin_lock+0xc1/0x200 [ 432.383124] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 432.388236] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.393781] ? __kthread_parkme+0xfb/0x1a0 [ 432.398031] kthread+0x35a/0x420 [ 432.401409] ? rcu_gp_init+0x1830/0x1830 [ 432.405475] ? kthread_bind+0x40/0x40 [ 432.409284] ret_from_fork+0x3a/0x50 [ 432.413048] NMI backtrace for cpu 1 [ 432.416685] CPU: 1 PID: 11616 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #280 [ 432.424044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.433401] Call Trace: [ 432.435981] [ 432.438148] dump_stack+0x1c4/0x2b4 [ 432.441785] ? dump_stack_print_info.cold.2+0x52/0x52 [ 432.446987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.452532] ? trace_hardirqs_off+0xb8/0x310 [ 432.456956] nmi_cpu_backtrace.cold.3+0x63/0xa2 [ 432.461702] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 432.466902] nmi_trigger_cpumask_backtrace+0x1b3/0x1ed [ 432.472191] arch_trigger_cpumask_backtrace+0x14/0x20 [ 432.477391] rcu_dump_cpu_stacks+0x175/0x1c2 [ 432.481810] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 432.486841] print_cpu_stall.cold.78+0x2d3/0x524 [ 432.491615] ? rcu_dynticks_snap+0x30/0x30 [ 432.495857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.501405] ? check_preemption_disabled+0x48/0x200 [ 432.506429] ? check_preemption_disabled+0x48/0x200 [ 432.511457] ? rcu_test_sync_prims+0x30/0x30 [ 432.515883] ? __lock_is_held+0xb5/0x140 [ 432.519952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.525502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.531051] ? check_preemption_disabled+0x48/0x200 [ 432.536081] rcu_check_callbacks+0xfd9/0x1990 [ 432.540601] ? rcu_cpu_stall_reset+0x220/0x220 [ 432.545191] ? lock_release+0x970/0x970 [ 432.549175] ? graph_lock+0x170/0x170 [ 432.552986] ? graph_lock+0x170/0x170 [ 432.556797] ? graph_lock+0x170/0x170 [ 432.560611] ? graph_lock+0x170/0x170 [ 432.564415] ? find_held_lock+0x36/0x1c0 [ 432.568495] ? cpuacct_account_field+0x219/0x3d0 [ 432.573290] ? graph_lock+0x170/0x170 [ 432.577138] ? find_held_lock+0x36/0x1c0 [ 432.581207] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.586754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.592317] ? check_preemption_disabled+0x48/0x200 [ 432.597355] ? check_preemption_disabled+0x48/0x200 [ 432.602385] ? trace_hardirqs_off+0xb8/0x310 [ 432.606813] ? __lock_is_held+0xb5/0x140 [ 432.610882] ? trace_hardirqs_on+0x310/0x310 [ 432.615306] ? check_preemption_disabled+0x48/0x200 [ 432.620355] ? raise_softirq+0x199/0x420 [ 432.624430] ? raise_softirq_irqoff+0x2e0/0x2e0 [ 432.629105] ? account_system_index_time+0x333/0x5d0 [ 432.634232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.639779] ? check_preemption_disabled+0x48/0x200 [ 432.644810] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 432.650419] ? hrtimer_run_queues+0x9a/0x400 [ 432.654840] ? run_local_timers+0x19b/0x230 [ 432.659186] ? timer_clear_idle+0x90/0x90 [ 432.663386] ? irqtime_account_process_tick.isra.6+0x35b/0x490 [ 432.669379] ? account_process_tick+0x282/0x350 [ 432.674064] update_process_times+0x2d/0x70 [ 432.678397] tick_sched_handle+0x9f/0x180 [ 432.682557] tick_sched_timer+0x45/0x130 [ 432.686626] __hrtimer_run_queues+0x41c/0x10d0 [ 432.691223] ? tick_sched_do_timer+0x1a0/0x1a0 [ 432.695818] ? hrtimer_start_range_ns+0xe00/0xe00 [ 432.700675] ? pvclock_read_flags+0x160/0x160 [ 432.705178] ? trace_hardirqs_on+0x310/0x310 [ 432.709593] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.714679] ? kvm_clock_read+0x18/0x30 [ 432.718666] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 432.723692] ? ktime_get_update_offsets_now+0x3b6/0x550 [ 432.729090] ? do_timer+0x50/0x50 [ 432.732560] ? trace_hardirqs_on+0x310/0x310 [ 432.736982] ? do_raw_spin_lock+0xc1/0x200 [ 432.741273] hrtimer_interrupt+0x313/0x780 [ 432.745571] smp_apic_timer_interrupt+0x1a1/0x760 [ 432.750429] ? smp_reschedule_interrupt+0x109/0x650 [ 432.755457] ? smp_call_function_single_interrupt+0x650/0x650 [ 432.761387] ? interrupt_entry+0xb5/0xf0 [ 432.765457] ? trace_hardirqs_off_caller+0xbb/0x310 [ 432.770479] ? trace_hardirqs_off_caller+0xbb/0x310 [ 432.775503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.780360] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.785385] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.790412] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.795960] ? check_preemption_disabled+0x48/0x200 [ 432.800987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.806586] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.811444] apic_timer_interrupt+0xf/0x20 [ 432.815676] [ 432.817922] RIP: 0010:kfree+0x11a/0x230 [ 432.821902] Code: 1f 44 00 00 e8 a7 c9 c2 ff 5b 41 5c 41 5d 41 5e 5d c3 e8 89 c6 c2 ff 48 83 3d 49 d4 6f 07 00 0f 84 0a 01 00 00 4c 89 e7 57 9d <0f> 1f 44 00 00 5b 41 5c 41 5d 41 5e 5d c3 4c 89 f2 48 89 de 4c 89 [ 432.840812] RSP: 0018:ffff8801b9f47858 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 432.848531] RAX: 0000000000000000 RBX: ffff88018447a580 RCX: 1ffff100308279b4 [ 432.855804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000286 [ 432.863077] RBP: ffff8801b9f47878 R08: ffff88018413cda0 R09: 0000000000000007 [ 432.870356] R10: 0000000000000000 R11: ffff88018413c500 R12: 0000000000000286 [ 432.877629] R13: ffff8801da8007c0 R14: ffffffff81dd63fb R15: 0000000000000000 [ 432.884914] ? iter_file_splice_write+0x7ab/0x1050 [ 432.889872] iter_file_splice_write+0x7ab/0x1050 [ 432.894650] ? page_cache_pipe_buf_steal+0x860/0x860 [ 432.899782] ? rw_verify_area+0x118/0x360 [ 432.903935] ? page_cache_pipe_buf_steal+0x860/0x860 [ 432.909047] direct_splice_actor+0x128/0x190 [ 432.913470] splice_direct_to_actor+0x318/0x8f0 [ 432.918151] ? pipe_to_sendpage+0x400/0x400 [ 432.922486] ? do_splice_to+0x190/0x190 [ 432.926467] ? security_file_permission+0x1c2/0x230 [ 432.931524] ? rw_verify_area+0x118/0x360 [ 432.935681] do_splice_direct+0x2d4/0x420 [ 432.939839] ? splice_direct_to_actor+0x8f0/0x8f0 [ 432.944694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.950238] ? __sb_start_write+0x1b2/0x370 [ 432.954574] do_sendfile+0x62a/0xe20 [ 432.958306] ? do_compat_pwritev64+0x1c0/0x1c0 [ 432.962914] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.968457] ? _copy_from_user+0xdf/0x150 [ 432.972614] __x64_sys_sendfile64+0x15d/0x250 [ 432.977132] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 432.981734] do_syscall_64+0x1b9/0x820 [ 432.985628] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 432.991003] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.995939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.000795] ? trace_hardirqs_on_caller+0x310/0x310 [ 433.005825] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 433.010852] ? prepare_exit_to_usermode+0x291/0x3b0 [ 433.015881] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.020737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.025934] RIP: 0033:0x457569 [ 433.029139] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.048047] RSP: 002b:00007fb98ce41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 433.055780] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 433.063052] RDX: 00000000200001c0 RSI: 0000000000000005 RDI: 0000000000000005 [ 433.070328] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 433.077608] R10: 7fffffffffffffff R11: 0000000000000246 R12: 00007fb98ce426d4 [ 433.084881] R13: 00000000004c34d0 R14: 00000000004d5298 R15: 00000000ffffffff