[ 46.016749][ T27] audit: type=1800 audit(1581325235.827:21): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2452 res=0 [ 46.060350][ T27] audit: type=1800 audit(1581325235.827:22): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 47.381034][ T7830] sshd (7830) used greatest stack depth: 10136 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.144' (ECDSA) to the list of known hosts. 2020/02/10 09:00:45 fuzzer started 2020/02/10 09:00:47 dialing manager at 10.128.0.105:36345 2020/02/10 09:00:47 syscalls: 2904 2020/02/10 09:00:47 code coverage: enabled 2020/02/10 09:00:47 comparison tracing: enabled 2020/02/10 09:00:47 extra coverage: enabled 2020/02/10 09:00:47 setuid sandbox: enabled 2020/02/10 09:00:47 namespace sandbox: enabled 2020/02/10 09:00:47 Android sandbox: /sys/fs/selinux/policy does not exist 2020/02/10 09:00:47 fault injection: enabled 2020/02/10 09:00:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/02/10 09:00:47 net packet injection: enabled 2020/02/10 09:00:47 net device setup: enabled 2020/02/10 09:00:47 concurrency sanitizer: enabled 2020/02/10 09:00:47 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 59.852572][ T7918] KCSAN: could not find function: 'poll_schedule_timeout' 2020/02/10 09:00:56 adding functions to KCSAN blacklist: 'do_syslog' 'ext4_free_inodes_count' '__rb_rotate_set_parents' 'futex_wait_queue_me' 'tick_do_update_jiffies64' 'n_tty_receive_buf_common' 'add_timer_on' '__find_get_block' 'tomoyo_supervisor' 'generic_fillattr' '__rb_insert_augmented' 'poll_schedule_timeout' '__snd_rawmidi_transmit_ack' 'blk_mq_run_hw_queue' 'snd_seq_prioq_cell_out' 'ext4_free_inode' 'xas_clear_mark' 'audit_log_start' 'add_timer' 'blk_mq_get_request' 'run_timer_softirq' 'taskstats_exit' 'ext4_writepages' 'ep_poll' 'ext4_da_write_end' 'atime_needs_update' 'kcm_rfree' 'ext4_mb_good_group' '__filemap_fdatawrite_range' 'do_nanosleep' '__delete_from_page_cache' 'copy_process' 'kauditd_thread' '__mark_inode_dirty' '__add_to_page_cache_locked' 'do_exit' 'filemap_map_pages' 'pcpu_alloc' 'blk_mq_dispatch_rq_list' 'find_get_pages_range_tag' '__ext4_new_inode' 'ktime_get_real_seconds' 'vm_area_dup' 'generic_write_end' 'tick_sched_do_timer' 'ext4_nonda_switch' 'echo_char' 'padata_find_next' 'ext4_set_iomap' 'tick_nohz_idle_stop_tick' 'ext4_has_free_clusters' 'mod_timer' 'dd_has_work' 'blk_mq_sched_dispatch_requests' 'inode_sync_complete' 'wbt_done' 'xas_find_marked' '__process_echoes' 'wbt_wait' 'sit_tunnel_xmit' 'wbt_issue' 'kvm_mmu_notifier_invalidate_range_end' 'ext4_mark_iloc_dirty' 'lruvec_lru_size' 09:04:15 executing program 0: 09:04:15 executing program 1: [ 266.155274][ T7921] IPVS: ftp: loaded support on port[0] = 21 [ 266.275251][ T7921] chnl_net:caif_netlink_parms(): no params data found 09:04:16 executing program 2: [ 266.356056][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.363243][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.371374][ T7921] device bridge_slave_0 entered promiscuous mode [ 266.378835][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.386328][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.394426][ T7921] device bridge_slave_1 entered promiscuous mode [ 266.415149][ T7921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.425490][ T7921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.430451][ T7925] IPVS: ftp: loaded support on port[0] = 21 [ 266.443854][ T7921] team0: Port device team_slave_0 added [ 266.450837][ T7921] team0: Port device team_slave_1 added [ 266.466612][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.473633][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.500645][ T7921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.514489][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.521809][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.548637][ T7921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.652206][ T7921] device hsr_slave_0 entered promiscuous mode 09:04:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 266.701153][ T7921] device hsr_slave_1 entered promiscuous mode [ 266.750056][ T7928] IPVS: ftp: loaded support on port[0] = 21 [ 266.873136][ T7925] chnl_net:caif_netlink_parms(): no params data found [ 266.929587][ T7931] IPVS: ftp: loaded support on port[0] = 21 [ 266.964681][ T7921] netdevsim netdevsim0 netdevsim0: renamed from eth0 09:04:16 executing program 4: r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") getsockopt(r0, 0x114, 0x5, &(0x7f0000af0fe7)=""/13, &(0x7f00000000c0)=0x2f4) [ 267.042335][ T7921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.117478][ T7921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.182661][ T7921] netdevsim netdevsim0 netdevsim3: renamed from eth3 09:04:17 executing program 5: r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") getsockopt(r0, 0x114, 0x2721, 0x0, &(0x7f00000000c0)) [ 267.247362][ T7934] IPVS: ftp: loaded support on port[0] = 21 [ 267.258595][ T7928] chnl_net:caif_netlink_parms(): no params data found [ 267.278237][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.285332][ T7921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.292663][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.299800][ T7921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.329877][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.337938][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.397301][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.404786][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.412583][ T7925] device bridge_slave_0 entered promiscuous mode [ 267.426076][ T7921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.438467][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.447300][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.455279][ T7925] device bridge_slave_1 entered promiscuous mode [ 267.474123][ T7921] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.475880][ T7941] IPVS: ftp: loaded support on port[0] = 21 [ 267.482146][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.494975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.539019][ T7925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.548183][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.555483][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.564936][ T7928] device bridge_slave_0 entered promiscuous mode [ 267.572063][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.582280][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.590970][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.597994][ T7937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.624274][ T7925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.634162][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.641430][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.649409][ T7928] device bridge_slave_1 entered promiscuous mode [ 267.657408][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.666114][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.674715][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.681791][ T7937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.691836][ T7931] chnl_net:caif_netlink_parms(): no params data found [ 267.730691][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.739488][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.772185][ T7925] team0: Port device team_slave_0 added [ 267.783332][ T7928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.797594][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.806009][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.814776][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.823426][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.832395][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.848540][ T7925] team0: Port device team_slave_1 added [ 267.856297][ T7928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.869785][ T7934] chnl_net:caif_netlink_parms(): no params data found [ 267.881930][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.890236][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.916989][ T7928] team0: Port device team_slave_0 added [ 267.927912][ T7941] chnl_net:caif_netlink_parms(): no params data found [ 267.945150][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.952405][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.978785][ T7925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.990423][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.998878][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.010033][ T7928] team0: Port device team_slave_1 added [ 268.027529][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.034524][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.060446][ T7925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.072125][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.088447][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.097842][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.105602][ T7931] device bridge_slave_0 entered promiscuous mode [ 268.115607][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.123262][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.133212][ T7931] device bridge_slave_1 entered promiscuous mode [ 268.145739][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.154838][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.180984][ T7928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.192923][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.200021][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.225954][ T7928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.312386][ T7928] device hsr_slave_0 entered promiscuous mode [ 268.350752][ T7928] device hsr_slave_1 entered promiscuous mode [ 268.390660][ T7928] debugfs: Directory 'hsr0' with parent '/' already present! [ 268.407239][ T7931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.430619][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.438140][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.454610][ T7931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.476117][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.483432][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.491313][ T7934] device bridge_slave_0 entered promiscuous mode [ 268.502906][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.509961][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.517936][ T7934] device bridge_slave_1 entered promiscuous mode [ 268.572405][ T7925] device hsr_slave_0 entered promiscuous mode [ 268.630707][ T7925] device hsr_slave_1 entered promiscuous mode [ 268.670433][ T7925] debugfs: Directory 'hsr0' with parent '/' already present! [ 268.689137][ T7921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.705161][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.712371][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.722552][ T7941] device bridge_slave_0 entered promiscuous mode [ 268.747733][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.754858][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.762820][ T7941] device bridge_slave_1 entered promiscuous mode [ 268.774963][ T7931] team0: Port device team_slave_0 added [ 268.789263][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.803742][ T7931] team0: Port device team_slave_1 added [ 268.811367][ T7941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.829759][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.854733][ T7941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.878108][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.886849][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.914883][ T7928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.972805][ T7941] team0: Port device team_slave_0 added [ 268.979819][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.987483][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.013748][ T7931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.029392][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.036435][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.063154][ T7931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.076585][ T7921] device veth0_vlan entered promiscuous mode [ 269.083724][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.093239][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.102215][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.110149][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.118211][ T7928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.183772][ T7928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.222937][ T7941] team0: Port device team_slave_1 added [ 269.228650][ T7928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.273406][ T7934] team0: Port device team_slave_0 added [ 269.281132][ T7934] team0: Port device team_slave_1 added [ 269.298723][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.305946][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.333835][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.354024][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.361123][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.387584][ T7941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.400068][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.407167][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.433364][ T7941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.455869][ T7921] device veth1_vlan entered promiscuous mode [ 269.463132][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.470096][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.496402][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.516484][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.572905][ T7934] device hsr_slave_0 entered promiscuous mode [ 269.630714][ T7934] device hsr_slave_1 entered promiscuous mode [ 269.700409][ T7934] debugfs: Directory 'hsr0' with parent '/' already present! [ 269.752517][ T7931] device hsr_slave_0 entered promiscuous mode [ 269.790702][ T7931] device hsr_slave_1 entered promiscuous mode [ 269.830436][ T7931] debugfs: Directory 'hsr0' with parent '/' already present! [ 269.902880][ T7941] device hsr_slave_0 entered promiscuous mode [ 269.960676][ T7941] device hsr_slave_1 entered promiscuous mode [ 270.020434][ T7941] debugfs: Directory 'hsr0' with parent '/' already present! [ 270.055328][ T7921] device veth0_macvtap entered promiscuous mode [ 270.082132][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.094303][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.104179][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.112334][ T7925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.143079][ T7925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.182322][ T7925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.213449][ T7925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.261861][ T7921] device veth1_macvtap entered promiscuous mode [ 270.339522][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.356924][ T7941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 270.412465][ T7934] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.473118][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.481366][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.490160][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.503531][ T7921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.514763][ T7941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 270.572512][ T7934] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.653663][ T7934] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.712597][ T7934] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.753018][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.762555][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.782192][ T7941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 270.842276][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.853768][ T7931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.892509][ T7931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.911982][ T7941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 270.960175][ T7928] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.973479][ T7931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.002792][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.010823][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.018524][ T7931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.083751][ T7925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.112014][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.121827][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.130242][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.137327][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.145931][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.154562][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.163238][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.170396][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.178345][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.187462][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.196428][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.208557][ T7925] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.223702][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.231587][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.247149][ T7928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.258551][ T7928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.282448][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.291628][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.300222][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.309020][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.317628][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.326143][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.334889][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.343332][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.351815][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.359755][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.399249][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.408061][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.417208][ T2899] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.424404][ T2899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.447419][ T7931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.463704][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.475126][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.484283][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.498814][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.505925][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.517209][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.526239][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.535416][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.544130][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.562521][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.578237][ T7931] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.585725][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 09:04:21 executing program 0: write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xfffffffffffffecf) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) mkdir(0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) setgroups(0x0, &(0x7f0000000200)) syz_open_dev$mice(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) timerfd_create(0x9, 0xc00) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000002c0)=""/4096) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x870c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) write$binfmt_elf32(r0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x414) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4490, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="3e66470f3a44acba0f00000068c40109fd24a40f01d8b9800000c00f3235008000000f30c4c2b5993502000000c403dd4455045a36410fc7bd9900000066ba420066b88ce066ef3666430fc77309b8010000000f01c1"}], 0xaaaaaaaaaaaa9b2, 0x51, 0x0, 0xfffffffffffffeee) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ff) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000280)={0x0, 0x400, 0x3, {0x0, @sliced={0x5, [0x7, 0x0, 0x0, 0xffab, 0xfeff, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x4, 0x0, 0x2, 0x7, 0x4, 0x0, 0x4, 0x100, 0x7ff, 0x400, 0x7ee6, 0x0, 0x0, 0x0, 0x6, 0x5fd, 0x4, 0x8, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x6, 0x80, 0x0, 0x8, 0x3f, 0x2, 0x3ff, 0x40, 0x6, 0xffff, 0x1]}}}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) unshare(0x40000000) [ 271.594444][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.616700][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.627062][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.634856][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.642624][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.662062][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.680907][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.689386][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.698074][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.706250][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.715248][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.727284][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.742488][ T7969] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 271.746798][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.777683][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.785945][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.794286][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.808991][ C1] hrtimer: interrupt took 26036 ns [ 271.831616][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.844494][ T7969] IPVS: ftp: loaded support on port[0] = 21 [ 271.848111][ T7925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.865504][ T7941] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.888400][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.898527][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.906194][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.914363][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.922064][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.930579][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.938932][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.946020][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.954101][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.962855][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.971283][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.978318][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.986271][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.002442][ T7934] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.049259][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.057759][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.066994][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.075930][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.083192][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.091666][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.100243][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.109019][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.116116][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.124150][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.133324][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.142013][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.150907][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.159601][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.168626][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.177406][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.186111][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.195354][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.204382][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.212489][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.226857][ T7928] device veth0_vlan entered promiscuous mode [ 272.238312][ T7928] device veth1_vlan entered promiscuous mode [ 272.269727][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.278046][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.287220][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.295195][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.303870][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.312541][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.319571][ T7937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.327546][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.336291][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.344930][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.352909][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.361168][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.369304][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.384719][ T7941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.395638][ T7941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.477028][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.488437][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.498542][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.509856][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.516971][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.528002][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.536898][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.547894][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.556473][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.565290][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.573755][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.583656][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.591580][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.600099][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.629438][ T7941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.653383][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.667189][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.675927][ T7976] IPVS: ftp: loaded support on port[0] = 21 [ 272.684845][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.693625][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.704377][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.712783][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.721730][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.729905][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.738716][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.747502][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.755913][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.763589][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.771249][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.780053][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.788823][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.797102][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.807361][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.820531][ T7925] device veth0_vlan entered promiscuous mode [ 272.828604][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.838838][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.847752][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.857944][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.869277][ T7928] device veth0_macvtap entered promiscuous mode [ 272.939167][ T7931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.949449][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.968192][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.977294][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.987064][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.994581][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.004650][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.013969][ T7928] device veth1_macvtap entered promiscuous mode [ 273.026331][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.053223][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.063684][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.072296][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.083212][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.097958][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.111070][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.124398][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.134355][ T7925] device veth1_vlan entered promiscuous mode [ 273.156685][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.172297][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.189833][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.203523][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.216668][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.238028][ T7925] device veth0_macvtap entered promiscuous mode [ 273.254849][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.263884][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.279390][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.288416][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.311868][ T7925] device veth1_macvtap entered promiscuous mode [ 273.329374][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.345039][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.356117][ T7931] device veth0_vlan entered promiscuous mode [ 273.378906][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.390778][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.402003][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 273.412457][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.423548][ T7925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.432949][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.441482][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.449939][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.458875][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.467641][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.476062][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.484985][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.493635][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.502598][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.510676][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.518472][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.526593][ T7938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.541243][ T7941] device veth0_vlan entered promiscuous mode [ 273.548765][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.563083][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.573693][ T7925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 273.586314][ T7925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.597613][ T7925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.610548][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.624747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.633709][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.642870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.655947][ T7931] device veth1_vlan entered promiscuous mode [ 273.667250][ T7941] device veth1_vlan entered promiscuous mode [ 273.733515][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.760098][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.776284][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.784818][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.793347][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.805391][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.819110][ T7941] device veth0_macvtap entered promiscuous mode [ 273.843796][ T7934] device veth0_vlan entered promiscuous mode [ 273.852495][ T7931] device veth0_macvtap entered promiscuous mode [ 273.865170][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.873694][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.882660][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.901430][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.909705][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.920352][ T7941] device veth1_macvtap entered promiscuous mode [ 273.933633][ T7934] device veth1_vlan entered promiscuous mode [ 273.943333][ T7931] device veth1_macvtap entered promiscuous mode [ 273.956358][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.970937][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.978965][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.004511][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.018130][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.028658][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.041871][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.052553][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.065072][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.077311][ T7941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.089839][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.103478][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.143284][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 09:04:23 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0xc30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000140)=0x1) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r9 = syz_open_dev$dri(0x0, 0x0, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7, 0x2000) syz_open_dev$dri(0x0, 0x0, 0x0) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x400200, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000040)={0xa924, 0x2, 0x1, r12}) r14 = dup(r13) ioctl$DMA_BUF_IOCTL_SYNC(r14, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r14}) r15 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r16 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r16, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r18 = dup(r17) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r15, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r18}) r19 = syz_open_dev$dri(0x0, 0x0, 0x0) r20 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r22 = dup(r21) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r19, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r22}) r23 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r23, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000400), 0x4800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r23, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="14a30000", @ANYRES64, @ANYBLOB="010a00000006000000001ff82d0cd7c0e333ed3744f67ef3bf603a639b8419ae25f4fa37f11bb6e7f7c1064c4eb1f822b785ae3a8712fd53e1f105d11aa97ebf7427875dba952571720b48b00d5f4e924039b5c917760cf98b7809073c74c981a32644f3a5bf2da31e9b397383c56c10890e959b4c2cb4e27da52ff4a3bdca579e41526863239bb0445fa88f4f30e2e4070a8be4dcc990194f86bfe681273b87a876172c08803c389c81f89b733c9ef31be66286a0516dcd759f701d36"], 0x3}}, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 274.168064][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.178521][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.210385][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.220352][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.231397][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.242382][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.271015][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.279710][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.296301][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.311868][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.320836][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.329290][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.339329][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.351395][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 09:04:24 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0x8) prctl$PR_SET_PTRACER(0x59616d61, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0xc30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000140)=0x1) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) r9 = syz_open_dev$dri(0x0, 0x0, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b}) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7, 0x2000) syz_open_dev$dri(0x0, 0x0, 0x0) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x400200, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000040)={0xa924, 0x2, 0x1, r12}) r14 = dup(r13) ioctl$DMA_BUF_IOCTL_SYNC(r14, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r14}) r15 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r16 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r16, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r18 = dup(r17) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r15, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r18}) r19 = syz_open_dev$dri(0x0, 0x0, 0x0) r20 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r22 = dup(r21) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r19, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r22}) r23 = dup(0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r23, 0x40086200, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000400), 0x4800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r23, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="14a30000", @ANYRES64, @ANYBLOB="010a00000006000000001ff82d0cd7c0e333ed3744f67ef3bf603a639b8419ae25f4fa37f11bb6e7f7c1064c4eb1f822b785ae3a8712fd53e1f105d11aa97ebf7427875dba952571720b48b00d5f4e924039b5c917760cf98b7809073c74c981a32644f3a5bf2da31e9b397383c56c10890e959b4c2cb4e27da52ff4a3bdca579e41526863239bb0445fa88f4f30e2e4070a8be4dcc990194f86bfe681273b87a876172c08803c389c81f89b733c9ef31be66286a0516dcd759f701d36"], 0x3}}, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 274.361466][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.378813][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.397405][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.414702][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.426322][ T7941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.449133][ T7934] device veth0_macvtap entered promiscuous mode [ 274.459704][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.487777][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.507938][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.520250][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.532843][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.543314][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.556203][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.566779][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 09:04:24 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x24a00) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x7, "ab84fb26e4deb8e6"}) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cbd428f70c137fc5108ba00eeaf0fb20155780fec667b180a3b6a67621af10055ea66e99b6abf0a07122e4e4f00ba49e52ef3a568881cca60dff", @ANYRES16=r5, @ANYBLOB="010a00000006000000001ff82d0cd7c0e333ed3744f67ef3bf603a639b8419ae25f4fa37f11bb6e7f7c1064c4eb1f822b785ae3a8712fd53e1f105d11aa97ebf7427875dba952571720b48b00d5f4e924039b5c917760cf98b7809073c74c981a32644f3a5bf2da31e9b397383c56c10890e959b4c2cb4e27da52ff4a3bdca579e41526863239bb0445fa88f4f30e2e4070a8be4dcc990194f86bfe681273b87a876172c08803c389c81f89b733c9ef31be66286a0516dcd759f701d36"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x40) sendto$inet6(r1, 0x0, 0x0, 0x20000014, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) getpid() sched_setscheduler(0x0, 0x0, 0x0) r7 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000040)={0x6, 0xc0000000, 0x0, 0x68, 0x1b, "50fabdb0535453c07151824198abec112cbbfe"}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x23f) sendto$inet6(r6, &(0x7f0000000180)="0503040006003e0000004000c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8}, 0x2c) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) [ 274.584082][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.592976][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.619097][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.636238][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.645649][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.655330][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.667330][ T7934] device veth1_macvtap entered promiscuous mode [ 274.730466][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 274.736269][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 274.745156][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.756632][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.767674][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.778996][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.788988][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.799710][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.809962][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.820696][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.830664][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 274.841325][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.852631][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.865145][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.876648][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.885272][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.946854][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.967137][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.984074][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 274.994809][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.004898][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.015723][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.026268][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.036841][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.046860][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 275.057321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 275.057345][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 275.068908][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.079978][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.096996][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.106213][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:04:25 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x24a00) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x7, "ab84fb26e4deb8e6"}) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cbd428f70c137fc5108ba00eeaf0fb20155780fec667b180a3b6a67621af10055ea66e99b6abf0a07122e4e4f00ba49e52ef3a568881cca60dff", @ANYRES16=r5, @ANYBLOB="010a00000006000000001ff82d0cd7c0e333ed3744f67ef3bf603a639b8419ae25f4fa37f11bb6e7f7c1064c4eb1f822b785ae3a8712fd53e1f105d11aa97ebf7427875dba952571720b48b00d5f4e924039b5c917760cf98b7809073c74c981a32644f3a5bf2da31e9b397383c56c10890e959b4c2cb4e27da52ff4a3bdca579e41526863239bb0445fa88f4f30e2e4070a8be4dcc990194f86bfe681273b87a876172c08803c389c81f89b733c9ef31be66286a0516dcd759f701d36"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x40) sendto$inet6(r1, 0x0, 0x0, 0x20000014, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) getpid() sched_setscheduler(0x0, 0x0, 0x0) r7 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000040)={0x6, 0xc0000000, 0x0, 0x68, 0x1b, "50fabdb0535453c07151824198abec112cbbfe"}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x23f) sendto$inet6(r6, &(0x7f0000000180)="0503040006003e0000004000c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8}, 0x2c) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 09:04:25 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x24a00) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x7, "ab84fb26e4deb8e6"}) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cbd428f70c137fc5108ba00eeaf0fb20155780fec667b180a3b6a67621af10055ea66e99b6abf0a07122e4e4f00ba49e52ef3a568881cca60dff", @ANYRES16=r5, @ANYBLOB="010a00000006000000001ff82d0cd7c0e333ed3744f67ef3bf603a639b8419ae25f4fa37f11bb6e7f7c1064c4eb1f822b785ae3a8712fd53e1f105d11aa97ebf7427875dba952571720b48b00d5f4e924039b5c917760cf98b7809073c74c981a32644f3a5bf2da31e9b397383c56c10890e959b4c2cb4e27da52ff4a3bdca579e41526863239bb0445fa88f4f30e2e4070a8be4dcc990194f86bfe681273b87a876172c08803c389c81f89b733c9ef31be66286a0516dcd759f701d36"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x40) sendto$inet6(r1, 0x0, 0x0, 0x20000014, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) getpid() sched_setscheduler(0x0, 0x0, 0x0) r7 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000040)={0x6, 0xc0000000, 0x0, 0x68, 0x1b, "50fabdb0535453c07151824198abec112cbbfe"}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x23f) sendto$inet6(r6, &(0x7f0000000180)="0503040006003e0000004000c52cf7c25975e605b02f86ddeb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe257c3314", 0x202, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8}, 0x2c) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 09:04:25 executing program 0: write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xfffffffffffffecf) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) mkdir(0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) setgroups(0x0, &(0x7f0000000200)) syz_open_dev$mice(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) timerfd_create(0x9, 0xc00) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000002c0)=""/4096) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x870c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) write$binfmt_elf32(r0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x414) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4490, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="3e66470f3a44acba0f00000068c40109fd24a40f01d8b9800000c00f3235008000000f30c4c2b5993502000000c403dd4455045a36410fc7bd9900000066ba420066b88ce066ef3666430fc77309b8010000000f01c1"}], 0xaaaaaaaaaaaa9b2, 0x51, 0x0, 0xfffffffffffffeee) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ff) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000280)={0x0, 0x400, 0x3, {0x0, @sliced={0x5, [0x7, 0x0, 0x0, 0xffab, 0xfeff, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x4, 0x0, 0x2, 0x7, 0x4, 0x0, 0x4, 0x100, 0x7ff, 0x400, 0x7ee6, 0x0, 0x0, 0x0, 0x6, 0x5fd, 0x4, 0x8, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x6, 0x80, 0x0, 0x8, 0x3f, 0x2, 0x3ff, 0x40, 0x6, 0xffff, 0x1]}}}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) unshare(0x40000000) 09:04:25 executing program 5: write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xfffffffffffffecf) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) mkdir(0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) setgroups(0x0, &(0x7f0000000200)) syz_open_dev$mice(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a4, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) timerfd_create(0x9, 0xc00) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000002c0)=""/4096) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x870c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) write$binfmt_elf32(r0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x414) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4490, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="3e66470f3a44acba0f00000068c40109fd24a40f01d8b9800000c00f3235008000000f30c4c2b5993502000000c403dd4455045a36410fc7bd9900000066ba420066b88ce066ef3666430fc77309b8010000000f01c1"}], 0xaaaaaaaaaaaa9b2, 0x51, 0x0, 0xfffffffffffffeee) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2ff) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000280)={0x0, 0x400, 0x3, {0x0, @sliced={0x5, [0x7, 0x0, 0x0, 0xffab, 0xfeff, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x4, 0x0, 0x2, 0x7, 0x4, 0x0, 0x4, 0x100, 0x7ff, 0x400, 0x7ee6, 0x0, 0x0, 0x0, 0x6, 0x5fd, 0x4, 0x8, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x6, 0x80, 0x0, 0x8, 0x3f, 0x2, 0x3ff, 0x40, 0x6, 0xffff, 0x1]}}}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) unshare(0x40000000) 09:04:25 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'veth0_to_batadv\x00', {0x1a4}, 0xfff}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r2 = getpid() perf_event_open(0x0, r2, 0x2, 0xffffffffffffffff, 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r3, 0x0, 0x68000000) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x2}, 0x10) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x1) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 09:04:25 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x680, 0x0) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback, 0x988aa0f}, 0x1b) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54020000005d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x100) accept$alg(r3, 0x0, 0x0) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="ebfd7fe58d2e31ef4564098a819b5919fd9bd09c856bcfd606859b96feecc87aa309dda5a8d83d1ab9244eac1814ced83e89b093455814df276aa03031db3b597a3603e36e70", 0x46, 0x40, &(0x7f0000000000)={0xa, 0x4e24, 0x1d386211, @empty, 0x2}, 0x1c) shutdown(r0, 0x1) [ 275.905510][ T8108] IPVS: ftp: loaded support on port[0] = 21 09:04:25 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 275.986296][ T8101] IPVS: ftp: loaded support on port[0] = 21 09:04:25 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 276.038097][ T8115] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 276.058657][ T8112] IPVS: ftp: loaded support on port[0] = 21 09:04:26 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:26 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mkdir(0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200b40, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x800, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x0, 0x4000, 0x10000}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2f0000763007f2ff003000af874ca965c2626374b3933691143f6c40e29507449b404d620fc9aa17fe18f841a0192b5a591f06000000498ea5562d5fac30db823ab2b7e65d060c5b2e2556ae0b"], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 09:04:26 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x428000, 0x90) fcntl$setlease(r2, 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, 0x0) fcntl$getflags(r2, 0x401) accept4$tipc(r2, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x800) geteuid() fcntl$getownex(r0, 0x10, &(0x7f0000000780)) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000c00)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000280)=""/121, 0x200002f9) fsmount(0xffffffffffffffff, 0x1, 0x0) getresgid(&(0x7f0000001600), &(0x7f0000000200), &(0x7f0000001680)) getresuid(&(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) getgid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="e8f86e1af11497312841016d41c89777b65ae5847766fccd7973f708824774125264279087d04a07ed00e0d46c499fa10c", 0x31}], 0x1, 0x0, 0x0, 0x48810}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) shmctl$SHM_LOCK(0x0, 0xb) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x100) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000080)={0x200, 0x0, &(0x7f0000000400)="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"}) 09:04:26 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 276.690251][ T8135] IPVS: ftp: loaded support on port[0] = 21 [ 277.000868][ T21] tipc: TX() has been purged, node left! 09:04:27 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mkdir(0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200b40, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x800, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x0, 0x4000, 0x10000}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2f0000763007f2ff003000af874ca965c2626374b3933691143f6c40e29507449b404d620fc9aa17fe18f841a0192b5a591f06000000498ea5562d5fac30db823ab2b7e65d060c5b2e2556ae0b"], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 09:04:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$uhid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uhid\x00', 0x94833c56cb196f41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0585ffd43a901d9286cbc3253787e1fb4f0a7defdc675c4ae6cc78ac700aea550846a250db510160108f87d1a012d843c40c5e53e966d82b"], 0xda00) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0xffffffca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0xff}, 0x4000, 0x5, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) openat$cgroup_type(r4, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12) recvmsg$kcm(r0, &(0x7f0000005cc0)={&(0x7f00000059c0)=@hci, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005b80)=""/60, 0x3c}, {&(0x7f0000005bc0)=""/9, 0x9}], 0x2}, 0x2000) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x7, 0x6, 0x81, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x101}, 0x10000, 0x10000, 0x132b, 0x7, 0x0, 0x1, 0x63f}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000480)={{0x77359400}, {r5, r6/1000+30000}}, &(0x7f00000004c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000300)={0x2, 0x1729104e96665bb9, {0x2, 0x1, 0x7fffffff, 0x3, 0xffffffff}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x3c00, 0x43400) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000380)=""/95, &(0x7f0000000100)=0x5f) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r10, 0x0, r9, 0x0, 0x1000000008, 0x3) r11 = accept(0xffffffffffffffff, &(0x7f0000000540)=@nfc, &(0x7f00000005c0)=0x80) r12 = open(0x0, 0x0, 0x0) fchdir(r12) ppoll(&(0x7f0000000600)=[{r9, 0x1000}, {r11, 0x8103}, {r2, 0x9002}, {r12, 0xc26b9ccfc8674c83}, {r3, 0x8112}], 0x5, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680), 0x8) 09:04:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x428000, 0x90) fcntl$setlease(r2, 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, 0x0) fcntl$getflags(r2, 0x401) accept4$tipc(r2, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x800) geteuid() fcntl$getownex(r0, 0x10, &(0x7f0000000780)) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000c00)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000280)=""/121, 0x200002f9) fsmount(0xffffffffffffffff, 0x1, 0x0) getresgid(&(0x7f0000001600), &(0x7f0000000200), &(0x7f0000001680)) getresuid(&(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) getgid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="e8f86e1af11497312841016d41c89777b65ae5847766fccd7973f708824774125264279087d04a07ed00e0d46c499fa10c", 0x31}], 0x1, 0x0, 0x0, 0x48810}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) shmctl$SHM_LOCK(0x0, 0xb) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x100) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000080)={0x200, 0x0, &(0x7f0000000400)="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"}) 09:04:27 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0xb) mkdir(0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200b40, 0x0) accept4$alg(r1, 0x0, 0x0, 0x80000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x800, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r3, 0x0, 0x4000, 0x10000}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2f0000763007f2ff003000af874ca965c2626374b3933691143f6c40e29507449b404d620fc9aa17fe18f841a0192b5a591f06000000498ea5562d5fac30db823ab2b7e65d060c5b2e2556ae0b"], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 09:04:27 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) 09:04:27 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'veth0_to_batadv\x00', {0x1a4}, 0xfff}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r2 = getpid() perf_event_open(0x0, r2, 0x2, 0xffffffffffffffff, 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r3, 0x0, 0x68000000) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x2}, 0x10) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x1) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 277.935686][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 277.935709][ T27] audit: type=1804 audit(1581325467.747:31): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/2/memory.events" dev="sda1" ino=16549 res=1 09:04:27 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) [ 278.025787][ T8161] IPVS: ftp: loaded support on port[0] = 21 09:04:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x428000, 0x90) fcntl$setlease(r2, 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, 0x0) fcntl$getflags(r2, 0x401) accept4$tipc(r2, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x800) geteuid() fcntl$getownex(r0, 0x10, &(0x7f0000000780)) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000c00)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000280)=""/121, 0x200002f9) fsmount(0xffffffffffffffff, 0x1, 0x0) getresgid(&(0x7f0000001600), &(0x7f0000000200), &(0x7f0000001680)) getresuid(&(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) getgid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="e8f86e1af11497312841016d41c89777b65ae5847766fccd7973f708824774125264279087d04a07ed00e0d46c499fa10c", 0x31}], 0x1, 0x0, 0x0, 0x48810}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) shmctl$SHM_LOCK(0x0, 0xb) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x100) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000080)={0x200, 0x0, &(0x7f0000000400)="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"}) [ 278.180151][ T27] audit: type=1804 audit(1581325467.907:32): pid=8164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/2/memory.events" dev="sda1" ino=16549 res=1 09:04:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$uhid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uhid\x00', 0x94833c56cb196f41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0585ffd43a901d9286cbc3253787e1fb4f0a7defdc675c4ae6cc78ac700aea550846a250db510160108f87d1a012d843c40c5e53e966d82b"], 0xda00) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0xffffffca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0xff}, 0x4000, 0x5, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) openat$cgroup_type(r4, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12) recvmsg$kcm(r0, &(0x7f0000005cc0)={&(0x7f00000059c0)=@hci, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005b80)=""/60, 0x3c}, {&(0x7f0000005bc0)=""/9, 0x9}], 0x2}, 0x2000) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x7, 0x6, 0x81, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x101}, 0x10000, 0x10000, 0x132b, 0x7, 0x0, 0x1, 0x63f}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000480)={{0x77359400}, {r5, r6/1000+30000}}, &(0x7f00000004c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000300)={0x2, 0x1729104e96665bb9, {0x2, 0x1, 0x7fffffff, 0x3, 0xffffffff}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x3c00, 0x43400) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000380)=""/95, &(0x7f0000000100)=0x5f) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r10, 0x0, r9, 0x0, 0x1000000008, 0x3) r11 = accept(0xffffffffffffffff, &(0x7f0000000540)=@nfc, &(0x7f00000005c0)=0x80) r12 = open(0x0, 0x0, 0x0) fchdir(r12) ppoll(&(0x7f0000000600)=[{r9, 0x1000}, {r11, 0x8103}, {r2, 0x9002}, {r12, 0xc26b9ccfc8674c83}, {r3, 0x8112}], 0x5, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680), 0x8) [ 278.322914][ T27] audit: type=1804 audit(1581325467.907:33): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/2/memory.events" dev="sda1" ino=16549 res=1 09:04:28 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) 09:04:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$uhid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uhid\x00', 0x94833c56cb196f41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0585ffd43a901d9286cbc3253787e1fb4f0a7defdc675c4ae6cc78ac700aea550846a250db510160108f87d1a012d843c40c5e53e966d82b"], 0xda00) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0xffffffca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0xff}, 0x4000, 0x5, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) openat$cgroup_type(r4, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12) recvmsg$kcm(r0, &(0x7f0000005cc0)={&(0x7f00000059c0)=@hci, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005b80)=""/60, 0x3c}, {&(0x7f0000005bc0)=""/9, 0x9}], 0x2}, 0x2000) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x7, 0x6, 0x81, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x101}, 0x10000, 0x10000, 0x132b, 0x7, 0x0, 0x1, 0x63f}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000480)={{0x77359400}, {r5, r6/1000+30000}}, &(0x7f00000004c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000300)={0x2, 0x1729104e96665bb9, {0x2, 0x1, 0x7fffffff, 0x3, 0xffffffff}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x3c00, 0x43400) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000380)=""/95, &(0x7f0000000100)=0x5f) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r10, 0x0, r9, 0x0, 0x1000000008, 0x3) r11 = accept(0xffffffffffffffff, &(0x7f0000000540)=@nfc, &(0x7f00000005c0)=0x80) r12 = open(0x0, 0x0, 0x0) fchdir(r12) ppoll(&(0x7f0000000600)=[{r9, 0x1000}, {r11, 0x8103}, {r2, 0x9002}, {r12, 0xc26b9ccfc8674c83}, {r3, 0x8112}], 0x5, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680), 0x8) 09:04:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$uhid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uhid\x00', 0x94833c56cb196f41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0585ffd43a901d9286cbc3253787e1fb4f0a7defdc675c4ae6cc78ac700aea550846a250db510160108f87d1a012d843c40c5e53e966d82b"], 0xda00) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0xffffffca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0xff}, 0x4000, 0x5, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) openat$cgroup_type(r4, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12) recvmsg$kcm(r0, &(0x7f0000005cc0)={&(0x7f00000059c0)=@hci, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005b80)=""/60, 0x3c}, {&(0x7f0000005bc0)=""/9, 0x9}], 0x2}, 0x2000) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x7, 0x6, 0x81, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x101}, 0x10000, 0x10000, 0x132b, 0x7, 0x0, 0x1, 0x63f}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000480)={{0x77359400}, {r5, r6/1000+30000}}, &(0x7f00000004c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000300)={0x2, 0x1729104e96665bb9, {0x2, 0x1, 0x7fffffff, 0x3, 0xffffffff}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x3c00, 0x43400) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000380)=""/95, &(0x7f0000000100)=0x5f) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r10, 0x0, r9, 0x0, 0x1000000008, 0x3) r11 = accept(0xffffffffffffffff, &(0x7f0000000540)=@nfc, &(0x7f00000005c0)=0x80) r12 = open(0x0, 0x0, 0x0) fchdir(r12) ppoll(&(0x7f0000000600)=[{r9, 0x1000}, {r11, 0x8103}, {r2, 0x9002}, {r12, 0xc26b9ccfc8674c83}, {r3, 0x8112}], 0x5, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680), 0x8) [ 278.568324][ T27] audit: type=1804 audit(1581325468.377:34): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/3/memory.events" dev="sda1" ino=16525 res=1 09:04:28 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = dup2(r1, r0) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x100) r6 = dup2(r4, r5) write$FUSE_IOCTL(r6, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34) 09:04:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) 09:04:28 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000000) [ 278.807237][ T27] audit: type=1804 audit(1581325468.617:35): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir240241305/syzkaller.Jo2VA5/5/memory.events" dev="sda1" ino=16533 res=1 09:04:28 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500001000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x5, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x1f, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x9, 0x2}, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x7, 0x9}, &(0x7f0000000300)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x20}}, 0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000400)=""/195) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netlink(r0, &(0x7f0000000640)=@kern={0x10, 0x0, 0x0, 0x220000}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x300, &(0x7f0000000040)="b90103000000f000009e0ff004001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000}, 0x28) [ 278.932627][ T27] audit: type=1804 audit(1581325468.657:36): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir216952310/syzkaller.AD2ycj/10/memory.events" dev="sda1" ino=16567 res=1 [ 279.015544][ T27] audit: type=1800 audit(1581325468.747:37): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16551 res=0 09:04:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x30200, 0x20) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x72}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000013000d040000000000c2030010000000", @ANYRES32=r7, @ANYBLOB="ffff10ff0000000014bd5fd29ce01636715039ef69f7ebe681be1461a7a89a9488301f"], 0x20}}, 0x0) 09:04:28 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000000) 09:04:28 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000000) 09:04:29 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000010b8000000000015d550cd090000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x78) 09:04:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$uhid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uhid\x00', 0x94833c56cb196f41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0585ffd43a901d9286cbc3253787e1fb4f0a7defdc675c4ae6cc78ac700aea550846a250db510160108f87d1a012d843c40c5e53e966d82b"], 0xda00) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0xffffffca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0xff}, 0x4000, 0x5, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) openat$cgroup_type(r4, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12) recvmsg$kcm(r0, &(0x7f0000005cc0)={&(0x7f00000059c0)=@hci, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005b80)=""/60, 0x3c}, {&(0x7f0000005bc0)=""/9, 0x9}], 0x2}, 0x2000) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x7, 0x6, 0x81, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x101}, 0x10000, 0x10000, 0x132b, 0x7, 0x0, 0x1, 0x63f}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000480)={{0x77359400}, {r5, r6/1000+30000}}, &(0x7f00000004c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000300)={0x2, 0x1729104e96665bb9, {0x2, 0x1, 0x7fffffff, 0x3, 0xffffffff}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x3c00, 0x43400) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000380)=""/95, &(0x7f0000000100)=0x5f) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x2) splice(r10, 0x0, r9, 0x0, 0x1000000008, 0x3) r11 = accept(0xffffffffffffffff, &(0x7f0000000540)=@nfc, &(0x7f00000005c0)=0x80) r12 = open(0x0, 0x0, 0x0) fchdir(r12) ppoll(&(0x7f0000000600)=[{r9, 0x1000}, {r11, 0x8103}, {r2, 0x9002}, {r12, 0xc26b9ccfc8674c83}, {r3, 0x8112}], 0x5, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680), 0x8) [ 279.300482][ T8214] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 279.311731][ T8214] device team_slave_0 entered promiscuous mode [ 279.422550][ T8214] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 09:04:29 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000000) 09:04:29 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000000) 09:04:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x0, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x0, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000480)=""/137, &(0x7f0000000540)=0x89) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x224f03, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="2093fcffb1f14593c3cb7db36d7d2c105c8cc83f406c33da0000b10ff2a9fa7163e6c5b448e62b6c145950fc8f0a7b8c5d4d5212747433d5c2951f165e557ee91f092dc3fb8d85daaf17f38221d0115ce51f89703c01493ba559d9412121abab6d7738cc55e836cbcaad16904ef96a37186b1b364fc4c2632103aa393240b90e235197e5da9b92e564d8afec2d293896e4cb46befe4f758e290d1b4236e7061f6012bd693fd0528e05331f21b5a3c99b48087bad8925660be7fefd558fa6234c8eb6"], 0x200000c9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="0af4020057e40000ffb456e3e198f8f1226a270a0f05d1de57bc418af4235c4f13dfe80b214214886887e93f7fe927c48855ad517b277c23c657af7d0d53aa7807c3571a0a61466c40172fc858e1b81c98a5c3e2531110ecf8219db0b1b243bc7671566a6310502096e2bd7bb0153f1942f79dcb2516477b2e7dd6688493ae6725053ead2a5a4d7790bc3763f2b55f0d194ac892abe2c33f66fd04b08f888b79f8cbad4a9668f5031f8e6f81ef40ca6a597b50149c031ad6d2a26cf3e84b78f9281f8599684531d45c7e1cc159b4852b148fd90dab8eeb003e14080bf27a38ea39372ff46325fb33db1f57d3001ad0bea553fc829b9ef8edf6393ef9a070424aa98649573e7d0b6384b086747ed3"], &(0x7f0000000300)=0xc) clock_gettime(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r10, 0x1, 0xabdb}, 0x8) [ 279.548560][ T27] audit: type=1804 audit(1581325469.357:38): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir240241305/syzkaller.Jo2VA5/6/memory.events" dev="sda1" ino=16573 res=1 09:04:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x30200, 0x20) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x72}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000013000d040000000000c2030010000000", @ANYRES32=r7, @ANYBLOB="ffff10ff0000000014bd5fd29ce01636715039ef69f7ebe681be1461a7a89a9488301f"], 0x20}}, 0x0) [ 279.704889][ T8237] IPVS: ftp: loaded support on port[0] = 21 [ 279.741072][ T8244] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 09:04:29 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0}, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x6def7f441c98454f}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e1530978d73e59162f3bcae3b0000000dd38801cf0300"/43], 0x15) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r5 = getpid() ioprio_set$pid(0x1, r5, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fanotify_init(0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)=@in={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000380)={0x0, 0xfffffe4e, &(0x7f0000000100)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xfffffe01}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x82}, @IPSET_ATTR_IP_TO]}]}, 0x58}}, 0x0) fsetxattr$trusted_overlay_opaque(r8, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x1b, r6, 0x0) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 09:04:29 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000000) [ 279.862120][ T8244] device batadv_slave_0 entered promiscuous mode 09:04:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @empty}, 0x8) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="61423a450f0c43fc7a4c3cc90e14142170221217a4ce0149c5e3969d518a52e1273924fa1e426b79284a7aff7c45fb2730a0", 0x32}], 0x1}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089d0}, 0x801) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) [ 279.980746][ T8248] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 09:04:29 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 280.023776][ T8248] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 280.064522][ T8248] FAT-fs (loop5): Filesystem has been set read-only [ 280.135067][ T8248] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 09:04:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x30200, 0x20) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x72}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r8, 0x4, 0x42000) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000013000d040000000000c2030010000000", @ANYRES32=r7, @ANYBLOB="ffff10ff0000000014bd5fd29ce01636715039ef69f7ebe681be1461a7a89a9488301f"], 0x20}}, 0x0) 09:04:30 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0xd93cb94a01fc10ae, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) ftruncate(r3, 0x200004) syncfs(r3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r6, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000000000a004e200000100000000000000000000000ffffac1414bb020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d26e2477e8f49af928ff75bf0005bc8ff352647069e4df6ab3ce6f3f0c35fadb04e33902d"], 0x90) sendfile(r4, r5, 0x0, 0x320f) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r8, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x8) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0xac9, 0x1b, 0x4, 0xe000, 0x3, {0x0, 0x2710}, {0x2, 0x8, 0x80, 0x9, 0x0, 0x5, "62b753b3"}, 0x200000, 0x8, @fd=r8, 0x2, 0x0, 0xffffffffffffffff}) accept4(r9, &(0x7f0000000240)=@generic, &(0x7f0000000140)=0x80, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8541, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r10, 0x400455c8, 0x2) dup2(0xffffffffffffffff, r10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x7ffffffd, 0x8}, 0xc) [ 280.248646][ T8248] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 280.283212][ T8268] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 09:04:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @empty}, 0x8) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="61423a450f0c43fc7a4c3cc90e14142170221217a4ce0149c5e3969d518a52e1273924fa1e426b79284a7aff7c45fb2730a0", 0x32}], 0x1}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089d0}, 0x801) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) [ 280.377360][ T8268] device batadv_slave_1 entered promiscuous mode 09:04:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0}, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x6def7f441c98454f}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e1530978d73e59162f3bcae3b0000000dd38801cf0300"/43], 0x15) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r5 = getpid() ioprio_set$pid(0x1, r5, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fanotify_init(0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)=@in={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000380)={0x0, 0xfffffe4e, &(0x7f0000000100)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xfffffe01}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x82}, @IPSET_ATTR_IP_TO]}]}, 0x58}}, 0x0) fsetxattr$trusted_overlay_opaque(r8, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x1b, r6, 0x0) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 280.853513][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 280.868573][ T8288] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 280.877473][ T8288] FAT-fs (loop5): Filesystem has been set read-only [ 280.879888][ T8237] IPVS: ftp: loaded support on port[0] = 21 [ 280.884631][ T8288] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 09:04:31 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x0, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x0, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000480)=""/137, &(0x7f0000000540)=0x89) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x224f03, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="2093fcffb1f14593c3cb7db36d7d2c105c8cc83f406c33da0000b10ff2a9fa7163e6c5b448e62b6c145950fc8f0a7b8c5d4d5212747433d5c2951f165e557ee91f092dc3fb8d85daaf17f38221d0115ce51f89703c01493ba559d9412121abab6d7738cc55e836cbcaad16904ef96a37186b1b364fc4c2632103aa393240b90e235197e5da9b92e564d8afec2d293896e4cb46befe4f758e290d1b4236e7061f6012bd693fd0528e05331f21b5a3c99b48087bad8925660be7fefd558fa6234c8eb6"], 0x200000c9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000300)=0xc) clock_gettime(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r10, 0x1, 0xabdb}, 0x8) 09:04:31 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000000) 09:04:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @empty}, 0x8) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="61423a450f0c43fc7a4c3cc90e14142170221217a4ce0149c5e3969d518a52e1273924fa1e426b79284a7aff7c45fb2730a0", 0x32}], 0x1}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089d0}, 0x801) recvmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1f8, 0x122, 0x0) 09:04:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0}, 0x800) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x6def7f441c98454f}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="f00400000000b832126e1530978d73e59162f3bcae3b0000000dd38801cf0300"/43], 0x15) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r5 = getpid() ioprio_set$pid(0x1, r5, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fanotify_init(0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)=@in={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000380)={0x0, 0xfffffe4e, &(0x7f0000000100)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xfffffe01}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x82}, @IPSET_ATTR_IP_TO]}]}, 0x58}}, 0x0) fsetxattr$trusted_overlay_opaque(r8, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x1b, r6, 0x0) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 09:04:31 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2201003, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x400400, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x84}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100401081000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x801}, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x5}, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x7}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000fc0)={0x0, r5, 0x0, 0x16, &(0x7f0000000f80)='self\x05<\x8b+K-\x00', r6}, 0xfffffffffffffe09) 09:04:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0xd93cb94a01fc10ae, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) ftruncate(r3, 0x200004) syncfs(r3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r6, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000000000a004e200000100000000000000000000000ffffac1414bb020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d26e2477e8f49af928ff75bf0005bc8ff352647069e4df6ab3ce6f3f0c35fadb04e33902d"], 0x90) sendfile(r4, r5, 0x0, 0x320f) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r8, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x8) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0xac9, 0x1b, 0x4, 0xe000, 0x3, {0x0, 0x2710}, {0x2, 0x8, 0x80, 0x9, 0x0, 0x5, "62b753b3"}, 0x200000, 0x8, @fd=r8, 0x2, 0x0, 0xffffffffffffffff}) accept4(r9, &(0x7f0000000240)=@generic, &(0x7f0000000140)=0x80, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8541, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r10, 0x400455c8, 0x2) dup2(0xffffffffffffffff, r10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x7ffffffd, 0x8}, 0xc) 09:04:31 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000000) 09:04:31 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x0, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x0, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000480)=""/137, &(0x7f0000000540)=0x89) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x224f03, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="2093fcffb1f14593c3cb7db36d7d2c105c8cc83f406c33da0000b10ff2a9fa7163e6c5b448e62b6c145950fc8f0a7b8c5d4d5212747433d5c2951f165e557ee91f092dc3fb8d85daaf17f38221d0115ce51f89703c01493ba559d9412121abab6d7738cc55e836cbcaad16904ef96a37186b1b364fc4c2632103aa393240b90e235197e5da9b92e564d8afec2d293896e4cb46befe4f758e290d1b4236e7061f6012bd693fd0528e05331f21b5a3c99b48087bad8925660be7fefd558fa6234c8eb6"], 0x200000c9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000300)=0xc) clock_gettime(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r10, 0x1, 0xabdb}, 0x8) [ 281.445048][ T8309] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 281.458394][ T2646] tipc: TX() has been purged, node left! 09:04:31 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000000) [ 281.512046][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.539968][ T8319] IPVS: ftp: loaded support on port[0] = 21 [ 281.622610][ T8322] IPVS: ftp: loaded support on port[0] = 21 [ 281.632568][ T8305] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 281.646271][ T8305] FAT-fs (loop2): Filesystem has been set read-only [ 281.680393][ T8305] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 281.690746][ T8321] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. 09:04:31 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:31 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2201003, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x400400, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x84}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100401081000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x801}, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x5}, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x7}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000fc0)={0x0, r5, 0x0, 0x16, &(0x7f0000000f80)='self\x05<\x8b+K-\x00', r6}, 0xfffffffffffffe09) 09:04:31 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2201003, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x400400, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0a00000000000000030000000800010075333200580002001400050000000000000000000000010000000000400007003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00ff0000000000000000000000000000100000000084e1a912c5998bcbf050001000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe048463aa98265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d390f4ea694602e4bc428fbe032c63e7810b3210293a3976cbd6e7"], 0x84}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100401081000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x801}, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x5}, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x7}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000fc0)={0x0, r5, 0x0, 0x16, &(0x7f0000000f80)='self\x05<\x8b+K-\x00', r6}, 0xfffffffffffffe09) [ 282.031236][ T8336] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 282.162282][ T8340] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. 09:04:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0xd93cb94a01fc10ae, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) ftruncate(r3, 0x200004) syncfs(r3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r6, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000000000a004e200000100000000000000000000000ffffac1414bb020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d26e2477e8f49af928ff75bf0005bc8ff352647069e4df6ab3ce6f3f0c35fadb04e33902d"], 0x90) sendfile(r4, r5, 0x0, 0x320f) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r8, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x8) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0xac9, 0x1b, 0x4, 0xe000, 0x3, {0x0, 0x2710}, {0x2, 0x8, 0x80, 0x9, 0x0, 0x5, "62b753b3"}, 0x200000, 0x8, @fd=r8, 0x2, 0x0, 0xffffffffffffffff}) accept4(r9, &(0x7f0000000240)=@generic, &(0x7f0000000140)=0x80, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8541, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r10, 0x400455c8, 0x2) dup2(0xffffffffffffffff, r10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x7ffffffd, 0x8}, 0xc) 09:04:32 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 09:04:32 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0xd93cb94a01fc10ae, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) ftruncate(r3, 0x200004) syncfs(r3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r6, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000000000000a004e200000100000000000000000000000ffffac1414bb020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d26e2477e8f49af928ff75bf0005bc8ff352647069e4df6ab3ce6f3f0c35fadb04e33902d"], 0x90) sendfile(r4, r5, 0x0, 0x320f) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r8, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x8) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000001c0)={0xac9, 0x1b, 0x4, 0xe000, 0x3, {0x0, 0x2710}, {0x2, 0x8, 0x80, 0x9, 0x0, 0x5, "62b753b3"}, 0x200000, 0x8, @fd=r8, 0x2, 0x0, 0xffffffffffffffff}) accept4(r9, &(0x7f0000000240)=@generic, &(0x7f0000000140)=0x80, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8541, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r10, 0x400455c8, 0x2) dup2(0xffffffffffffffff, r10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x7ffffffd, 0x8}, 0xc) 09:04:32 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x0, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x0, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000480)=""/137, &(0x7f0000000540)=0x89) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x224f03, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="2093fcffb1f14593c3cb7db36d7d2c105c8cc83f406c33da0000b10ff2a9fa7163e6c5b448e62b6c145950fc8f0a7b8c5d4d5212747433d5c2951f165e557ee91f092dc3fb8d85daaf17f38221d0115ce51f89703c01493ba559d9412121abab6d7738cc55e836cbcaad16904ef96a37186b1b364fc4c2632103aa393240b90e235197e5da9b92e564d8afec2d293896e4cb46befe4f758e290d1b4236e7061f6012bd693fd0528e05331f21b5a3c99b48087bad8925660be7fefd558fa6234c8eb6"], 0x200000c9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000300)=0xc) clock_gettime(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r10, 0x1, 0xabdb}, 0x8) [ 282.806989][ T8355] IPVS: ftp: loaded support on port[0] = 21 09:04:32 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 09:04:32 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 09:04:33 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x0, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x0, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000480)=""/137, &(0x7f0000000540)=0x89) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x224f03, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="2093fcffb1f14593c3cb7db36d7d2c105c8cc83f406c33da0000b10ff2a9fa7163e6c5b448e62b6c145950fc8f0a7b8c5d4d5212747433d5c2951f165e557ee91f092dc3fb8d85daaf17f38221d0115ce51f89703c01493ba559d9412121abab6d7738cc55e836cbcaad16904ef96a37186b1b364fc4c2632103aa393240b90e235197e5da9b92e564d8afec2d293896e4cb46befe4f758e290d1b4236e7061f6012bd693fd0528e05331f21b5a3c99b48087bad8925660be7fefd558fa6234c8eb6"], 0x200000c9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000300)=0xc) clock_gettime(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r10, 0x1, 0xabdb}, 0x8) 09:04:33 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 283.424089][ T8373] IPVS: ftp: loaded support on port[0] = 21 09:04:33 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x0, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x0, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000480)=""/137, &(0x7f0000000540)=0x89) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x224f03, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="2093fcffb1f14593c3cb7db36d7d2c105c8cc83f406c33da0000b10ff2a9fa7163e6c5b448e62b6c145950fc8f0a7b8c5d4d5212747433d5c2951f165e557ee91f092dc3fb8d85daaf17f38221d0115ce51f89703c01493ba559d9412121abab6d7738cc55e836cbcaad16904ef96a37186b1b364fc4c2632103aa393240b90e235197e5da9b92e564d8afec2d293896e4cb46befe4f758e290d1b4236e7061f6012bd693fd0528e05331f21b5a3c99b48087bad8925660be7fefd558fa6234c8eb6"], 0x200000c9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000300)=0xc) clock_gettime(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r10, 0x1, 0xabdb}, 0x8) [ 283.523942][ T42] Bluetooth: Invalid header checksum [ 283.529310][ T42] Bluetooth: Invalid header checksum [ 283.529670][ T8378] IPVS: ftp: loaded support on port[0] = 21 [ 283.630664][ T42] Bluetooth: Invalid header checksum 09:04:33 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = open(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000040)='./file0\x00') ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x0, 0x2, 0x3f}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x1c, 0x800) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) unshare(0x60000000) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000080)={@fixed={[], 0x12}, 0x401, 0x7ff, 0x7f}) [ 283.890700][ T8386] IPVS: ftp: loaded support on port[0] = 21 [ 284.040530][ T2646] tipc: TX() has been purged, node left! [ 284.048820][ T2646] tipc: TX() has been purged, node left! [ 284.200608][ T2646] tipc: TX() has been purged, node left! [ 284.211396][ T8388] IPVS: ftp: loaded support on port[0] = 21 09:04:34 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002e0007031dfffd940101830020200a000900000006000000000000000d00ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x2, 0x5, 0x2) r1 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000) accept4(r1, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x25c, 0x800) ioctl(0xffffffffffffffff, 0x8336, &(0x7f0000000180)="0adc1f223c123f3188f76b") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r4 = socket$inet(0x2, 0x4, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x20008000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0xfffa}, &(0x7f0000000300)=0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") bind$alg(r8, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000019c0), 0x45d, 0x0, 0x0) r10 = socket(0x10, 0x80002, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) accept4(r11, 0x0, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) accept4(r12, 0x0, 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) accept4(r13, 0x0, 0x0, 0x0) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) sendto$llc(r14, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x1, 0x800000000000, @remote}, 0x10) 09:04:34 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0x9}, 0x1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x140, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf8b2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffc01}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004870) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x29, {0x2, 0x0, @local}}) 09:04:34 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 284.516011][ T8409] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:04:34 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:34 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x0, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x0, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000480)=""/137, &(0x7f0000000540)=0x89) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x224f03, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="2093fcffb1f14593c3cb7db36d7d2c105c8cc83f406c33da0000b10ff2a9fa7163e6c5b448e62b6c145950fc8f0a7b8c5d4d5212747433d5c2951f165e557ee91f092dc3fb8d85daaf17f38221d0115ce51f89703c01493ba559d9412121abab6d7738cc55e836cbcaad16904ef96a37186b1b364fc4c2632103aa393240b90e235197e5da9b92e564d8afec2d293896e4cb46befe4f758e290d1b4236e7061f6012bd693fd0528e05331f21b5a3c99b48087bad8925660be7fefd558fa6234c8eb6"], 0x200000c9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000300)=0xc) clock_gettime(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r10, 0x1, 0xabdb}, 0x8) 09:04:34 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000840)="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", 0x1000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x9a0000, 0xff, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a091d, 0x1ff, [], @string=&(0x7f0000000000)=0x9}}) socket$inet6(0xa, 0x200000000003, 0x87) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RSTATu(r4, &(0x7f0000000200)={0xd6, 0x7d, 0x0, {{0x0, 0xb6, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8, 'procppp1', 0xb, '/dev/ttyS3\x00', 0xb, '/dev/ttyS3\x00', 0x65, '\\selfsecurity.\xc1mime_type=I\x7f\xec}\x8c8\x94\xe9\xa8\xc7\xd40\x8fcp/\xf3\xd1\xc2\xd4\xf0\x9b5Q\xec\xc6\xef;\xb1>\xf9\xf3\xe08\xc3\ni\xba\xbc\x18\xd3\xac>\x04?\x9cy\xbaf1\xe09\x04\xbeH6j\x95e\xed\xf7n\xfb\xdc%/\xb6+\xe0?\xcdI\x04C+\x8e'}, 0xb, '/dev/ttyS3\x00'}}, 0xd6) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) connect$can_j1939(r3, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x2}, 0x2}, 0x18) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RSTATu(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="09010088db9eb3da7cdf3e9edae48fd5a8f2007d000000006900"/39], 0x27) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') write$P9_RSTATu(r10, &(0x7f0000000140)={0x89, 0x7d, 0x0, {{0x0, 0x69, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8, 'procppp1', 0xb, '/dev/ttyS3\x00', 0xb, '/dev/ttyS3\x00', 0x18, '\\selfsecurity.\xc1mime_type'}, 0xb, '/dev/ttyS3\x00'}}, 0x89) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:04:34 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 284.900445][ T8438] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 284.909775][ T8436] IPVS: ftp: loaded support on port[0] = 21 09:04:34 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010005fba000000003f000000000000a1", @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES16=r3]], @ANYRESDEC=r0], 0x4}}, 0x0) 09:04:34 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:34 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x0, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x0, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x0, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000480)=""/137, &(0x7f0000000540)=0x89) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x224f03, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYBLOB="2093fcffb1f14593c3cb7db36d7d2c105c8cc83f406c33da0000b10ff2a9fa7163e6c5b448e62b6c145950fc8f0a7b8c5d4d5212747433d5c2951f165e557ee91f092dc3fb8d85daaf17f38221d0115ce51f89703c01493ba559d9412121abab6d7738cc55e836cbcaad16904ef96a37186b1b364fc4c2632103aa393240b90e235197e5da9b92e564d8afec2d293896e4cb46befe4f758e290d1b4236e7061f6012bd693fd0528e05331f21b5a3c99b48087bad8925660be7fefd558fa6234c8eb6"], 0x200000c9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000300)=0xc) clock_gettime(0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) r9 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r10, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r10, 0x1, 0xabdb}, 0x8) [ 285.072166][ T8447] IPVS: ftp: loaded support on port[0] = 21 [ 285.191367][ T8453] IPVS: ftp: loaded support on port[0] = 21 [ 285.549492][ T8447] IPVS: ftp: loaded support on port[0] = 21 [ 285.693365][ T8440] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 09:04:36 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x76, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = open(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000040)='./file0\x00') ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x0, 0x2, 0x3f}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x1c, 0x800) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) unshare(0x60000000) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000080)={@fixed={[], 0x12}, 0x401, 0x7ff, 0x7f}) 09:04:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x101, 0x408000) recvfrom$inet6(r0, &(0x7f0000000080)=""/125, 0x7d, 0x1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x8001}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003700000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006502faff000000000404000001007d60b7030000001000006a0a00fe000000008500000026000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 09:04:36 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x80) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, &(0x7f0000000040)=""/38, 0x26}, 0x2000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000016000, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x10001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) clone3(0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r9, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4020041) r11 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x133000, 0x0) r12 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) write$9p(r12, &(0x7f0000000cc0)="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", 0x2e6) sendfile(r1, r3, 0x0, 0x10000) 09:04:36 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x3, 0x51, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000000500)) r5 = getegid() getgroups(0x2, &(0x7f0000000540)=[r4, r5]) connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0x0, @multicast2}}, 0x0) syz_extract_tcp_res(&(0x7f0000000140), 0x3fe0000, 0x80000000) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r6, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10) socket$kcm(0xa, 0x3, 0x73) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) r7 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') getsockname$packet(r0, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000cc0)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r10 = socket(0xa, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x71846, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000fff000000000000000000000000f0bf4073e7b0ea00ff283f7890e25b3a7d4414011e2c71d34edb0809ba2de05503a021ca736ddb5b93d97ff657454d33290d1e39392ce3c4ceb61417ab719fb61fd1", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r9, @ANYBLOB="052f6a00000000000000e900", @ANYRES32=r11, @ANYBLOB], 0x48}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r13 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r13, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) r14 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r14, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) 09:04:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast, 0x2}, 0x10) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000), 0x32) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000200), &(0x7f0000000340)=0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x2024, 0x1}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000c00)=0xfffffffffffffefd) r2 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r3) syz_mount_image$jfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x9, &(0x7f0000000780)=[{&(0x7f0000000200)="939dca2bd1ab3ba735fd2dce4e8263a6bbbd11e278d6aec1784d699ba4df7d48df0f22567e4d7845afc86e1695879cf08bc4aa49f5501e63962495cf930a35aeff74a6a9e50ec9ee04fd2ce41ce6d88ace6ddcf1faaabf2799a1f4d782b9586b8abb7d37224e200bbde774ff154c47feae13c92f5354b358b613c815eb389a9687028176d299a9362a60e3e11c88f3c59b4e2299713c4ec6fb62549dcd2f1af5c0203aa6f4f631bda0b4f76cfe", 0xad, 0x7}, {&(0x7f0000000100)="abeba5c2bb95c2ec04cf23783eab15404d78d7124e849b7e413cde9e54888ab441ee552f559febc0acd6eaceccbbbd09b86fec71348e723fab628ab0b6fbe1b9a428ff9e25", 0x45, 0x5}, {&(0x7f00000002c0), 0x0, 0x7}, {&(0x7f0000000340)="558acfbe1646ec691d62f39fe362734dcb7114a8d5b3a6608c79319219e48d5573a7372f8c43156cca1994f56097ad6cd0c867ec19c66392daf411cd314fbdbd434b36f19f4f732dbe241cdc9a29d363", 0x50, 0x2}, {&(0x7f00000003c0), 0x0, 0xffffffff}, {&(0x7f0000000440)="4fc356603c12e98a75f62855748cf90b9aa65fb932238208d78b1e984813db8f4d6ccf9e8531d8fea29477ed78450d2e71166447bfd85516d86e5403ccef5143d4a696325caa5b2b7c72b687d937e5537b087cc9034e79271ed10927fb70e4a39053011ef9e6549de3dcf5e10d3d943380d6e4f007e43be0e8545f011fdb7827ad7b5a70d41b4c731c9f3b38f585f00a56d50571bc3f6fd31ece1d", 0x9b, 0x6}, {&(0x7f0000000600)="36ced7819f5f3711388dfafdd1dea4b58422f0fda24f562380b7737689e3aa357d7e34176ee66890a57253370ed26eb84704e0f7fd36a837fbc861fed1c5544ae9d57df355b3d4d070d0ada33ca89e2e0b0bdbc03e4826073484aa03bbb6fd1bb5f54286f76f404e4c545314a24956ec45bd78c9fc2b746d078e2bf3120b4fd829f94339f177deb1c25b929ada50ae802664fcfb9af86cabdeeb6bc2e55d197309440964a759a28e145c5794b0e7cf2d8e8534485b8e67f92572138b", 0xbc}, {&(0x7f00000006c0)="78c94f35055e36b6f1e87f9c0c1937c8", 0x10, 0xc64f}, {&(0x7f0000000700)="6e0377858a8b3e3e987527316eda2a05ec2f872c4bfdbcff07b0e13c597beaf7aec6e33909cbf5ecc1273f4cdcafdc0bee0fcc7916164db05745bb6c143625638ed938c96cf6522312d2fb481d201507dfd9aa", 0x53}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB='umask=0x0000000000000000,discard,discard=0x0000000100000001,fowner<', @ANYRESDEC=r1, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB=',smackfstransmute=,smackfsfloor=ppp0trosted,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c6d61736b294d41715f3ae91f14162c7569643c", @ANYRESDEC=0xee01, @ANYBLOB="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"]) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x13012, 0xffffffffffffffff, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x1100, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={r6, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={r7, @remote, @loopback}, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/cachefiles\x00', 0x110441, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r9, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000d40)={0x0, 0x3}, &(0x7f0000000d80)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000dc0)={r10, 0x80}, 0x8) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r11, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1) recvfrom$inet6(r11, 0x0, 0x0, 0x40000000, &(0x7f0000000cc0)={0xa, 0x4e20, 0xe8, @mcast2, 0x5d8300}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:04:36 executing program 0: sync() syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) [ 286.856971][ T8483] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 286.866844][ T8487] IPVS: ftp: loaded support on port[0] = 21 09:04:36 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 286.978389][ T8481] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 287.010555][ T8495] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 09:04:36 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f00000014c0)=[{0x0, 0x0, 0x7a4}, {&(0x7f0000000440)="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", 0x1dd, 0x5}]) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x100) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000d0a01020000000000000000a90000020900010073797a30000000000900020073797a3000000000280003801000008004000780080003400000000014e9ff80090009007379fa3000000000040007800900020073797a31000000000900ebff72797a3000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) [ 287.094652][ T8481] FAT-fs (loop5): Filesystem has been set read-only 09:04:36 executing program 0: r0 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x80040, 0x4) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x84) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000000580), 0xefee) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x101}}, 0x50) 09:04:37 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 287.183654][ T8481] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 21) 09:04:37 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 287.261708][ T2646] tipc: TX() has been purged, node left! [ 287.277647][ T2646] tipc: TX() has been purged, node left! [ 287.297822][ T8481] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 21) [ 287.320664][ T2646] tipc: TX() has been purged, node left! [ 287.370916][ T8507] Dev loop1: unable to read RDB block 7 [ 287.377083][ T8507] loop1: AHDI p1 p2 p3 [ 287.402614][ T2646] tipc: TX() has been purged, node left! [ 287.416987][ T2646] tipc: TX() has been purged, node left! [ 287.435408][ T2646] tipc: TX() has been purged, node left! [ 287.435585][ T2646] tipc: TX() has been purged, node left! [ 287.523990][ T8507] loop1: partition table partially beyond EOD, truncated [ 287.548965][ T8507] loop1: p1 start 2883645899 is beyond EOD, truncated [ 287.580256][ T8507] loop1: p2 start 796787522 is beyond EOD, truncated 09:04:37 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x1000100000e, 0x2, &(0x7f0000001380)=[{&(0x7f0000000280)="90ab4e034d6f216f17eb6f19605067887932d8a8a5be1ddc2360adac388c71fae3d41a83ed5b46d9eade69cd467ecc57ca555f9760c2082f1da4da992f50aee77349266c31468a7e9933630dc4ed35ae69658c5bd26a52032b53c0cc8ffcfc9bca2ca74a17eb69984083cc7b13667f4c0b32e684e461b97e25c5e74409bd6d732c83429b6a3e0973c54bda7cbefbeaf83eda859d657c7a789dc0141a1fffb81eb939fee14d3eed4f5fb2a888798f9070ada7b89853c631e5ffbe68e526274e85415d3571f8e9cc42800549557bfd0dc8cef28214845fc7eddfa6817d99a2016265959dcdc70b6eebafc947d19049323e513c3e10dab397e5585ed259eabb3245fed75eba4abed32ec8f84beaf92fe66fbce86b77e3efffdc13949e73c83890f1de49b08d322e9690234ac4213609906cff5196e2d5d2b366847decef70d7e805931556edd213742875a81da953a1a00edb4c1b4b61da104f9630fa6e6fb6e552754199b3b30642cf565ea61fdf97954eef84dbab789216588092f3ab4c78b4f2cbc179ddad547e46d7882cb99207609355eebbc900033917ac48b24404c80a1910566285115a7d4ede3b32bc96f083a005a9dd1db1bdf7dbed8695f00709d93f023c9e14885421fae435e5b0ecc47445307e442961bc497af3ce39da833a332d7a25feb04d1b1fbdde155ef55ea2571074ebb02c452dfd79738c2e6ddda84452fbae593e93331cfa7bb4bc154b35dba6fae364604cfddf878c783b45c86f149ecec76eb2d0e88c2bc3727643bd1aa6cceb161b030b973b81ba4e987d42c03da82774866c9bcd3d0e03b4c877c6650c4257e0cde613938c8aa80ba7e57ed15e30ba2a5068ba8249273b05495abfd73f5e854eea3e72d1e26530030bdeac509179220908c807be6b0137e95f3a2919cf7e482a58d99fb5839cebb1215c0a40eed3dd7b5bed108a82d34a0f5577323976747f9cb234f0645ea9a19e08c2b9928b4ecdacf3f5081b56375fba01a8568655e471e9c1837642d246bfcb79ef6e5938a1c87319ae676b2f0ec6ce4bf7d56d337108ffc3642cc894bc7df3307ef416c1104a72ccfe6b337d5d2c1b14a8fc6d18f2f9b446ac04c5181cb9e49ae33c99ba1d0430545c4a18405f8dd5cdb643d638e29050dbf31297d56bd144ef10e5bf7d0b6188e3e20e7a82eb4a012029c775ff8fe46685601f32b3956cd50db232f9aa0b1ab69a18a4e6c15482f4f6a01465411a1925a13358ba5e5cbcda7911934fc91da835dc1c6d086106b0f52541e83cbd91cbb9ecdd9bba24f07e23d8cf11111f63949f182bec13def945085b75feaa4fc920f8c6bcc720da1803447ec52d178cecb5184f663b3233b40848bee75a4ee17bd2a9576b871f73d6ca52664e210a7921a6ebc66ed8f589a9cfec840bf6ceed8d90833d1ab2a182db5678134fbfdf8643c76a85d5beaa1672f8b0b0c66f78b7c6b9278f7ebb630e6be3c10b1bb2d6ac1b2f98c8ce0126bffc519f9586a8b1deeb9b4859b6189393332ec6af50f17603b2088f01290f3154b48130394eb33cd0f1f712b529100cf4f577796efdd10cc7fa3d3ea419943c2d2e4929ea58e80ea0a5ee7e16e615846e4dcdbd39be1028030fe288d8711ce5e522ce321d362c391cb434c338e8b3a88a1c554973670225e5e506512588abd8c928a4479a9f341e54764461852bbf799e8705ededd9465cdb09f37061813f1048161e4c9e3d9d6c76113aa056c2371e9864b813266a38ecc80385da715f29f220aac02a8c8f67f089c14cffc466245b91745af1488e4ce4a2ca08eb704da53574ccebacf04589355405df7a9f75391c54b81100736959fbc68572ad1c989a119b6d26e56a61a208ba1e05f01c3f10d36c7fc7cb8e03e0e052a65eb5f7c02148a1590279bd85be24e70cb1ccf42ef1a3edd2a8b2af2e65744d1b64c310215c8e6920108c226b6aeafec1ae83eba9deac59e613e40d27f2a22ca4d543db60ff55e3fb239a747c94480b9460be7bea09f151b766be4303f6aa457d3d18a647623694d51e75723adc01b5c94b8bb245ba5e6e36fdb1f9cd99df296e2cdf792a1280cd207bfb8d013e8877f42f95a3ba3b9d6d04f0975e328d668a1e4616bdc4cb99244959dd540fa7f57e93bc71b80d194ee29fce99f99da187541d60642ab1790254d77cb66646399baec2c3cfa8386d7f4d771169721d5d1521091e2fe0daa86dd15c00cfe8cdb83a76992eca18a4b80ee865c08c338b6b1b296109cc5ff434997c3c6b4cd684d2cd6de32a9bcfaa61a423f8d215c97d654467af7637a1b2d80815e68358781ea61c3a0742f442cc846bfa4ce11ba7d44217062e5a7752eccf9ea9aa85a86ab5d8d18dc7ed2ef9f3f3938912c1d3eb66f298fa142461e78a1b5da5d3e8a00cf640c69b3c8ff241b753562b0c4f8d734446a4fcf308f0a44682e88db760e80ae1db398418ed43c68fae80ce9bdeb4ba9e2a4197597d0707bf9f21bf3c370dce8a6ba91abfe27ffe716d55b67992cd4557358cda84e5e2f963e6e27687e668392ebcf5fe997fe690e92a188959c4698faca314a5a2322550e749b5966bc4b0a70f8ad4275caa75f117f941d1896f273a20ba803efc74a0294297d8b8a88f4c1b9b7cf4dd7560ce328350c60ed72db3db2368759876ce9be875dfd5710ea5c25b52b2b94a462915acdbcf2cc026e7f6c1d2196da2acb45f8dddde1fd920314b7d4adcfc350b1f77b663c03c1d707614ac4b952b77ec7de5ef1b3b95ec8b8c7f59aa8adaa4ace0188fd92d09304e8597ce716a8de10000a0139e46bd773b9872f9de2f4566ab77f49983f2dbcea09b6d0ffc8407de595cc8a3c6e4927cf23653314ee735d6f718f8f110b1f1d826fa7a11c434b12757d788c761a7012bd4ef05072159ea5626109727b4c254187438e036d20ee6642b78f811a26af8390455526bce341b09d437d6e08c85b6ba860322e2347615f26d736739bcb11d8a2b67c436e1163814fb6d2cad42917977874289eabd22d0123eda8b7fac85a59d8a8d93fa15bf17375c4577d356f42d4d827817e0b968d4c368760af05548a088c1f6cfc37a0c9006d077cd0345ebc78499ac65d6e866065e3fd77e6bebfd3d7888bd4d987f19030ea2874d8f51bf5f8dbea155fcbfeef18a1be381cb68e243efb3a6feb5758ea59424f4436c970a4009585740473bf53573c122c9e168219b8654490622e8cd12cfcb8855bc97596ea53dc521b923e7e249fa5800820c6e57c4c0c70770518bd0edb64a18401bb8d20d7b6262494ec655dd5f17b4ddaa9c500c785d43c1110b92ff516e3f88c023389317b90ff0950fcc7486db3e967fad45f3f194d2ad4ede90d4d5ed72d8a61267971df8ac1b6b6ef1bcf9dd6790932507015ef07bb7a6b2206a91256a74aac40fff61f41d409e2964b96a81965f1c0b8a9811321f276b8d8f316ede6722e9971a2af8e830ef7efa4b8c7b70a0109a1ea46f14e6c80153dd447cbe0d0a02bbb10b14a53c997001f4b179dd3d70c26f27316e3281fca8af783938b430905c9a95a36ad6a968d0cfe33051498481204bb7e3613ba4d48a23382b419238d92da1a43e0cfc69f652b81345fe4cb17771f82d46f931bd1fcb44fe8c8e2912e8dab0169ea549579579dbde6dd0ee575eb786d82f0ea5ed5b4078932d015553b038d0856bf1a8e66d3f4619e9ec5b1a12056d539f2ac96bea5ed7cae6c38d7fcd4f4771866bee6ca597e2ff05e8ab5eb5d380a73e3c862300ce7455c417cc90051c53e83e7c393e264dc58d174be38a360ddfa3fd1354b45feb75b93339f0406122e4d3c5119c3415549d8080fda4d61724d307224691bc1e1206b60e46faa81ee3a114962bb29dd0852423f08256498cb687604f96a23937ae2f182c0dbf5411c6b79c74b3e74a61b510843ca2aebe20e6a53b1e6460a56de2dd5fea01c91688c60b123b7d0da17bbdf02a966a1911a3c52ade1cc7ca4901756bbb22e7869941c83157ba049a86b9deba3688a772abdd50bcf305524c480d0b08807391c431c4f6c1c7e28766e5349635ae07ee231e3419596c0cc03aae08550c58e8b574b0d6aa5fdbf8ddf0eb250e45b914e01c8d01dabd9f354632f5dcf622b3ecbc32c49ed08c52b5b99ee96d4f95ca33242e816eafb8a3f4b7d97cff3858588c69ba2212f630173715cc63a5f5fb412eba152fd7e1d02ac6b7a56ee263322d5555eb16aebd363b9e3f3f3ed78a80f77308236139b209a816f41b2d557738448e81a7c1be377a9660b18ac079d5d894d1968f55b32ed2423586e60671cc42a0b5aa8016e00a7dc066164c9195ecdd28ec6572692623e5af824f63d6a2ce9b35a6547723135f7635f3c20463b9036a1d35ff25f65bb0f062c6ed86962f6957f46f3cd8020878e55f5edcfcb518dcee38d2bc1646510fada5281d2c3a7058cf60ef9a26fd4bd5bd987908293001c16952573566ec22ced7a5d4299a10b7690cd2483df30467b2f05c447f9ec86fb8d58f83db13907c25a8bb615aa6f929e6e3c2cb8877dfba3f3524949c9d46bc46514244e783cc287f49d0420180b7c17dbfe105bb39e27e1e525696b4234b05c462371601b3a0ea2f65747725633f0c4ce0450f4098297e8c9a47254f32417a1b044f90710cdece9dda77aab465eaabef8e0ccdc2d6f17898019853d1bbfb5a0e4dc29e5a80973ab3119f06f8d26ba39ba2ec6ee60d914dc8387bda34ed345bc6f28cb7fd9d04d99bc0c6cb95fb3b12e91c962bf55336bd124d6415ad38e74c40ed94961dfaf9e9adb403c3be826a97f63cd83a9bd39e0d5d22e82336bfa7f8618265cb08accac276b4da5f43522ba66c7d8b39ddcea7b5532692aa6fb054ee729f957abae9d05524a6f6ae91c7abd477384921480cd7873dec8a43c740da905f94eab0efa7acf813ab41e4ce4ba69cc99f3af7b9985977875b42ad32eda5c50736d4c222493bbd3cbe889dc9aa004228784ff448c5517076811a2e150ed08ea11613693ec207d9372f8ffffecc3279d37391b84b931ed4ffb5128c77170adfa730bcc6e3f2add349c3c84ff9409d5f8d3ca21789712f5571eeafdf4536a9f5249315f49248464356704e6ff66142ab930b800d5fbe5c3b5332207756567510ea7ded2cbb4b07648f5582ebfcb3a9b48fe0a23f1734db03666e1a1a104f1856751e283eac05fac1f20ca438860c6175949629ba422bbf2a39aba79d64a70c2e1089b38a5fd32a58a5b5ec803006dfbd46660ed152bdf1493b8304d2aa46df87c2b00a05378f5ee734e315a86f02b1325fc08485d7ecf382b6ac244a0eff4c67051bf66f5da5ba284e2c2f6b4843a40fd1da7f12b527b0edad9803073b9119b817b8fb2a07d941771931e375d40e37b67163e29ce11d7c460e5bc32b9c458978cb15b8783c17bb9e1ecff7130d2ed9879f89367800c670cc25a0597d73444662c1c552a3cb295b5ebae666d4428543f6d56aa2558dbbc6d3de9e969ea237dc5db0e39cf1193d8cf916cbdcd4dd4002649ff64bb003acc4a06628a854a6f80eb801517efcc0af6e8f14057412ec7cf3b4f8628d0f4c3d52c2f96ee7d925ba682868204e265846055beaff773d999fb9f54aa6b5a8de96913da50acb99b817521fabdbfd2ccc4ba69ffd3f47c35514ded6c39beaa6d9d59cbc091d064c6717fa12b5c48b8c31a1af6936910c689c39a6b8e49155d33e055b0d4ee0d69e1b9d3117af67543afb857cd594a44794cee76691f160d94437df607f64a475aab5af9f974b5c14d1448d", 0x1000, 0x2fb}, {&(0x7f0000001280)="5217050d7110968f43f9607d2a00b3f3e1be734b58c13b83ad8bad3d222774876fda10b99b691d9ad2e0d5147be31214e40ce9d4e1179594fe026d9d946ad4b1b0d1419ce78538128bae285853ece720a9955cbc2fa2b17f0d632e78a29543579cf4a469076df004df7dc4e4ba49967218470e571f589281a93348dedd3a6866fc33e82eade4b482598d0b77ce930fb0a37338d370f4e6fa219228f5c74d62cce1004d1a1460a84e0d0d185958126d6a54f4ecda97abd4978fc9ae558d59c98c8fa9de7fcdb8f1cbe815dd2e7010a867b642971bb4a7695e00c23a6106a4fb5b78", 0xe1, 0x100}], 0x108030, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x402000, 0x24) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000080)={0x5, 0x4, 0x2, 0x9, 0x5}) 09:04:37 executing program 4: mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000640)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xa02, 0x0) ioctl$EVIOCGPROP(r3, 0x4004743d, &(0x7f0000000c00)=""/246) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x69}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) dup3(r5, r2, 0x0) pwritev(r3, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000000)='#', 0x1}], 0x2, 0x0) 09:04:37 executing program 0: r0 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2b, 0x801, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], 0x1, 0x1}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) close(r3) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r4, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x1f, 0x1, 0x200}, 0xc) 09:04:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x80) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, &(0x7f0000000040)=""/38, 0x26}, 0x2000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000016000, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x10001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) clone3(0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r9, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4020041) r11 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x133000, 0x0) r12 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) write$9p(r12, &(0x7f0000000cc0)="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", 0x2e6) sendfile(r1, r3, 0x0, 0x10000) [ 287.662163][ T7941] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 21) 09:04:37 executing program 4: mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 287.733505][ T8507] Dev loop1: unable to read RDB block 7 [ 287.750462][ T8507] loop1: AHDI p1 p2 p3 [ 287.754716][ T8507] loop1: partition table partially beyond EOD, truncated [ 287.764673][ T8507] loop1: p1 start 2883645899 is beyond EOD, truncated [ 287.772179][ T8507] loop1: p2 start 796787522 is beyond EOD, truncated 09:04:37 executing program 4: mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x80) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, &(0x7f0000000040)=""/38, 0x26}, 0x2000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000016000, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x10001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) clone3(0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r9, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4020041) r11 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x133000, 0x0) r12 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) write$9p(r12, &(0x7f0000000cc0)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc774a2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefb9645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b5179ba1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706234f383e31cf662c95b1e49cfd04000000720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6ad83011d06cce13ccd5af36c6f99dc01be7c400ddf788872f1041e4b10686eec41faab866d140b32aa75ee42dd6ef0f90c12ac175db11cd782f959bd84e65449db6d9165db2920a541bb5b372a339e5d6b10079f2bac675542eb1f47a5f1776433d10ff056139f47bf8597d29bf64d7d967dada96e7176010d329eabdd85b79cc40683aa11c1179c85fcf1464514a440231e390beabddda091c4795130777c4ea99194169eaf5fe1aa878b09e00cf3e0836e6", 0x2e6) sendfile(r1, r3, 0x0, 0x10000) 09:04:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x80) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, &(0x7f0000000040)=""/38, 0x26}, 0x2000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000016000, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x10001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) clone3(0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r9, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4020041) r11 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x133000, 0x0) r12 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) write$9p(r12, &(0x7f0000000cc0)="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", 0x2e6) sendfile(r1, r3, 0x0, 0x10000) 09:04:37 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000640)=""/246) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xa02, 0x0) ioctl$EVIOCGPROP(r3, 0x4004743d, &(0x7f0000000c00)=""/246) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x69}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) dup3(r5, r2, 0x0) pwritev(r3, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000000)='#', 0x1}], 0x2, 0x0) 09:04:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x80) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, &(0x7f0000000040)=""/38, 0x26}, 0x2000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000016000, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x10001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) clone3(0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r9, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4020041) r11 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x133000, 0x0) r12 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) write$9p(r12, &(0x7f0000000cc0)="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", 0x2e6) sendfile(r1, r3, 0x0, 0x10000) 09:04:38 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x80) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, &(0x7f0000000040)=""/38, 0x26}, 0x2000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000016000, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x10001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) clone3(0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r9, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4020041) r11 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x133000, 0x0) r12 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) write$9p(r12, &(0x7f0000000cc0)="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", 0x2e6) sendfile(r1, r3, 0x0, 0x10000) 09:04:38 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:38 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x80) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, &(0x7f0000000040)=""/38, 0x26}, 0x2000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000016000, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x10001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) clone3(0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r9, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4020041) r11 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x133000, 0x0) r12 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) write$9p(r12, &(0x7f0000000cc0)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc774a2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefb9645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b5179ba1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706234f383e31cf662c95b1e49cfd04000000720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6ad83011d06cce13ccd5af36c6f99dc01be7c400ddf788872f1041e4b10686eec41faab866d140b32aa75ee42dd6ef0f90c12ac175db11cd782f959bd84e65449db6d9165db2920a541bb5b372a339e5d6b10079f2bac675542eb1f47a5f1776433d10ff056139f47bf8597d29bf64d7d967dada96e7176010d329eabdd85b79cc40683aa11c1179c85fcf1464514a440231e390beabddda091c4795130777c4ea99194169eaf5fe1aa878b09e00cf3e0836e6", 0x2e6) sendfile(r1, r3, 0x0, 0x10000) 09:04:39 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:39 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r2 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000380)=""/39) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = getpid() ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000003c0)=""/192) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @tid=r3}, &(0x7f0000000200)=0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x284080, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r5, 0x4018ae51, &(0x7f00000002c0)={0x7, 0x7ff, 0x7}) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) futex(&(0x7f0000000140)=0x2, 0x8b, 0x2, &(0x7f00000001c0)={r6}, 0x0, 0x0) 09:04:39 executing program 1: syz_emit_ethernet(0xfdef, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x424801, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x8, 0x1, 0x1}}, 0x14) r1 = creat(0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/252) 09:04:39 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x16, 0x0, 0x80000000, 0xc81, 0x20}, 0x3c) gettid() socket$inet(0x10, 0x2, 0x0) epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000003c0)=@sha1={0x1, "20cd46ae434c6976d4440901cab6a57b17a1f38b"}, 0x15, 0x4) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46600) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f00000006c0)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000840)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000600)={0x2, 'ip_vti0\x00', {0x4c}, 0x7}) request_key(&(0x7f00000001c0)='cifs.spnego\x00', 0x0, 0x0, 0xfffffffffffffffa) r1 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_get$uid(0x3, r3) ioprio_get$uid(0x3, r3) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000800)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 09:04:39 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 289.815366][ T8635] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 09:04:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x212000, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000002c0)) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r5, 0x1, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x71}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8804}, 0x40001) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x6c, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x6c}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0xfff, 0xfd, r8, 0x0, &(0x7f00000000c0)={0x9909d6, 0x4, [], @p_u8=&(0x7f0000000080)=0x14}}) ioctl$EVIOCGBITKEY(r10, 0x80404521, &(0x7f0000000200)=""/80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0xff, 0x1}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000001700)={0x2, 0x0, @broadcast}, 0x10) r11 = dup2(r1, r3) preadv(r11, 0x0, 0x0, 0x3) 09:04:39 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 289.971611][ T8633] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 09:04:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200040) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x3f, 0x1ff, 0x9, 0x2, 0xbd7, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}]}}}]}, 0x50}}, 0x0) 09:04:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x80) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@rose, @default, @remote, @bcast, @bcast, @rose, @default, @rose]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, &(0x7f0000000040)=""/38, 0x26}, 0x2000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000016000, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x10001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) clone3(0x0, 0x0) write$cgroup_pid(r4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(r5, &(0x7f0000000580), 0x12) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r9, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4020041) r11 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x133000, 0x0) r12 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) write$9p(r12, &(0x7f0000000cc0)="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", 0x2e6) sendfile(r1, r3, 0x0, 0x10000) 09:04:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xee}, @IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x44}}, 0x10080) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 09:04:40 executing program 1: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000000119050000000000000000000000003c0001002c0001001400030016f8bcd383af9b1577def13ed2d6b8bf14000400fe80200000000000000000001b0000bb0c000200050001000000ac163c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff00000c0000000000000099b540000000000108000700000000002400180014000300080001007f0002007f0000010cc8d3cee40001000000000400000000"], 0xb8}}, 0x0) r0 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6800}, 0x0) 09:04:40 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:40 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x4}, 0x6) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0df59c0cd62952cbbf", 0x9}]) socket$inet(0x2, 0x3, 0xff) [ 290.361225][ T8664] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 09:04:40 executing program 1: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000000119050000000000000000000000003c0001002c0001001400030016f8bcd383af9b1577def13ed2d6b8bf14000400fe80200000000000000000001b0000bb0c000200050001000000ac163c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff00000c0000000000000099b540000000000108000700000000002400180014000300080001007f0002007f0000010cc8d3cee40001000000000400000000"], 0xb8}}, 0x0) r0 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6800}, 0x0) 09:04:40 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe00022507", 0x23) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x8, 0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x140) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8, 0x20}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000002) fallocate(r13, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000040)={0x0, r14, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r7, 0x40}, {r8, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r14, 0x9318}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) syz_genetlink_get_family_id$tipc2(0x0) [ 290.499099][ T8676] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 09:04:40 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:40 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x406001, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$inet6(0xa, 0x80003, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'veth0_vlan\x00', @random="01003a1e2410"}) r5 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x4, 0x0, 0x4, 0x50239c31a31d4ca1, 0x3e6e, {0x77359400}, {0x4, 0x8, 0xa5, 0xff, 0x2, 0x4, "d8789542"}, 0x9, 0x1, @fd=r5, 0x2, 0x0, r0}) recvfrom$ax25(r6, &(0x7f0000000280)=""/68, 0x44, 0x100, 0xfffffffffffffffd, 0x0) 09:04:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b70200000c000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000fb01e81f4c38df2e976491abb35a47c9bbf827d1b30ca80950e0170f2644dcf1f2846598a2af78a49e6e70e9e4b612ff7fc7efba9468e0b1042d6a179bc267df8dc35223a9b1d1a4e67c97c7deedf738191cdddaad6bed03a3c55a24ee2aa6cdb735ecb94d2118e3807ebbc652ff40c9a0bb384b5bfc2e419a0fda309e9a6202b3dc3e9f7f18e33e3142ae58cf2b4c80967d0000000000000000000000654a684cf7cb53fdbbf49af8c1560b307d48dfc4685a7104b141a931a39a14a0789d46ea91706e09b39755ccbfacc878dc66654809d4eb28b7f350633e4fe2e7cedbd8dd0cac7c6517094f4d28763dab62e3"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f088a8000f88a800000806638877fbac14140fe9", 0x0, 0x100, 0x0, 0x57, 0x0, &(0x7f0000000080)="5dc9696653dda96904899a87ee73ce76255b6780b1c9a6d97a7564fe39603ba544807b92b1cf5e796b74ebff4b7abe6f949163459da6d3309fec553e8a31984da432d58c45e571a462dea5868c76cd0c5792fcdcf1ceb2"}, 0x40) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, [@loopback, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x20) 09:04:40 executing program 2: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0xa, 0xa, 0x4, 0x2000000, 0x3, {0x77359400}, {0x5, 0xc, 0x5, 0x9, 0x45, 0x7, ',E\x00'}, 0x7, 0x4, @planes=&(0x7f0000000040)={0xfa48, 0x9965, @userptr=0x1, 0x1}, 0x0, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0xfffffe66, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000019008306f5c840e1fa713c070100100000000000105d0100000008000300060000000000090000a1f70a35f811eed3a38f116bad74d8fc11a8ae340e3bad0b043adf11871d244c9179a26c70e0aee83bbef704b62900"/110], 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x49248e4, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x8001, 0xfffff46f, 0x5, 0xfff}, 0x10) 09:04:40 executing program 0: socketpair(0x15, 0x2, 0x2, &(0x7f0000000280)) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) bind$netrom(r0, &(0x7f00000000c0)={{0x3, @default, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000080)=""/50, 0x32) 09:04:41 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe00022507", 0x23) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x8, 0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x140) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8, 0x20}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000002) fallocate(r13, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000040)={0x0, r14, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r7, 0x40}, {r8, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r14, 0x9318}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) syz_genetlink_get_family_id$tipc2(0x0) 09:04:41 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:41 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe00022507", 0x23) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x8, 0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x140) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8, 0x20}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000002) fallocate(r13, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000040)={0x0, r14, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r7, 0x40}, {r8, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r14, 0x9318}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) syz_genetlink_get_family_id$tipc2(0x0) 09:04:41 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe00022507", 0x23) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x8, 0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x140) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8, 0x20}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000002) fallocate(r13, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000040)={0x0, r14, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r7, 0x40}, {r8, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r14, 0x9318}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) syz_genetlink_get_family_id$tipc2(0x0) 09:04:41 executing program 0: socketpair(0x15, 0x2, 0x2, &(0x7f0000000280)) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) bind$netrom(r0, &(0x7f00000000c0)={{0x3, @default, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000080)=""/50, 0x32) 09:04:41 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:41 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 09:04:42 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe00022507", 0x23) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x8, 0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x140) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8, 0x20}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000002) fallocate(r13, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000040)={0x0, r14, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r7, 0x40}, {r8, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r14, 0x9318}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) syz_genetlink_get_family_id$tipc2(0x0) 09:04:42 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 09:04:42 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe00022507", 0x23) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x8, 0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x140) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8, 0x20}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000002) fallocate(r13, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000040)={0x0, r14, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r7, 0x40}, {r8, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r14, 0x9318}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) syz_genetlink_get_family_id$tipc2(0x0) 09:04:42 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 09:04:42 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe00022507", 0x23) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x8, 0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x140) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8, 0x20}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000002) fallocate(r13, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000040)={0x0, r14, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r7, 0x40}, {r8, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r14, 0x9318}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) syz_genetlink_get_family_id$tipc2(0x0) 09:04:42 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe00022507", 0x23) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x8, 0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x140) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8, 0x20}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000002) fallocate(r13, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000040)={0x0, r14, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r7, 0x40}, {r8, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r14, 0x9318}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) syz_genetlink_get_family_id$tipc2(0x0) 09:04:43 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000580)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYBLOB="31000000000000000000090000003c0003000800030000000000140002006c6f000000000000000000000000000014000600ff0200000000000000000000000000010800010001000000b6fbf3bb"], 0x2}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x44, 0x0, 0x184, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002}, 0x4000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)}, {0x0}], 0xd1ca10c397b7d740, 0x0) r1 = creat(0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000015c0), 0x10000005c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004040800418e00000004fcff", 0x58}], 0x1) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) [ 293.380571][ T2646] tipc: TX() has been purged, node left! 09:04:43 executing program 5: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/4096) clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x5, 0x6, {r2}, {0xee00}, 0xfff}) rt_tgsigqueueinfo(r0, r3, 0x1008017, &(0x7f0000000040)={0x32, 0x127}) ptrace(0x4206, r0) tkill(r0, 0x12) [ 293.550333][ T2646] tipc: TX() has been purged, node left! 09:04:43 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 293.814798][ T8809] ptrace attach of ""[8804] was attempted by "/root/syz-executor.5"[8809] 09:04:43 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000004c0)) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000380), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002c40)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000180)=0x4) socket$bt_hidp(0x1f, 0x3, 0x6) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000bfcffc), 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0xfffffeb2) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000003c0)={0xffffffb, 0x4, 0x20, r1, 0x0, &(0x7f00000001c0)={0x9a090d, 0xad, [], @value64=0x7}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x1c000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x20000200000000, 0x10002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 09:04:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x4, 0x800, 0x5, &(0x7f0000000000)) r2 = creat(0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x40000, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x1ff, 0x101, 0x80e, 0x0, 0xc, "f833364973c48a39"}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000028008000100000000000000000000000000b3ef0a33ee225b151a720da68b1f3c13a1ee0343fec845da1e95257505b54dbc634ac5b75465debd0748f8cda7aed96061d76405edfd6dbf4b02532d8a75934b9278af7e6587b401580b5b2f64c3d5f7d85d714e493c6cf2048879c0b9570d508adf5f3f1379de5dadc6e9cd46c96b6c10cb8cb9a9210a66ae7ade0efda8fd747059103871b49eb11f01cc3dbfa225f5402d5883471c2e2b60a4099db82c35782c6afed44372f61dde", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) [ 294.066498][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 09:04:43 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:43 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe00022507", 0x23) fcntl$setstatus(r0, 0x4, 0x42000) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x8, 0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x140) fallocate(r9, 0x0, 0x0, 0x2000002) fallocate(r8, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x20}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r11, 0x0, 0x0, 0x2000002) fallocate(r10, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0x0, r11, 0x0, 0x8, 0x20}) r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r12, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r12, 0x0, 0x8, 0x20}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r14, 0x0, 0x0, 0x2000002) fallocate(r13, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000040)={0x0, r14, 0x0, 0x8, 0x20}) ppoll(&(0x7f0000000000)=[{r4, 0x20}, {r7, 0x40}, {r8, 0x4000}, {r1, 0x475e33e0af228bf7}, {0xffffffffffffffff, 0x90}, {r5, 0x20}, {r12, 0x4000}, {r14, 0x9318}], 0x8, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000240), 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000bfef9b9f2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) syz_genetlink_get_family_id$tipc2(0x0) 09:04:44 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000004c0)) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000380), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002c40)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000180)=0x4) socket$bt_hidp(0x1f, 0x3, 0x6) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000bfcffc), 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0xfffffeb2) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000003c0)={0xffffffb, 0x4, 0x20, r1, 0x0, &(0x7f00000001c0)={0x9a090d, 0xad, [], @value64=0x7}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x1c000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x20000200000000, 0x10002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 294.298393][ T8822] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.603338][ T8824] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 09:04:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000580)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="40014a8b274b827583cf07519e9b3d07fdaf0c86a3143fc7a2382672e24986ea09b69261e92c7623448241c9120c6e99fad8197d1812790ae28a05fc34f0b3d1a9523a4934b238a0a85dd487154a46f30abd3b09e24fdfb38b62a5d0d764d30f54074092779d3362e4abe76f5b26e2379dd4b5d55a68609a69e5ef87f2287f44d60ddbf704780426ecf32d4e1376b6e9e01cd97a8567d66c3000f9c1bcd69ea17508b1b6c6b83118e26e4c512b1b5797e2031a78570864b2fc08ec09e16010eaaba4a646a0f26d6760870c21077d2b0542601f95654215d4f28f3f730751a391b1ade6a3126b052952db10948896ac76bcedb07ae1fa9f2d661d3342d39660b644a72bf3f396f0f36a7d697d716c05e6a547ea4bc71a2b99c710e24c402857138252fad68760bb4357f049bbf868bc9f1a4b30de00420c8164518d5bd1cb17c2691bf793002bac80d4ac3a30963e3507b32fff11b6b76d0fb3d26326bbaadc5ae4faf3b9118dca81e0cf339ba5ad08d3bf880749af7b0c86f569e6a83f03688d034f22a66941a346c26f1bc9748f188fd4e5090a06844d6edb93933739968ce9475b596885ca2e2765e005814df246264b14b693a1f63676c59ff23f7a37d0ef6e4b", @ANYBLOB="31000000000000000000090000003c0003000800030000000000140002006c6f000000000000000000000000000014000600ff0200000000000000000000000000010800010001000000b6fbf3bb"], 0x2}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x44, 0x0, 0x184, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002}, 0x4000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)}, {0x0}], 0xd1ca10c397b7d740, 0x0) r1 = creat(0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000015c0), 0x10000005c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004040800418e00000004fcff", 0x58}], 0x1) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 09:04:44 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:44 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:44 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) fallocate(r1, 0x3, 0x80bffe, 0x28020001) fallocate(r0, 0x3, 0x0, 0x28020001) 09:04:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f00000006c0)=0xe8) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000700)=@v3={0x3000000, [{0x0, 0x2}, {0x8000, 0x2}], r5}, 0x18, 0xfa19de24d0ec8342) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x3}, 0x401}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x5, &(0x7f0000000340)=[{&(0x7f00000001c0)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a908aea872943afd02090000b579a7186270146d0e0206e756a8c63cd7dcc6760253ef", 0x3a, 0xd1e}, {&(0x7f00000000c0)="a773786392e58a38a3938565b88432a55baabfc4efc518bc4de72e6aa37ea2cf67d26147cd88235c14a92245b5cc1ea70464c135418695ca45c13bcd81da6b44304e7bb4917c7e06a94009eb8321d66ba376e6fff1bb7af3285695612149b2f64e5161dd2d03bfee7e501abc38c31199", 0x70, 0x3}, {&(0x7f00000003c0)="6c57443a0cbfbe4d89e26dfa5b89bc31b11a2440c4d240a0b52f1b4dd474eb0f14eb504a89cd397eaa6ed2c00f7a59050d525b9a04e1d289f6a615dac816733ca6ed89878352f89a090c66c04122579c5e5aeaca586e47dc8763cdcd55796b92ee563c2012c5ecc4e2a465b199090c83a000de910ff21c05c5ba78a3b3df9465932e4931b12b4f20165d692b0682213cf4534123446fb9cb1387e05127e629e2cda774908b5afedc8fda4d796a4ad5df21f8d1cf7b9283b5d659255f8aa92037349efa915f96719d4b37de6caaf0a3ef1820c91e7f2050b7d7cd6568c0af05692e124db8", 0xe4, 0x5}, {&(0x7f0000000180)="742123fdca12c72d6187333975ecf78c8ef3971ad8ed54938cb4093a844db72355d7628031d833", 0x27, 0x3}, {&(0x7f0000000300)="75d61edbd4e816735b5ab90954b692833e6c387e92c2f22d", 0x18, 0xfffffffffffffff9}], 0x0, &(0x7f00000004c0)={[{@test_dummy_encryption='test_dummy_encryption'}], [{@euid_gt={'euid>', r2}}, {@smackfsdef={'smackfsdef'}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@fowner_lt={'fowner<', r2}}, {@permit_directio='permit_directio'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash='hash'}, {@euid_gt={'euid>', r6}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) 09:04:45 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:45 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ftruncate(0xffffffffffffffff, 0x200004) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000000000)='./bus\x00', 0x40802, 0x21) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000300)=0x6) fcntl$setstatus(r3, 0x4, 0x42000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x0, 0x7, 0x2}) sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r7, 0x0) write$P9_RWALK(r7, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r8 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0xa) dup2(r7, r8) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8001}, 0x0, 0x7, 0x80000, 0x0, 0x5f7, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:04:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f320f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x4c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 295.366617][ T8860] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:04:45 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:45 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ftruncate(0xffffffffffffffff, 0x200004) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000000000)='./bus\x00', 0x40802, 0x21) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000300)=0x6) fcntl$setstatus(r3, 0x4, 0x42000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x0, 0x7, 0x2}) sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r7, 0x0) write$P9_RWALK(r7, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r8 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0xa) dup2(r7, r8) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8001}, 0x0, 0x7, 0x80000, 0x0, 0x5f7, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 295.742599][ T8879] kvm [8877]: vcpu0, guest rIP: 0xc7 ignored wrmsr: 0x11e data 0xbe702111 09:04:45 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ftruncate(0xffffffffffffffff, 0x200004) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000000000)='./bus\x00', 0x40802, 0x21) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000300)=0x6) fcntl$setstatus(r3, 0x4, 0x42000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x0, 0x7, 0x2}) sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r7, 0x0) write$P9_RWALK(r7, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r8 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0xa) dup2(r7, r8) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8001}, 0x0, 0x7, 0x80000, 0x0, 0x5f7, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:04:45 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:46 executing program 0: syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x16d2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x881c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff11f, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000060000000000000000000000000000000300000000000000000000000000000000000000ecdfd64e0000000000000000cc89000000000000000000000000000000005094d33ea98ab9de7bd913230a6251270c2c860c4e45f09f2469294a928d8993fa0b42860a8c2d0dbaafa76ae230bc114c3ee4011c5db0c27ec0cb"], 0x1) arch_prctl$ARCH_GET_CPUID(0x1011) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000001780)=[{&(0x7f0000000780)="7fbb97bd7727d3deb549a8556bfa7ca91bced2914b4a353e61480dc2b0b2c3bd8ff63dc9fea0e6cc61fe964f320ad75ca7e766dac559b8376ba19f0baed2d480362ad65ed256dde6659467197bd0e670fe3e352b9b5c9c0ed02c8dedeae60039abc78a975ef38610cce6eedb051e1fb4075e6c1c76d0eb708da486943281868c7d13f46657c61d3fd1c5ace4ae293b983285728c766a0cc7787e26c1116d5f81639cf3e18f1b4a4e040fc3aec7381a77534032902131f452979ef1169e5b03c47421b5a813b9bb39a53fa9299a2d8fe6eb5cc9df6d2e66de776812798c75c963b2d7d89fb677601a2f65a399fb1ee3455bffd44578de4f62298e08d20eed6c1166785674e0cbfc36e023c9b26df05ae3127637a4fef0fda02af2c178a99f96185a4d2a2aa61af5d15d5b637a10f30ceaf16e9433617183412f32b9cb4f526c6c84d039ab535b66af926cd15ea19d18ba8e447fb61b62de4fe419000b9b99b72e2483d94d92f3b348f3aeccdc90f978521d16a2b5a476faa53eab2a25db43c0f69cd7ecf3ee176f1e9fb8f839e79dd11be44adfcf958ffbd4d70e1fe5221ca9a1239a98eb05ecec6adca0673be66c2bfdf0e0c8292821740e863163f85f6f92d4c8b574f036c52706774ef7d28646b50eddc32e4e63fc773caf1f113f2021557ea28d88543b5ea1070ad5fd96f80d282aa99a61986b4e0b3f0ff3045940fb92e5462c7ea443870dac79c796447b0bdcb3357438f9c8737693b886ac978577871f1f5085ab72f4264980c65ff6b265b72418afe15b0fbf0e8dd0d39048187c37556e394cfcbdf52625c788f8aa351ed19c87d36c29d3531b37a595aae6f1c0fb98762502f6ddef4194998d6e6c051742d3fcf6152598c832159000707c8e53b708495bdfa0568a425ba3d4fb5d2fb39f67de03b2b14da64edabf3fc3a60cbb1e0845baa9b126737561693f289ab6098da8e058c63447a2fbbd976a8d5222e6a5d7c57a77261cae3241f4750c69177e23993334d2eac02235b4aafde229530dd23322d1298614803c48015c03c0695bb988031419febe47251a8531960f03578e8cc69c7bf0b3b59d0f4ed3a2cb925b73e62579bca0d538daa44a6add35a07ecf51d4eb1d4bb284ac1bd262af47c5145e727be930f3d9d8d39eb2933feb6c7bc869fbf14e97d26fd93ef3746c8c67fcc29354427ec4db0c5850b3cf5a0698a12f3715de474df5d089fc5a6f4818d74ca40e0eadc901e7da8f6b865a05180b9b309c202720bb408e9a8f70f47b816f9b3ea877dd8e4112d9cc728d5ca04aaf9b20243717ae050db356e146919e65432476ac4dc470c51404c35a7a694ac3346d37b12bbaa55928fbeaee6b63461e4b9b39c3ed67301b9c165370ec1f9ae8acd774c0701f28c1013040d56da237c9c72528b67d01a1bf1510551357214226dc12fddc229bff1febabb201bbed6d7d7b2e557e6c8fc5a31128c32441b2cb013a24303b9b9969f365fd3e51f3423c647c558dac140339804829c15c3be3a1d0691a9201ff033d6b517be0dd74af2938f994a672035d8ab9e6deaee831f7cdad88f9e109bfd3e7c24ce8b9d1174a13d611755464ac4dd710c06b6342820706cd905e6bc35e93593bf50e241031e650b87dc2c0484b01822f7a4e1c6a62013d94fea7f1ace1c3da4c3638fe93fb8607d5688038a7f7a441825828ebfc76f0778f263fbcedd14fbb4eb455985ce7e9d550db764034a740df3e215a107befdcdfd57102a4821ecd0886a6df71f745e77cca9b4c3e52c323d17568500a001430494385e52e6e7127b3c7328b71bf527fbcf82f69bbde35e9d047c1e668496b49408f6320051af9e4b5e2524469b8994d1be27f5ebe63706d842a169ab2e94ed66c90714e89af7e3d894e018471c2b93ea40b2c22a395151902fcb37796660f0abe2c8f88216d0f7f4d3d6f83eefdbcd3c26008fbdf07827c73bdfa268d043cf57fb354e1c6294fca9989946d8735a4314fcbe1eed1e6ad8e873213c8acd6a371d2bc33462cbc3a9a98559f548c0fdece8ea591c03a46ef6088b5588f88b262558d9f7798b84d853ff13652e224456bbf084edbca4dca9a9a51a22843c01fb6ed02e1eb0b13615bc8fc20ccbbe9816f6a5d4f70afab1b5fad0e1a607251ff54e5312c65bb7076697228de29be325191b2968d67fc927b33e1ecc7ccf6e6ec299d43f066671be798db42f842abd5d4adb2678c2b9de3f3822a0051f9a6b456d83435c7b9f31e2f83992e855a57701f8c859f33b69a0506b120fd9f5e5798c8e4fb65801d2affc6311538eda7657951547c88395be5078efcd5235f6532a82faf87d5fd8438377ba1eb70d9bb397880467859fb09e28eda2c894ae2b355cac2194602b8e673f0d1eaeafad9aef4a62186cca9cb51d9b82f19c4537f344d3dbd06ac7c169f73c9f91ad723d59e11619ffd762c9e15ccfc659b5d4fb2a2b525a74d728c98ad478eac5ef4d646b14d53f20507a57fa4ab545f62def8776ee8264b82adff5bf6625c8ddf3af945535f064d855bbb9aad9e63681aabf4810714bba8410942bccc23e964cbee2fa01d6452ced6feed1f67a79b", 0x72f}], 0x1) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x10, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f00000002c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000540)='batadv\x00') 09:04:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$security_ima(r2, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000200)=@v2={0x6, 0x1, 0x11, 0x3, 0x42, "363a2ca82d6412200c233401521209d5c4ecf5e27a2b154f817f8ca0b87df8de2dff7a390a73484300fdc1c747dbfb9d3fab3506c7ce50cec4a3a8700794d27ccfc9"}, 0x4b, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x4, 0x1, 0x1, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x3, 0x4, 0x6, 0x3, 0x8000}, @generic={0x9, 0x9, 0x9, 0x800, 0x8000}, @alu={0x4, 0x0, 0x7, 0x3, 0x0, 0xfffffffffffffff8}, @ldst={0x2, 0x1, 0x1, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map={0x18, 0x8, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x7f}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x78) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) 09:04:46 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ftruncate(0xffffffffffffffff, 0x200004) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000000000)='./bus\x00', 0x40802, 0x21) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000300)=0x6) fcntl$setstatus(r3, 0x4, 0x42000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x0, 0x7, 0x2}) sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r7, 0x0) write$P9_RWALK(r7, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r8 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0xa) dup2(r7, r8) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8001}, 0x0, 0x7, 0x80000, 0x0, 0x5f7, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:04:46 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x844, 0x8, 0x0, 0x2, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)="322901ed7cb6fe00062e14d27b9b6782f57e2436c3e62f9ff70c28d5e36543d10902666c870d58441d63f969b1e7b501eafc877d4151592002953112f3b518a09105066013ed4762e229fa94ad85e1fa169bf7fefecf374492749ff1d59126a05865f0055018eb9402911255951076c60c7e8afc", 0x74) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x400, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="080005", @ANYRES32=r6, @ANYBLOB='\b\x00', @ANYBLOB, @ANYBLOB="20af33c72555b17f4180006b59717761cef3d249af4205f513a1a33e3f869a78735c3acd0b5ccc861db180881f3770d731a25460000b87595f4eab9a2e2ea2ddaa1415b610205c283567cb696179fbe1a07700d022009a265a528919762c7da2439c7638c31a", @ANYBLOB='\b', @ANYRES32, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x16, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x400, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000002060100070000000500040000000000100003006269746d615449e59e829be02f458574703a706f7274001c0007802d00054000000000060004400000000008000600000000000900020073797a3000"], 0x64}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT=r8, @ANYRES32, @ANYBLOB="00017742c7d30300"/22, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYBLOB="acbb24fdb77d9fc72075d29bfe316d3d5aa4524cb4458b610317d503b7b3383fee7049a933661933f03f399ad56ca3e8ed5d538a1431e036d4f0189194775a514f69af8fb4f5f8a538daaeefd8345514e097ef7e6304b9dd2a91a09aaba8e5906d4670f5fc6fcd7d1afe69d600cec10608cfabcd7d90c919ef36ef9e4a021a6162a6e6e38a54cfa5de008aba648f5b619aae6c567055dd45eab50c59f9342afdfc7500d31e8fc3a7f8306ceeb06f351e25b24b39a9292197e1b26843f000"/201, @ANYBLOB="9dc6ebe685af4c34ddb24820ff1348918819a0e4437c1c42fa4d425b9003067ec43458006023acf31f", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="080005", @ANYRES32=r7, @ANYBLOB='\b\x00', @ANYBLOB, @ANYBLOB, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x16, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4000, 0x100, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x400, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="080005", @ANYRES32=r10, @ANYBLOB='\b\x00', @ANYBLOB, @ANYBLOB, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x16, 0x0) r11 = getegid() statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x400, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="080005", @ANYRES32=r12, @ANYBLOB='\b\x00', @ANYBLOB, @ANYBLOB="17aafd1ce58196df921fd78c117d45b62baf941e607eaa47dd837aa7e242d4cf6209fae28e439abf41", @ANYBLOB='\b', @ANYRES32, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x16, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x3}, [{0x2, 0x4, r4}, {0x2, 0x3, r2}, {0x2, 0x1, r5}, {0x2, 0x6, r2}, {0x2, 0x0, r2}, {0x2, 0x0, r2}], {0x4, 0x2}, [{0x8, 0x0, r6}, {0x8, 0x3, r7}, {0x8, 0x3, r9}, {0x8, 0xc, r10}, {0x8, 0x0, r11}, {0x8, 0x1, r12}], {0x10, 0x5}, {0x20, 0x2}}, 0x84, 0x2) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r13 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r13, 0x29, 0x39, &(0x7f0000000280)=@dstopts, 0x8) sendmmsg(r13, &(0x7f0000000480), 0x0, 0x80) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 09:04:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000240)={0x5, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0xff}, {0xff, 0x7, 0x0, 0x403}, {0xffff, 0x0, 0x80, 0x1}, {0x7, 0x8, 0x4, 0x9}, {0x0, 0x0, 0x0, 0x2}]}) r1 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_disconnect={0x0, 0x5516, 0x8}) 09:04:46 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 296.781213][ T8918] usb usb7: usbfs: process 8918 (syz-executor.5) did not claim interface 0 before use 09:04:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000240)={0x5, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0xff}, {0xff, 0x7, 0x0, 0x403}, {0xffff, 0x0, 0x80, 0x1}, {0x7, 0x8, 0x4, 0x9}, {0x0, 0x0, 0x0, 0x2}]}) r1 = syz_open_dev$usbfs(0x0, 0x40000000909, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_disconnect={0x0, 0x5516, 0x8}) 09:04:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) r4 = userfaultfd(0x800) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000300)={0x424, 0x4, 0x4, 0x10, 0x7f, {0x0, 0x7530}, {0x2, 0x8, 0x1, 0xb6, 0x1f, 0x0, "d04f12f2"}, 0xd7, 0x2, @userptr=0x2, 0x7fff, 0x0, r4}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x3, r2}]}}}]}, 0x38}}, 0x0) 09:04:46 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 296.807532][ T8918] usb usb7: usbfs: process 8918 (syz-executor.5) did not claim interface 0 before use 09:04:46 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 297.018894][ T8926] usb usb7: usbfs: process 8926 (syz-executor.5) did not claim interface 0 before use [ 297.087121][ T8928] device sit1 entered promiscuous mode 09:04:46 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:47 executing program 0: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="9b80b6df", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xffffffffffffffc0) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000700)) r3 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) r6 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) keyctl$setperm(0x5, 0x0, 0x202002) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000001000100", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="0200", @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32, @ANYBLOB="02000000", @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32=r4, @ANYRES32, @ANYBLOB="080002", @ANYBLOB="08000500", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="080003", @ANYBLOB="08000200", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7], 0x1a, 0x0) 09:04:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x1000}, 0x1c) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) getpgrp(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="5211a579386800841da4a3a200000000000000000000a736e8313f7e000000000000", 0x22, 0x57, 0x0, 0x0) 09:04:47 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) r4 = userfaultfd(0x800) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000300)={0x424, 0x4, 0x4, 0x10, 0x7f, {0x0, 0x7530}, {0x2, 0x8, 0x1, 0xb6, 0x1f, 0x0, "d04f12f2"}, 0xd7, 0x2, @userptr=0x2, 0x7fff, 0x0, r4}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x3, r2}]}}}]}, 0x38}}, 0x0) 09:04:47 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:47 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000000) [ 297.593473][ T8955] device sit2 entered promiscuous mode [ 297.682180][ T8954] overlayfs: filesystem on './file0' not supported as upperdir 09:04:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x1000}, 0x1c) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) getpgrp(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="5211a579386800841da4a3a200000000000000000000a736e8313f7e000000000000", 0x22, 0x57, 0x0, 0x0) 09:04:47 executing program 5: gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) r2 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.events\x00') r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='memory.events\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x1f, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0xfbffffff00000000, 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r7, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_dccp_buf(r7, 0x21, 0x1, &(0x7f0000000280)="2a26f360161c46b466a0790624cc3bae9fbbb2686cde7c72ddfaa794b251b42999a47f11bbe8eb3573582ff3edad274c644a55f82262a1a8467002e59b56122a34ca1ab8eb31fc1cd22b7ded204c95a9c413f6fcaf408d7baf100a90a623d0fdd762f08ce4f879e8c20effb9fbf258d720763cf7820fa0e15b2f48429db88b4c0547471c7a007f5753dd48f37b0b5333d7fe07b129ae8f65b2ca8cd1932531", 0x9f) 09:04:47 executing program 0: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="9b80b6df", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xffffffffffffffc0) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000700)) r3 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) r6 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) keyctl$setperm(0x5, 0x0, 0x202002) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000001000100", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="0200", @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32, @ANYBLOB="02000000", @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32=r4, @ANYRES32, @ANYBLOB="080002", @ANYBLOB="08000500", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="080003", @ANYBLOB="08000200", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7], 0x1a, 0x0) 09:04:47 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000000) [ 298.042924][ T27] audit: type=1804 audit(1581325487.847:39): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/28/memory.events" dev="sda1" ino=16640 res=1 09:04:48 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x100000000) [ 298.190971][ T27] audit: type=1804 audit(1581325487.997:40): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/28/memory.events" dev="sda1" ino=16640 res=1 [ 298.261912][ T8979] overlayfs: conflicting lowerdir path 09:04:48 executing program 3: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f000031aff8)) r1 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000040)={0x8, 0xcbf}) sendmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="2c51e96ffd7f0ca1ad46883eb7d5c36829ea6d912dbe19367965c1016d25d66366370f", 0x23}, {&(0x7f0000000040)}, {&(0x7f0000000080)="1948ac76b4827864260a24961dd505ea6ef2a9b6c7e82475fb350774bf3c3d17071a5594d71f22a78288378cd2e8adbff76e7b2e77f2b12d6bc13b30c3113a4327ec6b5177e39c47f753eeaf9a614e44be7f3fb6cf855a450f2b95902725dd878c4d9788db72fb4c8594104bd48bc50f67c06c1dea80c475b550fc0d4c9661a53982dc8078479a6728ff39962e0f8e570ed2933037cfe89b6d72b9641578663313a2e713296ca631b065d77c788a808cfc67a3bd37e9ea081804fddf60ad6758aeb86f086581d88596a2ce9440de3f39d72acdbf2f2ef4ca6a644e6cbd0802fcf81636e279ec1dcc55738150b0e85091062581f244b920", 0xf7}, {&(0x7f0000000180)="555728e5eed1356e628d32db3aaeb7ce63c563981bf31c6ff92cb73482e3be9782866411a84e99b1f89eca698c63b581", 0x30}, {&(0x7f00000001c0)="1c760a2363e6dbb289f5d48dc69e4c5b9a6318dad827f05447499387dfaf05a9704ed04f12611e66bf1a6611210f73bb3ba837d4c39b154ba6af4f99d53960875be95a31730d61ef9706f192bc47336430ce83e68ca6770ed34687ddd1cea3ada43381b2828ed4fcef3575a28f81c0a6ea67fe0bc8149b390606febd26888cb247456a9c4f169209411ecf6dcc084b87c34bda62db55499a8388d212606367c9306210ad7deea9f50793dba2c0ccbab650e9feb801e5b44418154a2b0a75376d3ab6dd6df2e29dd462b584f8c27d5490d99178031c044be0a326770f00"/232, 0xe8}, {&(0x7f00000002c0)="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", 0xff}], 0x6}}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @random="ab2059c60c96", 'veth1_to_team\x00'}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)="07f59913ebdc1246909f5756402e7a89d99ee3269dad929f9c39f1869fbaeb50ce752f38dc1bd0e214535f75bf528bbb6daf109d16c72311324fa3f5e59fe3a3be5641e51dfbecaf322c763299e2026e92546b7e4da3978209af404bda994c8c79439884ea1cff07167ced100f664376e1cda63080ecf308c53f54448290454d58b83b6abc112515ac0dac9c1a7fc136456ba3e1441f2d0b6ea2b72609708fcc9473", 0xa2}, {&(0x7f0000001c40)="fd9a47992027b7a919fa690a1dc38d02c34e165968f1c59765a6ee6a07b725173b8e6212fee1d2e85075319a837913ae08d1ecb0fed95a2d4a0423946dbfc88aba6eff5d2ae9653f5dee6ce2af527e9f6fe2f52eac4e113bc83280892023478cb9762d5259a4681bcd7cb40e378c22bdec5c4f95e204179a170194d219d96c411922fae5ca73d757060c51f2abb5e764fcfbd6272507cce2221a7af03298984c22f313e2644ce6b32ca261a7c637aa5eea11e4d744fcf302e42039becbd85a79da41be6c3593b0ef1b", 0xc9}, {&(0x7f0000001c00)="eefba3312ee1b8e671", 0x9}, {&(0x7f0000000680)="224ea6ae6122d21b07c39a7f9b5d99f59b1e23bcb579dfea457057ebd62aa5ba4339fc4a25d4aa24abe0f08f8f3cb211f7df15303e8150f1edbd1419527cfce7612f622c3b822090e3346502b951c660a1c00793b9dcd74c35af4a5a464ffc9cd8f6e59f0887d0695bebae471084696679dafa5c0d92b5f8d62ebe36409e2391a7172aa43f8e3e9aa2d94e7eb1fefca4b4dd1dd3ff802c96befa34c9d62a3cd9df4e0b80853a8e3c69b4e8b698a99537ceebfe105b51a417cc775c26547f724d761a05a81ed6f49e353721736ddb36", 0xcf}, {&(0x7f0000001b40)="f97f685285072fee896c6f1d3e0d1ea05666f871c3a347b7c486df399606eec0327f4f6b2fb0b909bc4746d376d78cc8aa76a627ec29d1e9cc09b5e73b01ac3e1f89c2b58248da594e55ed4b6d370c624235ee041cd5d0e453fbaa2d6b8ad73e25ac7c524adcbe8de35e22e3a7305f9a77983aedc29bcc870aa092951581d17d2f6943b76f31a04a78dbe387f7f7e18db31058f9301bcfc6f597b3ff8b6759e91bfa", 0xa2}, {&(0x7f0000000840)="6c84dbace48d7c284bab980806caaf49dc0247bd8acab3ee7750a5b2723d60b6f644bbd4b889cfc28aa7782b342c6872f12e24", 0x33}, {&(0x7f0000000880)="dee161f11bdd6e93841c6125ba2919511b22a8e5d6bcebc0592afe44167c80bac23f3ad83188050548c05add93268d561c2eb4f3", 0x34}, {&(0x7f0000001b00)="a2afdf3e7d5d41e211d7380c89d2af8df31a2eb000974ca68bf6", 0x1a}], 0x8, &(0x7f0000000980)=[{0x1010, 0x10d, 0x9, "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"}, {0x28, 0xff, 0x8d, "cdbe1d19bdbdca01b50e394d76c8883dacc0014e4ae80683"}, {0x90, 0x112, 0x1, "4932d2347f05c111fa9ad95684205845b197ec4e95e0d791a9f1e5310af97e9d6480fb073d5a17c4e5e8f1d638892025a2123dea4b857e2cd1be495814c0ca3c9748260dc80ec1f7cad6132030af1fa6fe006ecf443ce669b438c4706604dcc486728a9c7ab565dac33dc1ae48cae3cfbf1b878ebbacfc0908e0315d"}], 0x10c8}}], 0x2, 0x0) 09:04:48 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:48 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000280)=0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = getgid() statx(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x400, 0x800, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000001140)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32, @ANYBLOB="020004", @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100f9cec17a47486ad9ca0c52b4b7936a0cdc4f9b784d45997418c75df92f6214ae5d927ec26e3ebb4aace394bcdb6571621eb5978b56ae788ec4976cedffbddfc31cd27e57e90b4b340e3b886700f440465a71f74e8b8d5d69b4b1aa0e40b9b8a72fa6de98f77600316dc343a7cb63cd7657bdb42a7071c51d051ae66f4f428424a6d7369809486407e67fbbd2955c146d34def3ec755636d5d9d28dfd50c3760bf8415d70f893cc593433409878ca9ed2bc23f54965ce053fde69edfacb3708aa39751fc3aef41efd38491d8633fb2e1ce3ab28668c3302", @ANYBLOB="0200", @ANYRES32, @ANYBLOB="3ad308009528a3603413befe59a1b5872aef26c3d2e2a4d56ea2bdb791d9a7744d443fbc4d3e6028f5d440877f806d4e71b077868b8de9ac599733ec8022adde3a73c6faade77f36b6644b0fb8e6c55cc3c9ce22eed68a5fa2b3c33a7e1ec400b3e5579f4f7df5a84a4eb3a56c3ec03c079514184efb93ed457fae716430404fff675ac9d82d9e950163cf0c1b3f365fddf3", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=r4, @ANYBLOB="040002000000000008000500", @ANYRES32, @ANYBLOB="080002", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYBLOB="5feec14296f4ad8eed08000000", @ANYRESOCT=r8, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x20, 0x0) [ 298.435031][ T27] audit: type=1804 audit(1581325488.247:41): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/28/memory.events" dev="sda1" ino=16640 res=1 09:04:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18000, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') getdents(r1, &(0x7f00000000c0)=""/31, 0x77c) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYRES32=r1], 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000440)={0x0, @aes128}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0xc) syz_open_dev$media(&(0x7f0000000940)='/dev/media#\x00', 0x3f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0)='nl80211\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./bus\x00', 0x6, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000480)=""/207) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010003b0400"/20, @ANYRES32, @ANYBLOB="0000f60000000000d659129e750008000100736874000c000200080042ca047d397024ff66996a29818a17c2a94c3a37d2ee64f820f6645fc6705e7a61c6ed5d63dfaf7b77a20deed18722e7870063cfa311d105f01c966232dd242c97dc32c207a9140f567734fad50d4ca40a7ece1dcd3ca89856d34b351f5431d5068cd6e95535c237da7c65ed3b3ca52c3a706935827e8c90d1ed970fc6b3fe6eb79991b56f4f09785021c537bc17f3124c0178c2ea718d71ca6a430b7df23d18f2f7638300000000", @ANYRES32=r7], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 09:04:48 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 298.604611][ T8991] overlayfs: conflicting lowerdir path [ 298.673658][ T8999] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 09:04:48 executing program 5: gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) r2 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.events\x00') r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='memory.events\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x1f, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0xfbffffff00000000, 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r7, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_dccp_buf(r7, 0x21, 0x1, &(0x7f0000000280)="2a26f360161c46b466a0790624cc3bae9fbbb2686cde7c72ddfaa794b251b42999a47f11bbe8eb3573582ff3edad274c644a55f82262a1a8467002e59b56122a34ca1ab8eb31fc1cd22b7ded204c95a9c413f6fcaf408d7baf100a90a623d0fdd762f08ce4f879e8c20effb9fbf258d720763cf7820fa0e15b2f48429db88b4c0547471c7a007f5753dd48f37b0b5333d7fe07b129ae8f65b2ca8cd1932531", 0x9f) 09:04:48 executing program 0: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="9b80b6df", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xffffffffffffffc0) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000700)) r3 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) r6 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) keyctl$setperm(0x5, 0x0, 0x202002) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000001000100", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="0200", @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32, @ANYBLOB="02000000", @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32=r4, @ANYRES32, @ANYBLOB="080002", @ANYBLOB="08000500", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="080003", @ANYBLOB="08000200", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7], 0x1a, 0x0) 09:04:48 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 298.793348][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.817953][ T8998] overlayfs: workdir and upperdir must reside under the same mount [ 298.992730][ T9009] overlayfs: conflicting lowerdir path [ 299.023299][ T27] audit: type=1804 audit(1581325488.837:42): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/29/memory.events" dev="sda1" ino=16549 res=1 09:04:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18000, 0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') getdents(r1, &(0x7f00000000c0)=""/31, 0x77c) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYRES32=r1], 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000440)={0x0, @aes128}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0xc) syz_open_dev$media(&(0x7f0000000940)='/dev/media#\x00', 0x3f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0)='nl80211\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./bus\x00', 0x6, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000480)=""/207) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010003b0400"/20, @ANYRES32, @ANYBLOB="0000f60000000000d659129e750008000100736874000c000200080042ca047d397024ff66996a29818a17c2a94c3a37d2ee64f820f6645fc6705e7a61c6ed5d63dfaf7b77a20deed18722e7870063cfa311d105f01c966232dd242c97dc32c207a9140f567734fad50d4ca40a7ece1dcd3ca89856d34b351f5431d5068cd6e95535c237da7c65ed3b3ca52c3a706935827e8c90d1ed970fc6b3fe6eb79991b56f4f09785021c537bc17f3124c0178c2ea718d71ca6a430b7df23d18f2f7638300000000", @ANYRES32=r7], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 09:04:48 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000280)=0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = getgid() statx(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x400, 0x800, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000001140)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32, @ANYBLOB="020004", @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100f9cec17a47486ad9ca0c52b4b7936a0cdc4f9b784d45997418c75df92f6214ae5d927ec26e3ebb4aace394bcdb6571621eb5978b56ae788ec4976cedffbddfc31cd27e57e90b4b340e3b886700f440465a71f74e8b8d5d69b4b1aa0e40b9b8a72fa6de98f77600316dc343a7cb63cd7657bdb42a7071c51d051ae66f4f428424a6d7369809486407e67fbbd2955c146d34def3ec755636d5d9d28dfd50c3760bf8415d70f893cc593433409878ca9ed2bc23f54965ce053fde69edfacb3708aa39751fc3aef41efd38491d8633fb2e1ce3ab28668c3302", @ANYBLOB="0200", @ANYRES32, @ANYBLOB="3ad308009528a3603413befe59a1b5872aef26c3d2e2a4d56ea2bdb791d9a7744d443fbc4d3e6028f5d440877f806d4e71b077868b8de9ac599733ec8022adde3a73c6faade77f36b6644b0fb8e6c55cc3c9ce22eed68a5fa2b3c33a7e1ec400b3e5579f4f7df5a84a4eb3a56c3ec03c079514184efb93ed457fae716430404fff675ac9d82d9e950163cf0c1b3f365fddf3", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=r4, @ANYBLOB="040002000000000008000500", @ANYRES32, @ANYBLOB="080002", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYBLOB="5feec14296f4ad8eed08000000", @ANYRESOCT=r8, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x20, 0x0) [ 299.188806][ T27] audit: type=1804 audit(1581325488.997:43): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/29/memory.events" dev="sda1" ino=16549 res=1 09:04:49 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) 09:04:49 executing program 0: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="9b80b6df", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xffffffffffffffc0) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000700)) r3 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) r6 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) keyctl$setperm(0x5, 0x0, 0x202002) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000001000100", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="0200", @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32, @ANYBLOB="02000000", @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32=r4, @ANYRES32, @ANYBLOB="080002", @ANYBLOB="08000500", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="080003", @ANYBLOB="08000200", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7], 0x1a, 0x0) [ 299.340571][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.359465][ T9020] overlayfs: conflicting lowerdir path 09:04:49 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000280)=0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = getgid() statx(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x400, 0x800, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000001140)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32, @ANYBLOB="020004", @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100f9cec17a47486ad9ca0c52b4b7936a0cdc4f9b784d45997418c75df92f6214ae5d927ec26e3ebb4aace394bcdb6571621eb5978b56ae788ec4976cedffbddfc31cd27e57e90b4b340e3b886700f440465a71f74e8b8d5d69b4b1aa0e40b9b8a72fa6de98f77600316dc343a7cb63cd7657bdb42a7071c51d051ae66f4f428424a6d7369809486407e67fbbd2955c146d34def3ec755636d5d9d28dfd50c3760bf8415d70f893cc593433409878ca9ed2bc23f54965ce053fde69edfacb3708aa39751fc3aef41efd38491d8633fb2e1ce3ab28668c3302", @ANYBLOB="0200", @ANYRES32, @ANYBLOB="3ad308009528a3603413befe59a1b5872aef26c3d2e2a4d56ea2bdb791d9a7744d443fbc4d3e6028f5d440877f806d4e71b077868b8de9ac599733ec8022adde3a73c6faade77f36b6644b0fb8e6c55cc3c9ce22eed68a5fa2b3c33a7e1ec400b3e5579f4f7df5a84a4eb3a56c3ec03c079514184efb93ed457fae716430404fff675ac9d82d9e950163cf0c1b3f365fddf3", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=r4, @ANYBLOB="040002000000000008000500", @ANYRES32, @ANYBLOB="080002", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYBLOB="5feec14296f4ad8eed08000000", @ANYRESOCT=r8, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x20, 0x0) 09:04:49 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000280)=0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r5 = getgid() statx(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x400, 0x800, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x202002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000001140)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32, @ANYBLOB="020004", @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100f9cec17a47486ad9ca0c52b4b7936a0cdc4f9b784d45997418c75df92f6214ae5d927ec26e3ebb4aace394bcdb6571621eb5978b56ae788ec4976cedffbddfc31cd27e57e90b4b340e3b886700f440465a71f74e8b8d5d69b4b1aa0e40b9b8a72fa6de98f77600316dc343a7cb63cd7657bdb42a7071c51d051ae66f4f428424a6d7369809486407e67fbbd2955c146d34def3ec755636d5d9d28dfd50c3760bf8415d70f893cc593433409878ca9ed2bc23f54965ce053fde69edfacb3708aa39751fc3aef41efd38491d8633fb2e1ce3ab28668c3302", @ANYBLOB="0200", @ANYRES32, @ANYBLOB="3ad308009528a3603413befe59a1b5872aef26c3d2e2a4d56ea2bdb791d9a7744d443fbc4d3e6028f5d440877f806d4e71b077868b8de9ac599733ec8022adde3a73c6faade77f36b6644b0fb8e6c55cc3c9ce22eed68a5fa2b3c33a7e1ec400b3e5579f4f7df5a84a4eb3a56c3ec03c079514184efb93ed457fae716430404fff675ac9d82d9e950163cf0c1b3f365fddf3", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=r4, @ANYBLOB="040002000000000008000500", @ANYRES32, @ANYBLOB="080002", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYBLOB="5feec14296f4ad8eed08000000", @ANYRESOCT=r8, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x20, 0x0) 09:04:49 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) 09:04:49 executing program 1: gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) r2 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.events\x00') r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='memory.events\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x1f, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0xfbffffff00000000, 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r7, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_dccp_buf(r7, 0x21, 0x1, &(0x7f0000000280)="2a26f360161c46b466a0790624cc3bae9fbbb2686cde7c72ddfaa794b251b42999a47f11bbe8eb3573582ff3edad274c644a55f82262a1a8467002e59b56122a34ca1ab8eb31fc1cd22b7ded204c95a9c413f6fcaf408d7baf100a90a623d0fdd762f08ce4f879e8c20effb9fbf258d720763cf7820fa0e15b2f48429db88b4c0547471c7a007f5753dd48f37b0b5333d7fe07b129ae8f65b2ca8cd1932531", 0x9f) [ 299.791086][ T9037] overlayfs: conflicting lowerdir path [ 299.861035][ T9034] overlayfs: conflicting lowerdir path 09:04:49 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) 09:04:49 executing program 0: gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) r2 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.events\x00') r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='memory.events\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x1f, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0xfbffffff00000000, 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r7, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_dccp_buf(r7, 0x21, 0x1, &(0x7f0000000280)="2a26f360161c46b466a0790624cc3bae9fbbb2686cde7c72ddfaa794b251b42999a47f11bbe8eb3573582ff3edad274c644a55f82262a1a8467002e59b56122a34ca1ab8eb31fc1cd22b7ded204c95a9c413f6fcaf408d7baf100a90a623d0fdd762f08ce4f879e8c20effb9fbf258d720763cf7820fa0e15b2f48429db88b4c0547471c7a007f5753dd48f37b0b5333d7fe07b129ae8f65b2ca8cd1932531", 0x9f) 09:04:50 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000000) [ 300.224087][ T27] audit: type=1804 audit(1581325490.037:44): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir240241305/syzkaller.Jo2VA5/31/memory.events" dev="sda1" ino=16488 res=1 09:04:50 executing program 5: gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) r2 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2}, 0x3c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='memory.events\x00') r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='memory.events\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x2761, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x1f, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0xfbffffff00000000, 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r7, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$inet6_dccp_buf(r7, 0x21, 0x1, &(0x7f0000000280)="2a26f360161c46b466a0790624cc3bae9fbbb2686cde7c72ddfaa794b251b42999a47f11bbe8eb3573582ff3edad274c644a55f82262a1a8467002e59b56122a34ca1ab8eb31fc1cd22b7ded204c95a9c413f6fcaf408d7baf100a90a623d0fdd762f08ce4f879e8c20effb9fbf258d720763cf7820fa0e15b2f48429db88b4c0547471c7a007f5753dd48f37b0b5333d7fe07b129ae8f65b2ca8cd1932531", 0x9f) [ 300.341489][ T27] audit: type=1804 audit(1581325490.137:45): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir053766896/syzkaller.QJ15cZ/29/memory.events" dev="sda1" ino=16652 res=1 09:04:50 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0xc400, 0xcc) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x8) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x1f5) sendfile(r1, r2, 0x0, 0x10000) [ 300.457895][ T27] audit: type=1804 audit(1581325490.227:46): pid=9052 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir240241305/syzkaller.Jo2VA5/31/memory.events" dev="sda1" ino=16488 res=1 09:04:50 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000000) [ 300.589192][ T27] audit: type=1804 audit(1581325490.317:47): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir053766896/syzkaller.QJ15cZ/29/memory.events" dev="sda1" ino=16652 res=1 [ 300.710616][ T9046] syz-executor.1 (9046) used greatest stack depth: 10088 bytes left 09:04:50 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,sq=0x0000000000000001,timeout=0x0000000100000001,timeout=0x0000000000000001,sq=0x0000000000000001,sq=0x00000000000001ff,sq=0x0000000000008000,obj_type=@&,mask=MAY_EXEC,subj_user=/dev/vcsa#\x00,rootcontext=staff_u,uid=', @ANYRESDEC=r3, @ANYBLOB="2c5be78584187047a1fa52c13386a1c808089e40447600"]) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0xa0402, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x2000000, 0xf7ff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x0, 0x9, "778cc818"}, 0x1, 0x0, @planes=0x0, 0x7, 0x0, 0xffffffffffffffff}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0)) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000240)={0x4, 0x100, 0x1, {0x8, 0xe, 0xe9c, 0x9}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r9, 0xc0044306, &(0x7f0000000300)={0x8, 0x0}) r10 = dup(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_MASTER={0x8, 0xa, r15}]}, 0x28}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@getlink={0x3cc, 0x12, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r15, 0x10060, 0x8010}, [@IFLA_TXQLEN={0x8, 0xd, 0x55}, @IFLA_IFALIASn={0x4}, @IFLA_VFINFO_LIST={0x214}, @IFLA_VFINFO_LIST={0x18c}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x10010030}, 0xc0080) socket(0x10, 0x803, 0x0) r16 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r16, 0xc0044306, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001045393", @ANYRES32=r18, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="54050000000000000006c0000000000000040000", @ANYRES32=r18, @ANYBLOB="600001001080000008000d00550000000400140078031680b0011680"], 0x554}, 0x1, 0x0, 0x0, 0x10010030}, 0xc0080) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x5) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x40, 0x200c02) fcntl$getown(0xffffffffffffffff, 0x9) 09:04:50 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3bd, &(0x7f0000000200), 0x190, 0x0, 0x0, 0x20000001}, 0x20000004) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x159, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000020008102e00f80ecdb4cb9020200000001000000810040fb12000300040fda1b40d819a906000500000f", 0x33fe0}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x4, 0x3, 0x3}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)="691014714705fe6d153740ca0553b2b2a3fbdc0558a16f67022b56f3612e195362089aac7754e5cdf310195cba4e3d0b41b70c486729de192b68538ff1ac1de0105b949ec80a0e5ca9be4623d09c9ec38109cb952b75aad833458074460350897bf2aa006ce5", 0x66}, {&(0x7f0000000800)="58e639094d286d817fe424548868bf3dd1df162cf54fdea63316d4e21c6b57b1c99905b9268af49019958f049922939bbb379537a4e3b4c2505c8b1d7c6ecb9946d40dd3028d3c6eac95fb289a2878ee1607b473fa6183d0c4d51d84a6926e74c0c98316ed8356315af72a", 0x6b}, {&(0x7f0000000900)="eac7ead69222d048f097d09deb2bf00611af8660056d5e1bc57841cfa0a06e5312430783c574c1e4e9cbed8fb1a719933a795d0239e6f1a4b81b74eb96402f2c6a8e00b5e9d43a3c7093ca2a9c0c41277011ead57d812ed71fd2af0d", 0x5c}, {&(0x7f0000000980)="06bf806b81a4cc524f13a93e33c42265937447cb22f5958edd69e7b1e095b657275c7c0162469880d47281924e5eab0a6ff21bb733833ee86eba9f483222863251ba09ffb4ecd9b5ce9705a2a8b04f60db45d4e7c4757f76a55973f5be64e0", 0x5f}], 0x4, &(0x7f00000034c0)=ANY=[@ANYBLOB="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"], 0x228}, 0x44001) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000240)="30f93e012ba0bbf346c11d29b6f2867c949177059f68697c711d3497654afe068379c9e6307d64362ea4998467added36a7ebcabdc4d0139afd4659d24c0ebcf857e187d2ffe7f5bb673a5e612c1bf796f74dac91fccdbead9109ab28af88eb351aa92bd4271221268b965fea0eccc8f70f2c4aa2963b83df5b7a32e734fc635ba0058d51c659a223b", &(0x7f0000000040)=""/1, 0x8}, 0x20) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x70, 0x2c, &(0x7f0000000780)="0b103b78a8b93d4dced0270743aff9f190537b8a6da027a3cadb4abbb26daa34a6ae55907dfa02a21f5246549dc7fb3d49ac07573f6457f2d60062629b85d3b400832d7271bbfd8808e44a3b58a5560e9ad7542db5f3b4f801a578fa52839aa3a85650a4797f28ac38bb1445cb240343", &(0x7f0000000400)=""/44, 0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001200)="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", &(0x7f0000002200)="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"}, 0x40) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xfb, 0x96, 0x0, 0x8, 0x0, 0x2, 0xc049, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff74af, 0x2, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x2, 0x7, 0xb122, 0x7fffffff, 0x23f}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x0, 0x7, 0xfe7, 0x0, 0xed, 0x48c0, 0xc, 0xff, 0xa, 0x0, 0xa7, 0x0, 0x1f, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x7, 0x7, 0x80, 0x0, 0x0, 0x10001, 0x7, 0x80, 0x0, 0xc5, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x4080, 0x3fe, 0xfffe, 0x0, 0x48f, 0x9, 0x5}, 0x0, 0x8, r6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) gettid() r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x2, 0x70, 0x40, 0x0, 0x0, 0x7f, 0x0, 0x9, 0xa80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x14c2, 0x1, 0xfb46, 0x14, 0x94d1, 0x800080, 0x1}, r7, 0xa, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0x2, 0x2000000000003, 0x2) r9 = syz_open_dev$media(&(0x7f0000000640)='/dev/media#\x00', 0x800, 0x400000) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000003200)=ANY=[@ANYBLOB="00a18255f288afabbe9e916f0a4ae501f8a4fb44e0352cf95f890e95b8b28e090126035f6fe20f1b3502ae6b7c3bf88f2b7e1643c75f0d67f4ad5d48451731cfebf438db348de22e20b6092d82a1b573f93551c479eca6a2a862f20ef313d2d562347b38cdd06e95de68d7a4d0a19285acea16f42543fa2b894d4944447d2d63f13c254f446414cf7555f953aad2e10472ee79b0b3d8fee08d410e81608509616d348a144c96955fff2530dd441a1a0c19431cab415bc54a56dd35363bbe41c7baa11bad97bbf71cceaf05b0892caa6fddf0b658be3e2ce4dad54db013ad8532a576ac4549b1fa74835a27239fd8004c0a00009cd55937c8a8c935c32ec2cbe290b542961774a9d2e8ef1b14fe6553a972bf90bdaee1889c9bf7015e139b76fabb32ad5a7e84cef6a5af296d76dd1a923d8d96a1ec33c345f702d7d95e03a2892b0f9ce898333165ad26e96229b9a859eb7fe1280b8940231bf9945b6147ac406808c015797178aeae94da2072079c513d80e3b797d91749072ba442ad1141735aca12d0df3ccb6688cf93e3b947a93845901c5329c1fb973be735a0df174cdddb930f46e34d2daf942f330fc0a384f6c3de057190df3fb5760d5c6c894bc3728025c0e54f2f55903eab6d542f61f5d5705d305f362d131dadba96ee41fafa94b36dc21eeb54cb871353959cd966a5a5aaf6b39cc5c9354a046f177917aa54913539cade09d17f502641bb3cabf65e70d0c61c5ea152373954ce5628bbd9ff58da03c165bc2623dc3fa2e75fab83c58ee941ef59bb68ac6ad6de8b3ec3d840ed030ef9169ffdfc28c871a713c70573c7668a1757ee3752ae3931e8d5b844244b8f2a29940da779ac42159b1d5ee0ac94508f76d38344cc7c62d4bfe1a0b1b750960c369cf2e8999d29a71f89e98d0ce0"], 0xe) close(r8) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r14}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f0000000880)=@can={0x1d, r14}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 09:04:50 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000000) [ 300.815262][ T27] audit: type=1804 audit(1581325490.627:48): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir054234206/syzkaller.nhneLb/31/memory.events" dev="sda1" ino=16625 res=1 09:04:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c0363a026bd7000fedbdf250000040072cc0008000700210062620000050092000000000000000000005dc0ab2e68bc8c0ac19f02136866f8d9b68272f7ee3075ac0cd02dff586c3ea348d043f5bf2777dceb92aca7c46c1dd5e7a378258026833d02bd45d72c000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x9f4e9445ee478933}, 0x8a4) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) listen(r0, 0x0) 09:04:50 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x0) [ 301.065934][ T9077] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 301.196979][ T9085] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 09:04:51 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3bd, &(0x7f0000000200), 0x190, 0x0, 0x0, 0x20000001}, 0x20000004) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x159, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000020008102e00f80ecdb4cb9020200000001000000810040fb12000300040fda1b40d819a906000500000f", 0x33fe0}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x4, 0x3, 0x3}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)="691014714705fe6d153740ca0553b2b2a3fbdc0558a16f67022b56f3612e195362089aac7754e5cdf310195cba4e3d0b41b70c486729de192b68538ff1ac1de0105b949ec80a0e5ca9be4623d09c9ec38109cb952b75aad833458074460350897bf2aa006ce5", 0x66}, {&(0x7f0000000800)="58e639094d286d817fe424548868bf3dd1df162cf54fdea63316d4e21c6b57b1c99905b9268af49019958f049922939bbb379537a4e3b4c2505c8b1d7c6ecb9946d40dd3028d3c6eac95fb289a2878ee1607b473fa6183d0c4d51d84a6926e74c0c98316ed8356315af72a", 0x6b}, {&(0x7f0000000900)="eac7ead69222d048f097d09deb2bf00611af8660056d5e1bc57841cfa0a06e5312430783c574c1e4e9cbed8fb1a719933a795d0239e6f1a4b81b74eb96402f2c6a8e00b5e9d43a3c7093ca2a9c0c41277011ead57d812ed71fd2af0d", 0x5c}, {&(0x7f0000000980)="06bf806b81a4cc524f13a93e33c42265937447cb22f5958edd69e7b1e095b657275c7c0162469880d47281924e5eab0a6ff21bb733833ee86eba9f483222863251ba09ffb4ecd9b5ce9705a2a8b04f60db45d4e7c4757f76a55973f5be64e0", 0x5f}], 0x4, &(0x7f00000034c0)=ANY=[@ANYBLOB="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"], 0x228}, 0x44001) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000240)="30f93e012ba0bbf346c11d29b6f2867c949177059f68697c711d3497654afe068379c9e6307d64362ea4998467added36a7ebcabdc4d0139afd4659d24c0ebcf857e187d2ffe7f5bb673a5e612c1bf796f74dac91fccdbead9109ab28af88eb351aa92bd4271221268b965fea0eccc8f70f2c4aa2963b83df5b7a32e734fc635ba0058d51c659a223b", &(0x7f0000000040)=""/1, 0x8}, 0x20) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x70, 0x2c, &(0x7f0000000780)="0b103b78a8b93d4dced0270743aff9f190537b8a6da027a3cadb4abbb26daa34a6ae55907dfa02a21f5246549dc7fb3d49ac07573f6457f2d60062629b85d3b400832d7271bbfd8808e44a3b58a5560e9ad7542db5f3b4f801a578fa52839aa3a85650a4797f28ac38bb1445cb240343", &(0x7f0000000400)=""/44, 0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001200)="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", &(0x7f0000002200)="dbe948e07dd74166e10a5e27424c1772217a56bc4f8140066d5a90f2e88c1a695fbb0baed201cf6cac0d255cafd1ef1ede15eb667fffd503b0162d4f47c735f2f17c0c84a728ea5f757319dc43ca36382eaabf2c97426b0a1e3ebd8b1c24a4c30cba3c8b528a8d01b172d68bf178c25cad4f6c526f1d6870d26b001d11719ba34d18edb647c5aed611b681f64220a23788b589784c6b969a660543570dd67d6f22aad694b63b67e0dd964f8429f433aae67ee866dc2c056f1a7904f01447d77940d28f64d81ae51775e0700335311f8cad435d4193ce287f656f057a02b9ebe0900485bf4e617b2961cf78877a5c378be8c16dde11139a7840ef6c18f5317d7bf49b00b3934447e1fc8f2936cd4998a7ed2dd90df28c896295376b413e2e1bcd49d0e827192b5eb0f7a401aa3dad6b73d5fccdf29052852bdb1b26b4ceabd4308a15d11a8cc6a4490895e61a7a2bab03bd8fcc1386ae9b5c9233349ece57d33a179d564447d7dc7f96c6c1aae557f4537582369a1892e93db0bded4cef3d417a2868262cb68f2445345c74e8d8e95b19018e4a6a0199863376af63e32c37fdb87235a581c814c67b78a98bfbd2a7930c110995b5cb6769e949a95d3e65fc0c959b578bf0365ee101e2cca741d7c3f60df7944569f82db2d41696e4c55509dabfac95cc2d2a968c9ed6cbe09e42898d518c6c51b2bffb7731811d0accbcdba68ac630d6e4890865516b97072142e39d22fba816cf5d698f0067e4f90cb17851dd518fe48859cc66525511a7cb15e29030f00ab3dc8ef92979f5e5fed9bce0e40284ccf497a0f7f20f8b659a69e092db79107c5dc5ca2139c59d2a5e5cde815c87ed06704aeac8157d66f05b77eae6caf4b46e59a5c587de4ada27b9a93600c0540e8030099ce8fe954ad6199d1dde5b1f9013cfa52b8b92d45c61abbcaf0ddb4c960e12f293ebf9fba7908ca7ae636f2b6232613cc4331fe5b93634a820776b9fc74e94e73f58681b5b1f344fb72758b9e508aafa0e9fcfb36de2eab8b273674425e54a8c2fa703c38a978c26e6f8416274350e1998c030f2a41a22ed74bff8b0fc630007ed26dc55c7d0a234c0f0858d08ae96b3118f777fcb6f871c681a5dddf48a0defe9428004e1d7e72e3ed105fe20afd07857814ccbc15b8ba98501c3213575c9023d0a238a496e6d7835f46cccc3f1aa05aa3b7032fef87e909a5d0dd0141130f10911033555c6602ba577294ab4c71362d6742aaab4d13299a506b314c59d9573d12437d6efdbd2f656a2739650db72c15c2113dab1708ae748f20ee634612e5b6bd0d49a6a437c25e75b1199dc622199a02f478b2fdb2e5afe819d87c9b876a814a1b3b6ab7ae01aff15cbe022fee9ac7a289619d8496c248cf8a280220b34608932e5030fe1cbc3a20d8d69d2704f4b26b5db7a73ed7bb85ee4b0b49719b7d62d5f3ca99b3016f59508cc0ab99118cb6f560f25fe250e0830cd8621e5949fcd11f2905a4c73b05fe05f27547239f4061c9b16969ac59d3d381890b194ecdcfa0fe3202397a2f9cd3212534f8d872789fdb43ba4a8543b2a54dc7f33fd9ad6340d0f8cdbc9061ac174388008792be08d5a99126a1a4fd312a4f6547ad998506c2f3dc680bb5b9d477b3636a31e7979246cfa9e2dbbedb48ed73aa4f762457313b94e319f404bda6a7a246b1f639227f87da59672c5c89f5ba744e3ff9f4cac0c61b6acad7c8a531940c97651f5225e3c30f3eb8ddd6424161ac06ad9605207859579bee0eff2e68a03e7173294f1b160eb1c064165ba9d7bd17d5a2377e562e2371fb1830bff95291bce0f12e6f9567b0a4d44f5dfd0d8376d00a794594d795824d8726b453374c52f88866b298f8ead6de0a6fd3d362c63d247a34d3abcc623ae205fa12e27eb84357a7a04e6a30675bb40d5c43dba8f6e8d2bc34fb38d8f15b0da0902744b88fc1ada6a87e1944de8c3848f584b512283dbd1167593861acad0db9df342017d11e3a9f57429a911a7ee7b0888dc470522493e576b19e77bb62e9085e89c2966ea83440768e90d4a1d4e2a813097bfdc74c888f57f309384310a81dbec3825f445d2d08e97c7b2af83808c60607fae23f91ff4dd3cee8a962f6068c9da68af5b7bb88d56bab5d31463a7a8546f5179da2f7c12ce4c94c24d1d30c0b77184e2e085d7e2163786987e02117fabe05e395a94abb955d8cb5ca16b1cbd03f070c0ead84c38e0ca9243faf381baf14ab4b25700bdd208a9765eef18e052e4b6df08f9ce705fb076bd8908edd9899bd38faadf4a68e62e121e9e7934d5f7e971f453b024765a367ce1cc59fe6cbf0008278353b8c9a0fb4f1b81625edb54dedccbfbb002e2022688af878d3766e77238b8e03fb629735a8a6106a4208b0e9fa02ad61438359c8ee5f24171786a6a342e3cd853bac702770402c042582ddb064b36b18050ad48916eaa1021deca1cebf53b0c37983c274a6730171fdec0460d1cbc1cf69e2f5698fbb567af032aff9684c71d3e33b55d85b90028e7cdb2d84794bb2be45454e83131dfbbbbcbc2c6327c3a243d87c9bae2b58333a5e0b9be2d276ab2529b5d220a4afb2a98d25e084ae15594d60598b712401c9ac88f6d3f9ae13c9b3c5ae8d5059c9a27bedb34e7944a717d84ca4bcb83275b1f6c400c8a0da6d324d3fb1978f9140b7419848119edc941cc8b1d251eee90ca5a247dd7de2b453b9b488340500b25dfaa2ecf3f81521c12f75e834a864f604475ab3b58c689a05fa4657430a478412d677c5f6061d2dc5aba44a164f8eb417381562153746ca879c4d46e95328958984fa905dcbd33519d59355c22c3bd24f5c5dbf2ba670f2ef6b81d1a41319c741141bf0d5ac9cee963c13e3fdd87c1b1e3301edd93b0e733ae2d08c177bdc66fc74a4635f73408df5497a0addc496761c563ecc54c9db36ba12e6910575852a96833b6256c191eadd68eab728f3b5ff9d59159f93a27e2b390b10f8f92ef72c71431fd7038c1afeb5b16cab96cb621995fe845ee9bec58192c52025bad620209c0da227ebfb76b6be02eb87fb46e50c570addf364285095d892ca5d75605e881d3c54ea537c928e0f7939c065649f98283cec30e22243831240cc5cfe2fafc0dea4d6284c5f399184a3eeecd5b5eb697dfa79c515749d2c7300adfbbfc9b75cc0dcc80c2e1537d942bcd7c9e0e9081a5d9faae845abb99ff4d4e5c175f484b6cac82fc41d92c9fc70f356f478e9cbcfe7bb5614b1bf969f9bf78fa74dc6b6db3f254a98847c7de230b01e8d0c3eec1c83009a27311fd7f3f91d5e84df66db81271e641b6e23892ee77d9c6a638a2c082c18711776c7936dbc9cd2cdbc828371561859484f8d0acaad1cfe4c5ed18a972effbfeb04880556b16406a1fa19de700541ab307b5ce68923d6ad9cc169018863d65badb3ceddfd61e33c916a2bfb94cef097f3e3e8c665ff260313e8f6846051b9c55bbe5d1aa657b34ee84dc5be594aa41a9f8f5b66ea9afa8d7119b6522572d578d6f0fd29a6d3d1e3a07455472c10bf82b1d6a44131494bb2804d9ea2b3f27324957a00c98b8307451bdee1ab6615008caee06acd7abf6acd1a69dafa990e257bd540762cdfe6b74aa9feb07dde966f715c2aceed6c4b3041a5e6cc7ade0354975fcfdb47058e7df6f7d024d475a18d90f7f30454f1d98c6310a10b391aed74cd8fc1ef16689a795f408d8d416d1c481946c403b639a9d080d0a638ad91b457f622834df035ad8da905b82b38770bc3631f6e4515faa02b6ed476809ffac6340e000a568390ac0a77b3124683a80b9f48b27f55b9ab664c9a5595101b88fde4802ba652140f71002efc32d01305a37190c8e7d95bd067c46ed5b3afef4457def3045e44ed09bfbb20485739e6fe33250d54d277a3e7b9bf59eee769619e36eeb2f6da274a29c4039937f09c26bfe0576d88020c9ec904ccd7ba706e89d392f1317ec123eddfcb8bc7bb3a099bc94de45dc8348a07b173d5a4106fda19ebc9002486d0c7fb507cf92bf16f9e194bbacb50b574f7a499c25647d7e0e84f32055c75d693bc9449c6bf4dd90535c203e31d48eb228beb976bf16dc82a494d3918726ccb066aa342212977ce976d03ecc6fef08aaef12030f5bc1aa544a447cb77a5fa942f46490f17fea04e3b4211c7093a5f7c2383857b1e3874eb3d4e4ebfc07cb6bf7a12c36648391a56e818816191473ccfa8b11cc12c6f4c8dddcd673205636ca540ed300d446e7658ef922fe496031f7e6134de00e05d57e1a158b24ac49ed2b113b07505cae650b40ad30e308edee296efa09d495fc717722e750c8879a5a32be51cb2f67c53a515702ec7d477bd90c0da381e88da58fcd1719c3f1e9eb6cb5eb55e30eb8367762875a7062aab5bc20b3b21f9349c2f79699002521bcedf50dac63e8337a1177216c99c4e544291fb5641513753b483c9b7b40fced0296ef299514f6bd25ea6ab5c78a817d39899de8789f3c6ee7262cf6e9b123b07315e5ec065f606bebeecb3fada1919f959189dfda87438229b7b1f5149746cff4bd6ca215b49fc2fe46d88f2688ebb6af7d9c38ac3204c6d36d919b08f85ba35c99779b00da8f6ba5ec57504b9163463056872caea66e7d038b342ecd98f8ce628941319d4f4d57a1b58107a383500cdea0d415216cd6bdb52654be5d4266bfc151efa98f903b00e497ec35a42318abffa0a6e9af530fd1abadb2958c55f631fa37ab1ef05b741ce43faa1441b588a62439c0b9dc66935ea9add566d81e7454d196e42ac22854bbd3835677a05b6c242632c5752d764f7980478d1e275536fe1558410cc8a2f3102df8c4f03b15fc90cb48727272368f0dfa7f2c70b368283e0e3bd20af4f854433e7ae643f0cb45de5c29213c3b81a8fd904f6c4a4d3195b2f45deef31aa4cce0ed1e95424871b88400c84c1ecbd46d158215225a34ba5b7d3dd5494d9e576727d96bea7a11d83627134ba1218b13dd9ec76797ab9a900e1bc18f00c92113375ffdee8f17e2efb469620881046ad6a6fe3b290334db876e4c13aa0ccbb64da33a4146cbc340e65880d4341eea34a05c4dc7d960c9117b973801356afbf78254e3179312418eae543f922b2f92323d3c8222b9bdc42accda35ef1165d2f5e4b7f00d0fb9151408017d41c0c05225ccfce9b845fa785ff024f3be816483c7f9a5b73ebb99e52014d27e79ee644eb0498b80b5bdc5db09fe07e67c37fd5dc75544484472e1b3cb24cbd2f3cb5b85bc148b9e0636107f4415ec01cc5136cda024b4230e0871d9e31217d9db141253092e1908282ab91082455ebb1bf0f1e133c19192ffeccae9e4b6389506dbbec2ecdbc64f4e0662d42b3588aa3df938a881eb7ec88d92a6444d2b2fa4ac4b6eda5165966016aee3a4af29bea826ceaa97b80998a54413b92abdc63d1dc9b0e2b9febb1477a8d3e1d4bb9b8ab5194bcf1fc5c30c023a1e29ab5b75c2c78e886219a266ff576f4bc1e0d9877cb7c9d35dcce17f95de38a3c061487ad8b8d5c326873fcba26c1661cd17587ac8c3cf31694fe260cde181a47a9f9c779b2394656b13d7d6ca5165f050253b1746ccb5250d54aa24666fc05fd1069092a52b203cf1dac45bb4eef619d9bad240789c68d7f61eae11cf5f225dadb0dbb039133392c76443ef9d356a9b26982e1a112c311c21dbf6fd3e4700ec1af5267fd629038d626317c3cf8b122b5d7e510df447d0d8e5b2ba411f04c93449529f7113e5d35e3674292ae80f18f9dcf476e2dd2301"}, 0x40) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xfb, 0x96, 0x0, 0x8, 0x0, 0x2, 0xc049, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff74af, 0x2, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x2, 0x7, 0xb122, 0x7fffffff, 0x23f}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x0, 0x7, 0xfe7, 0x0, 0xed, 0x48c0, 0xc, 0xff, 0xa, 0x0, 0xa7, 0x0, 0x1f, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x7, 0x7, 0x80, 0x0, 0x0, 0x10001, 0x7, 0x80, 0x0, 0xc5, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x4080, 0x3fe, 0xfffe, 0x0, 0x48f, 0x9, 0x5}, 0x0, 0x8, r6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) gettid() r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x2, 0x70, 0x40, 0x0, 0x0, 0x7f, 0x0, 0x9, 0xa80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x14c2, 0x1, 0xfb46, 0x14, 0x94d1, 0x800080, 0x1}, r7, 0xa, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0x2, 0x2000000000003, 0x2) r9 = syz_open_dev$media(&(0x7f0000000640)='/dev/media#\x00', 0x800, 0x400000) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000003200)=ANY=[@ANYBLOB="00a18255f288afabbe9e916f0a4ae501f8a4fb44e0352cf95f890e95b8b28e090126035f6fe20f1b3502ae6b7c3bf88f2b7e1643c75f0d67f4ad5d48451731cfebf438db348de22e20b6092d82a1b573f93551c479eca6a2a862f20ef313d2d562347b38cdd06e95de68d7a4d0a19285acea16f42543fa2b894d4944447d2d63f13c254f446414cf7555f953aad2e10472ee79b0b3d8fee08d410e81608509616d348a144c96955fff2530dd441a1a0c19431cab415bc54a56dd35363bbe41c7baa11bad97bbf71cceaf05b0892caa6fddf0b658be3e2ce4dad54db013ad8532a576ac4549b1fa74835a27239fd8004c0a00009cd55937c8a8c935c32ec2cbe290b542961774a9d2e8ef1b14fe6553a972bf90bdaee1889c9bf7015e139b76fabb32ad5a7e84cef6a5af296d76dd1a923d8d96a1ec33c345f702d7d95e03a2892b0f9ce898333165ad26e96229b9a859eb7fe1280b8940231bf9945b6147ac406808c015797178aeae94da2072079c513d80e3b797d91749072ba442ad1141735aca12d0df3ccb6688cf93e3b947a93845901c5329c1fb973be735a0df174cdddb930f46e34d2daf942f330fc0a384f6c3de057190df3fb5760d5c6c894bc3728025c0e54f2f55903eab6d542f61f5d5705d305f362d131dadba96ee41fafa94b36dc21eeb54cb871353959cd966a5a5aaf6b39cc5c9354a046f177917aa54913539cade09d17f502641bb3cabf65e70d0c61c5ea152373954ce5628bbd9ff58da03c165bc2623dc3fa2e75fab83c58ee941ef59bb68ac6ad6de8b3ec3d840ed030ef9169ffdfc28c871a713c70573c7668a1757ee3752ae3931e8d5b844244b8f2a29940da779ac42159b1d5ee0ac94508f76d38344cc7c62d4bfe1a0b1b750960c369cf2e8999d29a71f89e98d0ce0"], 0xe) close(r8) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r14}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f0000000880)=@can={0x1d, r14}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 09:04:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c0363a026bd7000fedbdf250000040072cc0008000700210062620000050092000000000000000000005dc0ab2e68bc8c0ac19f02136866f8d9b68272f7ee3075ac0cd02dff586c3ea348d043f5bf2777dceb92aca7c46c1dd5e7a378258026833d02bd45d72c000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x9f4e9445ee478933}, 0x8a4) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) listen(r0, 0x0) 09:04:51 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x0) [ 301.314241][ T9083] device bridge_slave_0 left promiscuous mode [ 301.322237][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state 09:04:51 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3bd, &(0x7f0000000200), 0x190, 0x0, 0x0, 0x20000001}, 0x20000004) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x159, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000020008102e00f80ecdb4cb9020200000001000000810040fb12000300040fda1b40d819a906000500000f", 0x33fe0}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x4, 0x3, 0x3}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)="691014714705fe6d153740ca0553b2b2a3fbdc0558a16f67022b56f3612e195362089aac7754e5cdf310195cba4e3d0b41b70c486729de192b68538ff1ac1de0105b949ec80a0e5ca9be4623d09c9ec38109cb952b75aad833458074460350897bf2aa006ce5", 0x66}, {&(0x7f0000000800)="58e639094d286d817fe424548868bf3dd1df162cf54fdea63316d4e21c6b57b1c99905b9268af49019958f049922939bbb379537a4e3b4c2505c8b1d7c6ecb9946d40dd3028d3c6eac95fb289a2878ee1607b473fa6183d0c4d51d84a6926e74c0c98316ed8356315af72a", 0x6b}, {&(0x7f0000000900)="eac7ead69222d048f097d09deb2bf00611af8660056d5e1bc57841cfa0a06e5312430783c574c1e4e9cbed8fb1a719933a795d0239e6f1a4b81b74eb96402f2c6a8e00b5e9d43a3c7093ca2a9c0c41277011ead57d812ed71fd2af0d", 0x5c}, {&(0x7f0000000980)="06bf806b81a4cc524f13a93e33c42265937447cb22f5958edd69e7b1e095b657275c7c0162469880d47281924e5eab0a6ff21bb733833ee86eba9f483222863251ba09ffb4ecd9b5ce9705a2a8b04f60db45d4e7c4757f76a55973f5be64e0", 0x5f}], 0x4, &(0x7f00000034c0)=ANY=[@ANYBLOB="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"], 0x228}, 0x44001) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000240)="30f93e012ba0bbf346c11d29b6f2867c949177059f68697c711d3497654afe068379c9e6307d64362ea4998467added36a7ebcabdc4d0139afd4659d24c0ebcf857e187d2ffe7f5bb673a5e612c1bf796f74dac91fccdbead9109ab28af88eb351aa92bd4271221268b965fea0eccc8f70f2c4aa2963b83df5b7a32e734fc635ba0058d51c659a223b", &(0x7f0000000040)=""/1, 0x8}, 0x20) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x70, 0x2c, &(0x7f0000000780)="0b103b78a8b93d4dced0270743aff9f190537b8a6da027a3cadb4abbb26daa34a6ae55907dfa02a21f5246549dc7fb3d49ac07573f6457f2d60062629b85d3b400832d7271bbfd8808e44a3b58a5560e9ad7542db5f3b4f801a578fa52839aa3a85650a4797f28ac38bb1445cb240343", &(0x7f0000000400)=""/44, 0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001200)="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", &(0x7f0000002200)="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"}, 0x40) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xfb, 0x96, 0x0, 0x8, 0x0, 0x2, 0xc049, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff74af, 0x2, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x2, 0x7, 0xb122, 0x7fffffff, 0x23f}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xb4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x0, 0x7, 0xfe7, 0x0, 0xed, 0x48c0, 0xc, 0xff, 0xa, 0x0, 0xa7, 0x0, 0x1f, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x7, 0x7, 0x80, 0x0, 0x0, 0x10001, 0x7, 0x80, 0x0, 0xc5, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x4080, 0x3fe, 0xfffe, 0x0, 0x48f, 0x9, 0x5}, 0x0, 0x8, r6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) gettid() r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x2, 0x70, 0x40, 0x0, 0x0, 0x7f, 0x0, 0x9, 0xa80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x14c2, 0x1, 0xfb46, 0x14, 0x94d1, 0x800080, 0x1}, r7, 0xa, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0x2, 0x2000000000003, 0x2) r9 = syz_open_dev$media(&(0x7f0000000640)='/dev/media#\x00', 0x800, 0x400000) r10 = openat$cgroup_ro(r9, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r10, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], 0xe) close(r8) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r14}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f0000000880)=@can={0x1d, r14}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 301.518503][ T9104] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 09:04:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c0363a026bd7000fedbdf250000040072cc0008000700210062620000050092000000000000000000005dc0ab2e68bc8c0ac19f02136866f8d9b68272f7ee3075ac0cd02dff586c3ea348d043f5bf2777dceb92aca7c46c1dd5e7a378258026833d02bd45d72c000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x9f4e9445ee478933}, 0x8a4) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) listen(r0, 0x0) 09:04:51 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x0) 09:04:51 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000000000850000000800000095000000000000005d4ad613fdd3785024499c6eb16461089533c925afa92937cac27ff6d4a3387023fa478cf07cc5823d5fe532e86afc4a435b979d5910442aec30b86a2c3cebe689371b4a073bceda58f53a7092160bd382e0ebedc77c42d7c833bb44818a2c3091dffc53fd28698075d28961af2768383441e0c6f8a16cdbd8d9fd482b33f0a6f48ea6b896e3d5e58c9e67482421e4a4dd702381026c132f2314ff7efff9e732343d2d9b3bf9ddc3800cd4e8f3b30bbc344506320eeddcfd31babe847f10b256c3e8a660"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffffffff, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0xf000000, 0xade0, 0x2, r2, 0x0, &(0x7f0000000040)={0x9909cf, 0x5b27, [], @value64=0x2}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 09:04:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,sq=0x0000000000000001,timeout=0x0000000100000001,timeout=0x0000000000000001,sq=0x0000000000000001,sq=0x00000000000001ff,sq=0x0000000000008000,obj_type=@&,mask=MAY_EXEC,subj_user=/dev/vcsa#\x00,rootcontext=staff_u,uid=', @ANYRESDEC=r3, @ANYBLOB="2c5be78584187047a1fa52c13386a1c808089e40447600"]) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0xa0402, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x2000000, 0xf7ff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x0, 0x9, "778cc818"}, 0x1, 0x0, @planes=0x0, 0x7, 0x0, 0xffffffffffffffff}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0)) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000240)={0x4, 0x100, 0x1, {0x8, 0xe, 0xe9c, 0x9}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r9, 0xc0044306, &(0x7f0000000300)={0x8, 0x0}) r10 = dup(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_MASTER={0x8, 0xa, r15}]}, 0x28}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@getlink={0x3cc, 0x12, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r15, 0x10060, 0x8010}, [@IFLA_TXQLEN={0x8, 0xd, 0x55}, @IFLA_IFALIASn={0x4}, @IFLA_VFINFO_LIST={0x214}, @IFLA_VFINFO_LIST={0x18c}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x10010030}, 0xc0080) socket(0x10, 0x803, 0x0) r16 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r16, 0xc0044306, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001045393", @ANYRES32=r18, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="54050000000000000006c0000000000000040000", @ANYRES32=r18, @ANYBLOB="600001001080000008000d00550000000400140078031680b0011680"], 0x554}, 0x1, 0x0, 0x0, 0x10010030}, 0xc0080) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x5) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x40, 0x200c02) fcntl$getown(0xffffffffffffffff, 0x9) [ 301.710713][ T9112] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 09:04:51 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,sq=0x0000000000000001,timeout=0x0000000100000001,timeout=0x0000000000000001,sq=0x0000000000000001,sq=0x00000000000001ff,sq=0x0000000000008000,obj_type=@&,mask=MAY_EXEC,subj_user=/dev/vcsa#\x00,rootcontext=staff_u,uid=', @ANYRESDEC=r3, @ANYBLOB="2c5be78584187047a1fa52c13386a1c808089e40447600"]) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0xa0402, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000001c0)={0x401, 0x4, 0x4, 0x2000000, 0xf7ff, {0x77359400}, {0x5, 0xa, 0x3f, 0xf8, 0x0, 0x9, "778cc818"}, 0x1, 0x0, @planes=0x0, 0x7, 0x0, 0xffffffffffffffff}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x3, &(0x7f00000003c0)) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000240)={0x4, 0x100, 0x1, {0x8, 0xe, 0xe9c, 0x9}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r9, 0xc0044306, &(0x7f0000000300)={0x8, 0x0}) r10 = dup(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_MASTER={0x8, 0xa, r15}]}, 0x28}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@getlink={0x3cc, 0x12, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r15, 0x10060, 0x8010}, [@IFLA_TXQLEN={0x8, 0xd, 0x55}, @IFLA_IFALIASn={0x4}, @IFLA_VFINFO_LIST={0x214}, @IFLA_VFINFO_LIST={0x18c}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x10010030}, 0xc0080) socket(0x10, 0x803, 0x0) r16 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r16, 0xc0044306, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001045393", @ANYRES32=r18, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="54050000000000000006c0000000000000040000", @ANYRES32=r18, @ANYBLOB="600001001080000008000d00550000000400140078031680b0011680"], 0x554}, 0x1, 0x0, 0x0, 0x10010030}, 0xc0080) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x5) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x40, 0x200c02) fcntl$getown(0xffffffffffffffff, 0x9) 09:04:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c0363a026bd7000fedbdf250000040072cc0008000700210062620000050092000000000000000000005dc0ab2e68bc8c0ac19f02136866f8d9b68272f7ee3075ac0cd02dff586c3ea348d043f5bf2777dceb92aca7c46c1dd5e7a378258026833d02bd45d72c000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x9f4e9445ee478933}, 0x8a4) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) listen(r0, 0x0) 09:04:51 executing program 5 (fault-call:8 fault-nth:0): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c0363a026bd7000fedbdf250000040072cc0008000700210062620000050092000000000000000000005dc0ab2e68bc8c0ac19f02136866f8d9b68272f7ee3075ac0cd02dff586c3ea348d043f5bf2777dceb92aca7c46c1dd5e7a378258026833d02bd45d72c000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x9f4e9445ee478933}, 0x8a4) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 09:04:52 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4, 0xffffbe40}, 0xc) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='((trustedvmnet1@[)\x00') 09:04:52 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000dc0)=@updpolicy={0xb8, 0x19, 0x305, 0x0, 0x0, {{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x50}}}, 0xb8}}, 0x0) [ 302.206549][ T9142] FAULT_INJECTION: forcing a failure. [ 302.206549][ T9142] name failslab, interval 1, probability 0, space 0, times 1 [ 302.247261][ T9142] CPU: 0 PID: 9142 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 302.255975][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.266055][ T9142] Call Trace: [ 302.269366][ T9142] dump_stack+0x11d/0x181 [ 302.273732][ T9142] should_fail.cold+0xa/0x1a [ 302.278370][ T9142] __should_failslab+0xee/0x130 [ 302.283237][ T9142] should_failslab+0x9/0x14 [ 302.287864][ T9142] kmem_cache_alloc_trace+0x2a/0x5d0 [ 302.293183][ T9142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 302.299443][ T9142] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 302.305365][ T9142] alloc_pipe_info+0xf8/0x3b0 [ 302.310064][ T9142] splice_direct_to_actor+0x4b3/0x540 [ 302.315457][ T9142] ? generic_pipe_buf_nosteal+0x20/0x20 [ 302.321017][ T9142] ? security_file_permission+0x88/0x280 [ 302.326666][ T9142] ? rw_verify_area+0xee/0x250 [ 302.331453][ T9142] do_splice_direct+0x161/0x1e0 [ 302.336357][ T9142] do_sendfile+0x384/0x7f0 [ 302.340792][ T9142] __x64_sys_sendfile64+0x12a/0x140 [ 302.346011][ T9142] do_syscall_64+0xcc/0x3a0 [ 302.350648][ T9142] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 302.356543][ T9142] RIP: 0033:0x45b399 [ 302.360461][ T9142] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.380110][ T9142] RSP: 002b:00007fb504d18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 302.388542][ T9142] RAX: ffffffffffffffda RBX: 00007fb504d196d4 RCX: 000000000045b399 09:04:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) [ 302.396514][ T9142] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 302.404565][ T9142] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.412533][ T9142] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000007 [ 302.420525][ T9142] R13: 00000000000008cb R14: 00000000004ca259 R15: 0000000000000000 09:04:52 executing program 5 (fault-call:8 fault-nth:1): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:52 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="8500000000000000350000000f00000085000000000000009500000000000000c2744a7e6467a5ac66915d6d9906789affb69a860c18a8f797fd746fde124870aaab4b4e3297d0497ef790f08b262d6282bec97cb1f56fb3aa3faa4195140c42547e4e4d012694fcddf8a275ab45e28f6a3db3fe530311942a1e48e2a3e49e052948a384264d334cb7d78abf8baf3cd6d69b2c657406eb15f534bfba2530de03ffa41826f9ba9caaabfb6e0d00e0628b8e819c382fb0ea89eef2e7e9657dcaefcd1efc53e8ce8dca4bc73e6ccfb9e7be44f7247c3a804e915169ba0aa0e963b862c53c65c8ed1c0756524556172300"/248], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0x9f0000, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500", 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) [ 302.511500][ T9136] device bridge_slave_0 left promiscuous mode [ 302.542129][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state 09:04:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 09:04:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x3, @bcast, 0x6}, [@default, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x1af) [ 302.765119][ T9162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.772567][ T9162] IPv6: NLM_F_CREATE should be set when creating new route [ 302.779858][ T9162] IPv6: NLM_F_CREATE should be set when creating new route [ 302.813818][ T9163] FAULT_INJECTION: forcing a failure. [ 302.813818][ T9163] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 302.827053][ T9163] CPU: 1 PID: 9163 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 302.835656][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.845725][ T9163] Call Trace: [ 302.849016][ T9163] dump_stack+0x11d/0x181 [ 302.853354][ T9163] should_fail.cold+0xa/0x1a [ 302.857947][ T9163] should_fail_alloc_page+0x50/0x60 [ 302.863148][ T9163] __alloc_pages_nodemask+0xd2/0x310 [ 302.868438][ T9163] cache_grow_begin+0x76/0x5c0 [ 302.873211][ T9163] ? memcg_kmem_get_cache+0x1b1/0x320 [ 302.878588][ T9163] kmem_cache_alloc_trace+0x4f7/0x5d0 [ 302.883970][ T9163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 302.890229][ T9163] alloc_pipe_info+0xf8/0x3b0 [ 302.894922][ T9163] splice_direct_to_actor+0x4b3/0x540 [ 302.900294][ T9163] ? generic_pipe_buf_nosteal+0x20/0x20 [ 302.905861][ T9163] ? security_file_permission+0x88/0x280 [ 302.911530][ T9163] ? rw_verify_area+0xee/0x250 [ 302.916303][ T9163] do_splice_direct+0x161/0x1e0 [ 302.921261][ T9163] do_sendfile+0x384/0x7f0 [ 302.925788][ T9163] __x64_sys_sendfile64+0x12a/0x140 [ 302.930995][ T9163] do_syscall_64+0xcc/0x3a0 [ 302.935533][ T9163] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 302.941490][ T9163] RIP: 0033:0x45b399 [ 302.945498][ T9163] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.965206][ T9163] RSP: 002b:00007fb504d18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 302.973660][ T9163] RAX: ffffffffffffffda RBX: 00007fb504d196d4 RCX: 000000000045b399 [ 302.981704][ T9163] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 302.989668][ T9163] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.997647][ T9163] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000007 [ 303.005684][ T9163] R13: 00000000000008cb R14: 00000000004ca259 R15: 0000000000000001 [ 303.025604][ T9162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.032985][ T9162] IPv6: NLM_F_CREATE should be set when creating new route 09:04:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 09:04:52 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="8500000000000000350000000f00000085000000000000009500000000000000c2744a7e6467a5ac66915d6d9906789affb69a860c18a8f797fd746fde124870aaab4b4e3297d0497ef790f08b262d6282bec97cb1f56fb3aa3faa4195140c42547e4e4d012694fcddf8a275ab45e28f6a3db3fe530311942a1e48e2a3e49e052948a384264d334cb7d78abf8baf3cd6d69b2c657406eb15f534bfba2530de03ffa41826f9ba9caaabfb6e0d00e0628b8e819c382fb0ea89eef2e7e9657dcaefcd1efc53e8ce8dca4bc73e6ccfb9e7be44f7247c3a804e915169ba0aa0e963b862c53c65c8ed1c0756524556172300"/248], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0x9f0000, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60120000a84302910000003900090023000c00020000000d000500", 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) 09:04:53 executing program 5 (fault-call:8 fault-nth:2): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:53 executing program 4: socket$kcm(0x10, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x405083) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)={r3, 0x4f, "3fbb9ca3ed206b93eda7aca5c31d04cc641e6a77b9d039e98287c5837b6ddbe127f34f7fc47a337d9fd2650e3194c8b7897114c9be855967d7ba3e88bbfccb6b8bcb6bf1c2726660a1321f56c7cbf6"}, &(0x7f0000000080)=0x57) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x6fa7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000440)={r4, 0x329}, &(0x7f00000004c0)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7d2409b51741e519}, 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000b997000000000b00009a"]}, 0x1, 0x0, 0x0, 0x4}, 0x4001) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000100)={0xa79, 0x0, 0x1000}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r7 = dup(r6) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180), 0x10) 09:04:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) [ 303.245232][ T9178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.252673][ T9178] IPv6: NLM_F_CREATE should be set when creating new route 09:04:53 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) msgget$private(0x0, 0x100) open(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}}, 0x14}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/156], @ANYBLOB="9c00000000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\a\x00'/33], @ANYRES64, @ANYPTR, @ANYBLOB='C\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/27], @ANYBLOB='*\x00'/24, @ANYPTR=&(0x7f0000000540)=ANY=[], @ANYBLOB="db0000000000"], @ANYBLOB='\b\x00'/12], 0x3c}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000003c40)={'team0\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}}) r7 = dup(0xffffffffffffffff) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r8}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r10 = dup(0xffffffffffffffff) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r11}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r12}) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r13) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) r14 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000100001080000000000000800000000001cc749f5a0cd50d228ae49529db966e8a6168c17bbde22b98b9de9f47327d0501701d8da91dcaaff03e6bdb5feccc20400000000000000ede9eee41a5da6f0e370e50d6e31309b7776491f90b093e6213483a6af22da10dc1070e29ecff6c9d3e39d52b4be96aa7ba41857d0e6cdbcece5445aa52109d844a08380c876", @ANYRES32, @ANYBLOB="00000000000000000c000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) [ 303.423326][ T9184] FAULT_INJECTION: forcing a failure. [ 303.423326][ T9184] name failslab, interval 1, probability 0, space 0, times 0 [ 303.515972][ T9184] CPU: 0 PID: 9184 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 303.524602][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.534667][ T9184] Call Trace: [ 303.538002][ T9184] dump_stack+0x11d/0x181 [ 303.542358][ T9184] should_fail.cold+0xa/0x1a [ 303.547024][ T9184] __should_failslab+0xee/0x130 [ 303.551888][ T9184] should_failslab+0x9/0x14 [ 303.556420][ T9184] kmem_cache_alloc_node_trace+0x3b/0x670 [ 303.562169][ T9184] __kmalloc_node+0x38/0x50 [ 303.566695][ T9184] kvmalloc_node+0x71/0x100 [ 303.571214][ T9184] iov_iter_get_pages_alloc+0x476/0xb10 [ 303.576778][ T9184] ? iov_iter_pipe+0xfa/0x120 [ 303.581468][ T9184] default_file_splice_read+0xd5/0x590 [ 303.586963][ T9184] ? fsnotify+0x6a9/0x7d0 [ 303.591313][ T9184] ? security_file_permission+0x88/0x280 [ 303.596989][ T9184] ? rw_verify_area+0xee/0x250 [ 303.601793][ T9184] do_splice_to+0xf2/0x130 [ 303.606258][ T9184] ? iter_file_splice_write+0x840/0x840 [ 303.611820][ T9184] ? iter_file_splice_write+0x840/0x840 [ 303.617383][ T9184] splice_direct_to_actor+0x1b6/0x540 [ 303.622767][ T9184] ? generic_pipe_buf_nosteal+0x20/0x20 [ 303.628333][ T9184] do_splice_direct+0x161/0x1e0 [ 303.633263][ T9184] do_sendfile+0x384/0x7f0 [ 303.637750][ T9184] __x64_sys_sendfile64+0x12a/0x140 [ 303.642967][ T9184] do_syscall_64+0xcc/0x3a0 [ 303.647685][ T9184] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 303.653608][ T9184] RIP: 0033:0x45b399 [ 303.657566][ T9184] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.677259][ T9184] RSP: 002b:00007fb504d18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 303.685682][ T9184] RAX: ffffffffffffffda RBX: 00007fb504d196d4 RCX: 000000000045b399 [ 303.693766][ T9184] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 303.701777][ T9184] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:04:53 executing program 1: r0 = socket(0x1f, 0x2, 0x9) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") socket$packet(0x11, 0x2, 0x300) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x3, 0x2, 0x9, 0x7fffffff, 0x0, 0xfffffffe}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xa) close(r5) r6 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x4f20, 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000000)=0x4) 09:04:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) geteuid() setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) [ 303.709773][ T9184] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000007 [ 303.717756][ T9184] R13: 00000000000008cb R14: 00000000004ca259 R15: 0000000000000002 09:04:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) [ 303.850424][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 303.856451][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 303.888287][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 09:04:53 executing program 5 (fault-call:8 fault-nth:3): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) [ 304.170337][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 304.176165][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:04:54 executing program 3: getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) r1 = getuid() syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x100000000, 0x5, &(0x7f0000000380)=[{&(0x7f0000000200)="2cc120b50c5cf4a8def8f8327d69a67088b21266f0c030d86cf959bf2a08441a59dbcd1d29d9a61faf21ca0a36bdc2dd", 0x30, 0x7f}, {&(0x7f0000000240)="7bfc816d12954f2bfd358f6b9f20dc36a46eb0c903e5ce80abdf40c14307888e3b05b62685bbdb44be53ad4bae912f7e699deb293badd92054cc9d73659baadf6a24dcc6779e95e036526fc3b8877c43120a16a73a49b2e4525a5f2beea576ea8defba7d58bf4dff235d66f4ae2152ea03613d816a261910fe39da9f37c55c95f319ca53544b9f889746b0ac31d75de884df136b49b6c5d0cf9f5519ad37390167989e2fe445686eef8406f6a997c67e18f0c13cbe9ea48b2d5be053ca17118d", 0xc0, 0x4}, {&(0x7f0000000300)="0dc63f2f5b1e637388f14e14c8560fb6872c1d7e428c9be6da8ce13cee94aa33", 0x20, 0x6}, {&(0x7f0000000340)="29aecea693a8271154c036946602ae9ae0c81f5d26d20e27", 0x18, 0x8e}, {&(0x7f0000000f40)="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", 0x1000, 0x3}], 0x218064, &(0x7f00000004c0)={[{@shortname_win95='shortname=win95'}, {@shortname_win95='shortname=win95'}], [{@dont_hash='dont_hash'}, {@euid_gt={'euid>', r0}}, {@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r1}}, {@pcr={'pcr', 0x3d, 0x15}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(0x0, 0x0) r7 = open(&(0x7f0000000580)='./file0\x00', 0x408002, 0xa) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0xffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x2, 0x3, 0x460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) socket(0x200000000000011, 0x4000000000080002, 0x0) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r9, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000940)) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x400, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="080005", @ANYRES32=r11, @ANYBLOB='\b\x00', @ANYBLOB, @ANYBLOB, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x16, 0x0) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r13 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r13, &(0x7f00000001c0)={0x11, 0x800, r14, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r13, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000001f40)={{{@in=@remote, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000009c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x400, 0x7ff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="02005bbc", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="080005", @ANYRES32=r15, @ANYBLOB='\b\x00', @ANYBLOB, @ANYBLOB, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="10000100c6d5cc003cc7e4ab927b000000002000040000000000"], 0x16, 0x0) 09:04:54 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) [ 304.224662][ T9210] FAULT_INJECTION: forcing a failure. [ 304.224662][ T9210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.307077][ T9210] CPU: 0 PID: 9210 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 304.315705][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.325838][ T9210] Call Trace: [ 304.329170][ T9210] dump_stack+0x11d/0x181 [ 304.333527][ T9210] should_fail.cold+0xa/0x1a [ 304.338236][ T9210] should_fail_alloc_page+0x50/0x60 [ 304.343665][ T9210] __alloc_pages_nodemask+0xd2/0x310 [ 304.349095][ T9210] alloc_pages_current+0xd1/0x170 [ 304.354170][ T9210] push_pipe+0x170/0x320 [ 304.358525][ T9210] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 304.364113][ T9210] ? iov_iter_pipe+0xfa/0x120 [ 304.368829][ T9210] default_file_splice_read+0xd5/0x590 [ 304.374401][ T9210] ? fsnotify+0x6a9/0x7d0 [ 304.378766][ T9210] ? security_file_permission+0x88/0x280 [ 304.384428][ T9210] ? rw_verify_area+0xee/0x250 [ 304.389210][ T9210] do_splice_to+0xf2/0x130 [ 304.393672][ T9210] ? iter_file_splice_write+0x840/0x840 [ 304.399269][ T9210] ? iter_file_splice_write+0x840/0x840 [ 304.404854][ T9210] splice_direct_to_actor+0x1b6/0x540 [ 304.410248][ T9210] ? generic_pipe_buf_nosteal+0x20/0x20 [ 304.415994][ T9210] do_splice_direct+0x161/0x1e0 [ 304.420889][ T9210] do_sendfile+0x384/0x7f0 [ 304.425406][ T9210] __x64_sys_sendfile64+0x12a/0x140 [ 304.430633][ T9210] do_syscall_64+0xcc/0x3a0 [ 304.435182][ T9210] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 304.441088][ T9210] RIP: 0033:0x45b399 [ 304.445000][ T9210] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.464609][ T9210] RSP: 002b:00007fb504d18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 304.473037][ T9210] RAX: ffffffffffffffda RBX: 00007fb504d196d4 RCX: 000000000045b399 [ 304.481017][ T9210] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 304.488994][ T9210] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 304.496989][ T9210] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000007 09:04:54 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x6e002100, 0x0, 0x0, 0x0, 0x0) r0 = request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000340)=@secondary='builtin_and_secondary_trusted\x00') ptrace(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xa3520225a8cedb24) socket(0x7, 0x0, 0x5) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000003c0)={'macvlan0\x00', {0x2, 0x4e22, @broadcast}}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={r3, &(0x7f0000000480)=""/69}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000300)={r3, 0x17}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000001c0)={r3, 0x4, &(0x7f00000000c0)=[0x8, 0x8, 0x6, 0xffff8001], &(0x7f0000000100)=[0xb9, 0x4, 0x0], 0x23, 0x3, 0x223, &(0x7f0000000140)=[0x77, 0x8, 0x8], &(0x7f0000000180)=[0x6, 0x6, 0x0]}) [ 304.505897][ T9210] R13: 00000000000008cb R14: 00000000004ca259 R15: 0000000000000003 09:04:54 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 09:04:54 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) getpid() getpgid(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0) listxattr(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r3, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r4) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x6) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x644001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x108}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x18}}], 0x1, 0x0) r7 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/292], 0x124}}], 0x1, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r10 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r9, r10) ioctl$EVIOCREVOKE(r9, 0x40044591, &(0x7f0000000300)=0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendfile(r11, r12, 0x0, 0x320f) r13 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r13, &(0x7f00000001c0)={0x11, 0x800, r14, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r13, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) 09:04:54 executing program 5 (fault-call:8 fault-nth:4): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) [ 304.704433][ T9226] IPVS: ftp: loaded support on port[0] = 21 [ 304.822925][ T9232] QAT: Invalid ioctl 09:04:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x405, 0x0, 0x0, {0x7e}, [@NL80211_ATTR_IFTYPE={0x8, 0xf}]}, 0x1c}}, 0x0) 09:04:54 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) [ 305.003710][ T9240] FAULT_INJECTION: forcing a failure. [ 305.003710][ T9240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.050412][ T9240] CPU: 1 PID: 9240 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 305.059037][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.069827][ T9240] Call Trace: [ 305.073335][ T9240] dump_stack+0x11d/0x181 [ 305.077818][ T9240] should_fail.cold+0xa/0x1a [ 305.082525][ T9240] should_fail_alloc_page+0x50/0x60 [ 305.087765][ T9240] __alloc_pages_nodemask+0xd2/0x310 [ 305.093256][ T9240] alloc_pages_current+0xd1/0x170 [ 305.098354][ T9240] push_pipe+0x170/0x320 [ 305.102618][ T9240] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 305.108218][ T9240] ? iov_iter_pipe+0xfa/0x120 [ 305.112925][ T9240] default_file_splice_read+0xd5/0x590 [ 305.118415][ T9240] ? fsnotify+0x6a9/0x7d0 [ 305.122832][ T9240] ? security_file_permission+0x88/0x280 [ 305.128515][ T9240] ? rw_verify_area+0xee/0x250 [ 305.133368][ T9240] do_splice_to+0xf2/0x130 [ 305.137819][ T9240] ? iter_file_splice_write+0x840/0x840 [ 305.143390][ T9240] ? iter_file_splice_write+0x840/0x840 [ 305.149040][ T9240] splice_direct_to_actor+0x1b6/0x540 [ 305.154429][ T9240] ? generic_pipe_buf_nosteal+0x20/0x20 [ 305.160018][ T9240] do_splice_direct+0x161/0x1e0 [ 305.164901][ T9240] do_sendfile+0x384/0x7f0 [ 305.169421][ T9240] __x64_sys_sendfile64+0x12a/0x140 [ 305.174837][ T9240] do_syscall_64+0xcc/0x3a0 [ 305.179424][ T9240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 305.185345][ T9240] RIP: 0033:0x45b399 09:04:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) [ 305.189291][ T9240] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.209219][ T9240] RSP: 002b:00007fb504d18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 305.217655][ T9240] RAX: ffffffffffffffda RBX: 00007fb504d196d4 RCX: 000000000045b399 [ 305.225652][ T9240] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 305.233718][ T9240] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.241777][ T9240] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000007 [ 305.249760][ T9240] R13: 00000000000008cb R14: 00000000004ca259 R15: 0000000000000004 [ 305.269179][ T9245] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 305.288865][ T9255] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 09:04:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) [ 305.302858][ T9226] IPVS: ftp: loaded support on port[0] = 21 [ 305.340648][ T42] tipc: TX() has been purged, node left! 09:04:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x99, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x10000}, &(0x7f0000000380)=0xffffffffffffff7a) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000440)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x420002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r1, &(0x7f0000000680), &(0x7f00000006c0)=""/42}, 0x20) listen(r0, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1000}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x8003, 0x1f, 0x401, 0x0, 0x1}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x802000, &(0x7f0000000580)={'trans=unix,', {[{@privport='privport'}, {@privport='privport'}, {@afid={'afid', 0x3d, 0xd480}}], [{@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffb}}, {@fsname={'fsname', 0x3d, '/trusted'}}, {@subj_role={'subj_role', 0x3d, '@system^trustedem1keyringproclo.eth0{keyringL.\''}}, {@euid_gt={'euid>', r4}}, {@euid_eq={'euid', 0x3d, r5}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000003c0)=""/94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'team_slave_1\x00', {0x1}, 0x7960}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x18cb, 0x0, 0x300, 0x0, 0x1000000000054}, 0x98) [ 305.455264][ T9258] QAT: Invalid ioctl 09:04:55 executing program 5 (fault-call:8 fault-nth:5): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 09:04:55 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x222a6d8102856fd9) socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x0, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0xfff}, 0x8) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)='.dead\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$unlink(0x9, 0x0, r4) pipe(0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000003c0)={0x0, 'netdevsim0\x00', 0x1}, 0x18) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400500, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102000002) 09:04:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2) [ 305.928047][ T9281] FAULT_INJECTION: forcing a failure. [ 305.928047][ T9281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:04:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2) 09:04:55 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) getpid() getpgid(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000800}, 0x0) listxattr(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r3, &(0x7f0000000300)=ANY=[], 0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r4) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x6) open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x644001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x108}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x0, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/301], 0x18}}], 0x1, 0x0) r7 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000f41b25e406d58937e7e899e0524843c9577f89f71ebddf077798b47ab4a76907477a209522adca7e5454b7dec9d9a67305c04a8ccffca56ccbcabfb25cc94628348a24593c5dbdf200796a8fd217367c017f76f131c8693ac43b77471be914707d2c3545b812f7f58f436706f17b26ae3208e5809f51528f2436610c52b724993141a5cb7a0a9c3dca0a16787a4d0c82e2d9829219e3d981d196f1b7256c49aac96b000000002150a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5c25fac970f73d3fe7d1f036c1e5b4046cf69b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c5669b224b800"/292], 0x124}}], 0x1, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r10 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r9, r10) ioctl$EVIOCREVOKE(r9, 0x40044591, &(0x7f0000000300)=0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendfile(r11, r12, 0x0, 0x320f) r13 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r13, &(0x7f00000001c0)={0x11, 0x800, r14, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r13, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) [ 306.010717][ T9281] CPU: 0 PID: 9281 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 306.019401][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.029472][ T9281] Call Trace: [ 306.032863][ T9281] dump_stack+0x11d/0x181 [ 306.037217][ T9281] should_fail.cold+0xa/0x1a [ 306.041909][ T9281] should_fail_alloc_page+0x50/0x60 [ 306.047181][ T9281] __alloc_pages_nodemask+0xd2/0x310 [ 306.052515][ T9281] alloc_pages_current+0xd1/0x170 [ 306.057651][ T9281] push_pipe+0x170/0x320 [ 306.061917][ T9281] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 306.067486][ T9281] ? iov_iter_pipe+0xfa/0x120 [ 306.072210][ T9281] default_file_splice_read+0xd5/0x590 [ 306.077717][ T9281] ? fsnotify+0x6a9/0x7d0 [ 306.082087][ T9281] ? security_file_permission+0x88/0x280 [ 306.087743][ T9281] ? rw_verify_area+0xee/0x250 [ 306.092597][ T9281] do_splice_to+0xf2/0x130 [ 306.097197][ T9281] ? iter_file_splice_write+0x840/0x840 [ 306.102764][ T9281] ? iter_file_splice_write+0x840/0x840 [ 306.108348][ T9281] splice_direct_to_actor+0x1b6/0x540 [ 306.113876][ T9281] ? generic_pipe_buf_nosteal+0x20/0x20 [ 306.119450][ T9281] do_splice_direct+0x161/0x1e0 [ 306.124452][ T9281] do_sendfile+0x384/0x7f0 [ 306.128935][ T9281] __x64_sys_sendfile64+0x12a/0x140 [ 306.134161][ T9281] do_syscall_64+0xcc/0x3a0 [ 306.138707][ T9281] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 306.144627][ T9281] RIP: 0033:0x45b399 [ 306.148545][ T9281] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.168166][ T9281] RSP: 002b:00007fb504d18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 306.176614][ T9281] RAX: ffffffffffffffda RBX: 00007fb504d196d4 RCX: 000000000045b399 [ 306.184612][ T9281] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 306.192607][ T9281] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.200608][ T9281] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000007 09:04:55 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4c}, 0x70) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10001, 0x373}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffe, r1, 0x0, 0x1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x440000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x6, &(0x7f0000ffd000/0x3000)=nil, 0x2b3b}) 09:04:56 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x222a6d8102856fd9) socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x0, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0xfff}, 0x8) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000340)='.dead\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$unlink(0x9, 0x0, r4) pipe(0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000003c0)={0x0, 'netdevsim0\x00', 0x1}, 0x18) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400500, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102000002) [ 306.208601][ T9281] R13: 00000000000008cb R14: 00000000004ca259 R15: 0000000000000005 09:04:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2) 09:04:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2) 09:04:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x71, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631477fbac141440e0", 0x0, 0x9}, 0x28) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:04:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2) 09:04:56 executing program 5 (fault-call:8 fault-nth:6): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:56 executing program 3: r0 = socket(0x200000000010, 0x5, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000012c0), 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000600)=""/143, &(0x7f0000000280)=0x8f) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x8, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080)=0x9, 0x4) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/12], @ANYBLOB='\f\x00\x00 \x00\x00\x00\x00'], @ANYBLOB="f500000000000010000000000000000000000000000000004800000000000000140100000100"/96], 0x90}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3d89d398d5dd8dcb37ac5b8f3ab61058e71ac0e5932afb2364d00f8a4df4520eb207baf86c3dfcfa5883cc169d2a7ef3f74537d597bafc784fa054a42c2bbbab7ec8281c223468f5a51abd2112c0f4c3ee0c4fdbd2e5fe4e5e1d7f56222331ab8871e8c766904bc96def6d5afeb22eeb00ee41c7c1b10324a536631f602b7b6dc9816e1644c646893a080c5a377b877e0ba61bf0bc0ef7003176bf46c981601a13e001fe5fe4d179fae24b670e0b0b4037039d43458ae991b4f6c0d5f96ea91e3d6052e3c2ad2d4cac14c5e1f0ddeb747d623e844f2ad069b95965bcaf226100", @ANYRES16=r3, @ANYBLOB="010400000002e70c00090021ff04000019000000007b8ec5d6907ec701c7621f7beb52ac786c5627c74f1c39926e05337abb63c63730dc4d62480000000000000000fcffffff00000000"], 0x20}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x200000000, 0x1000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(r4, &(0x7f0000000300)) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x700, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000003c0)=0xffff5ab1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:04:56 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 09:04:56 executing program 2: r0 = socket(0x840000000002, 0x0, 0xff) write$binfmt_elf64(r0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2}}, 0x40) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="8a00000048d023ecf5bca701d20a8f86c850713cae1181edf3394538af64b955e913b67729291e43c09e316eb97176cf8b15c7745c5af13ea75fa6e0303f9c43067242a2db208e8dccc6a2548f525de9dae984cb7e7a34fef2145f1ea2fa8ef8965a7cf501c9d2a69a11a4e30db16618431f1be35ff69201e1a4c376dbb7a64b9eb2762ea02d2e53184778e7b2164192caf46d11c3a3beb36bf631cabc2fd7b38a5615a3bc2ab2ffedf4ea29006d62d327c3679dfa1257bf5c9b35a551fc03205684a0789e7377a2af9bacb0f3"], &(0x7f00000002c0)=0x2) r1 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r1}, 0x0, 0x0, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r3}, &(0x7f0000000440)=""/54, 0x36, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r5, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, {0xa, 0x4e20, 0x0, @remote, 0xe45}}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000004c0)="ada762823ba4d43db593f71698837da5693caac44ab12a607198a724612d0480676819f6b46085c7f82c7e26248287a16c8e33bd1782becee0ab043da55ab53b82e8be4d4e9145fcbca6", 0x4a}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000700)}, {&(0x7f0000001700)}, {&(0x7f00000017c0)}, {&(0x7f0000001880)}], 0x7, &(0x7f0000001a00)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14}}], 0x48}}, {{&(0x7f0000001fc0)=@ethernet={0x0, @dev={[], 0x26}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003440), 0x0, &(0x7f0000003480)=[@txtime={{0x18, 0x1, 0x3d, 0x68cf}}, @mark={{0x14}}, @mark={{0x14}}, @mark={{0x14}}], 0x60}}, {{0x0, 0x0, &(0x7f0000004a40)=[{0x0}], 0x1}}, {{&(0x7f0000004ac0)=@ipx={0x4, 0x40, 0x800, "5e84a5f3d630", 0x5}, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}], 0x5, 0x40) read$alg(0xffffffffffffffff, 0x0, 0x0) 09:04:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2) [ 306.976940][ T9331] FAULT_INJECTION: forcing a failure. [ 306.976940][ T9331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.031310][ T9322] sysfs: Unknown parameter '' [ 307.253471][ T9331] CPU: 1 PID: 9331 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 307.262101][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.272167][ T9331] Call Trace: [ 307.275492][ T9331] dump_stack+0x11d/0x181 [ 307.279853][ T9331] should_fail.cold+0xa/0x1a [ 307.284488][ T9331] should_fail_alloc_page+0x50/0x60 [ 307.289779][ T9331] __alloc_pages_nodemask+0xd2/0x310 [ 307.295409][ T9331] alloc_pages_current+0xd1/0x170 [ 307.300477][ T9331] push_pipe+0x170/0x320 [ 307.304873][ T9331] iov_iter_get_pages_alloc+0x4d0/0xb10 [ 307.310555][ T9331] ? iov_iter_pipe+0xfa/0x120 [ 307.315244][ T9331] default_file_splice_read+0xd5/0x590 [ 307.320722][ T9331] ? fsnotify+0x6a9/0x7d0 [ 307.325093][ T9331] ? security_file_permission+0x88/0x280 [ 307.330746][ T9331] ? rw_verify_area+0xee/0x250 [ 307.335567][ T9331] do_splice_to+0xf2/0x130 [ 307.340025][ T9331] ? iter_file_splice_write+0x840/0x840 [ 307.345592][ T9331] ? iter_file_splice_write+0x840/0x840 [ 307.351165][ T9331] splice_direct_to_actor+0x1b6/0x540 [ 307.356562][ T9331] ? generic_pipe_buf_nosteal+0x20/0x20 [ 307.362199][ T9331] do_splice_direct+0x161/0x1e0 [ 307.367083][ T9331] do_sendfile+0x384/0x7f0 [ 307.371562][ T9331] __x64_sys_sendfile64+0x12a/0x140 [ 307.376781][ T9331] do_syscall_64+0xcc/0x3a0 [ 307.381309][ T9331] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 307.387203][ T9331] RIP: 0033:0x45b399 [ 307.391110][ T9331] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.410745][ T9331] RSP: 002b:00007fb504cf7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 307.419184][ T9331] RAX: ffffffffffffffda RBX: 00007fb504cf86d4 RCX: 000000000045b399 [ 307.427169][ T9331] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 307.435148][ T9331] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 307.443135][ T9331] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000007 [ 307.451128][ T9331] R13: 00000000000008cb R14: 00000000004ca259 R15: 0000000000000006 09:04:57 executing program 1: r0 = socket(0x200000000010, 0x5, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000012c0), 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000600)=""/143, &(0x7f0000000280)=0x8f) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x8, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080)=0x9, 0x4) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/12], @ANYBLOB='\f\x00\x00 \x00\x00\x00\x00'], @ANYBLOB="f500000000000010000000000000000000000000000000004800000000000000140100000100"/96], 0x90}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3d89d398d5dd8dcb37ac5b8f3ab61058e71ac0e5932afb2364d00f8a4df4520eb207baf86c3dfcfa5883cc169d2a7ef3f74537d597bafc784fa054a42c2bbbab7ec8281c223468f5a51abd2112c0f4c3ee0c4fdbd2e5fe4e5e1d7f56222331ab8871e8c766904bc96def6d5afeb22eeb00ee41c7c1b10324a536631f602b7b6dc9816e1644c646893a080c5a377b877e0ba61bf0bc0ef7003176bf46c981601a13e001fe5fe4d179fae24b670e0b0b4037039d43458ae991b4f6c0d5f96ea91e3d6052e3c2ad2d4cac14c5e1f0ddeb747d623e844f2ad069b95965bcaf226100", @ANYRES16=r3, @ANYBLOB="010400000002e70c00090021ff04000019000000007b8ec5d6907ec701c7621f7beb52ac786c5627c74f1c39926e05337abb63c63730dc4d62480000000000000000fcffffff00000000"], 0x20}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x200000000, 0x1000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(r4, &(0x7f0000000300)) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x700, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000003c0)=0xffff5ab1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:04:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 09:04:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000004000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffcde, 0x0, 0x0, 0x135) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2d1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000002c0)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="80f9ed22db4f97978066f6a7a4698b8f47fa3571cfc304d52ed72a0ef86dc20c456cc1947cf8eead1c68e4703c662b6f10dd67b557b130115d9d6b5b2e16c90b8f5cb26ddb9d5ef315efcbe3eff7c310649556d5c13b855e34d1dcc67b49818f096d00200c2236e96838a0bcd4f00766b17a01b77f28b3522c3e2d24afc57e1f31", 0x81}, {0x0}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x20, 0x4, 0x80, 0x5, 0x2, 0x3, 0x7f, 0x118, 0x40, 0x271, 0xc03d, 0x9, 0x38, 0x2, 0xffff, 0x8c, 0xfffb}, [{0x60000000, 0x55, 0x77c, 0x9, 0xff5, 0x1, 0x7fffffff, 0x3}], "ff493d41bb197e16c10189ca059d47a0832da8eebd9ab34503aef323d08fbd5864a60736c470b4c1cf4ec093de1aa5dee5fb67e8cabb02081f0cc5388fe409499612035d5f70526b4fcf724cd4e1cd483249b25f6dfa9fdd79e73360082f4c7b831d72c0fb5f9204ece0ad85dcd605f469ae45c241a56210b0c4c7adb726f3809e85e98c226e764c9e52affba2c1408fbe78cb880be9fbbd992c6958eb5e967aab4764264c1503448b63a6e2597e52abbc0d7876afb2ed4e109e7165a512e7b2b3ba2e1d7698493c63694ef02974e8109f39beb11d69e7a0fb156ea5f61f48e0a7fcf736305c1eda28f54a8599aa25b1a3d5341d4333744590", [[], [], [], []]}, 0x571) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000100)) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:04:57 executing program 3: r0 = socket(0x200000000010, 0x5, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000012c0), 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000600)=""/143, &(0x7f0000000280)=0x8f) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x8, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080)=0x9, 0x4) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/12], @ANYBLOB='\f\x00\x00 \x00\x00\x00\x00'], @ANYBLOB="f500000000000010000000000000000000000000000000004800000000000000140100000100"/96], 0x90}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3d89d398d5dd8dcb37ac5b8f3ab61058e71ac0e5932afb2364d00f8a4df4520eb207baf86c3dfcfa5883cc169d2a7ef3f74537d597bafc784fa054a42c2bbbab7ec8281c223468f5a51abd2112c0f4c3ee0c4fdbd2e5fe4e5e1d7f56222331ab8871e8c766904bc96def6d5afeb22eeb00ee41c7c1b10324a536631f602b7b6dc9816e1644c646893a080c5a377b877e0ba61bf0bc0ef7003176bf46c981601a13e001fe5fe4d179fae24b670e0b0b4037039d43458ae991b4f6c0d5f96ea91e3d6052e3c2ad2d4cac14c5e1f0ddeb747d623e844f2ad069b95965bcaf226100", @ANYRES16=r3, @ANYBLOB="010400000002e70c00090021ff04000019000000007b8ec5d6907ec701c7621f7beb52ac786c5627c74f1c39926e05337abb63c63730dc4d62480000000000000000fcffffff00000000"], 0x20}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x200000000, 0x1000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(r4, &(0x7f0000000300)) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x700, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000003c0)=0xffff5ab1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:04:57 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x7, &(0x7f0000000080)=0x3, 0x2) 09:04:57 executing program 2: r0 = socket(0x840000000002, 0x0, 0xff) write$binfmt_elf64(r0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2}}, 0x40) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="8a00000048d023ecf5bca701d20a8f86c850713cae1181edf3394538af64b955e913b67729291e43c09e316eb97176cf8b15c7745c5af13ea75fa6e0303f9c43067242a2db208e8dccc6a2548f525de9dae984cb7e7a34fef2145f1ea2fa8ef8965a7cf501c9d2a69a11a4e30db16618431f1be35ff69201e1a4c376dbb7a64b9eb2762ea02d2e53184778e7b2164192caf46d11c3a3beb36bf631cabc2fd7b38a5615a3bc2ab2ffedf4ea29006d62d327c3679dfa1257bf5c9b35a551fc03205684a0789e7377a2af9bacb0f3"], &(0x7f00000002c0)=0x2) r1 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r1}, 0x0, 0x0, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, 0x0, r3}, &(0x7f0000000440)=""/54, 0x36, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r5, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005180)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, {0xa, 0x4e20, 0x0, @remote, 0xe45}}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000004c0)="ada762823ba4d43db593f71698837da5693caac44ab12a607198a724612d0480676819f6b46085c7f82c7e26248287a16c8e33bd1782becee0ab043da55ab53b82e8be4d4e9145fcbca6", 0x4a}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000700)}, {&(0x7f0000001700)}, {&(0x7f00000017c0)}, {&(0x7f0000001880)}], 0x7, &(0x7f0000001a00)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14}}], 0x48}}, {{&(0x7f0000001fc0)=@ethernet={0x0, @dev={[], 0x26}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003440), 0x0, &(0x7f0000003480)=[@txtime={{0x18, 0x1, 0x3d, 0x68cf}}, @mark={{0x14}}, @mark={{0x14}}, @mark={{0x14}}], 0x60}}, {{0x0, 0x0, &(0x7f0000004a40)=[{0x0}], 0x1}}, {{&(0x7f0000004ac0)=@ipx={0x4, 0x40, 0x800, "5e84a5f3d630", 0x5}, 0x80, &(0x7f0000004b40), 0x0, &(0x7f0000004b80)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}], 0x5, 0x40) read$alg(0xffffffffffffffff, 0x0, 0x0) [ 307.889156][ T9349] sysfs: Unknown parameter '' 09:04:57 executing program 3: r0 = socket(0x200000000010, 0x5, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000012c0), 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000600)=""/143, &(0x7f0000000280)=0x8f) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x8, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080)=0x9, 0x4) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/12], @ANYBLOB='\f\x00\x00 \x00\x00\x00\x00'], @ANYBLOB="f500000000000010000000000000000000000000000000004800000000000000140100000100"/96], 0x90}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3d89d398d5dd8dcb37ac5b8f3ab61058e71ac0e5932afb2364d00f8a4df4520eb207baf86c3dfcfa5883cc169d2a7ef3f74537d597bafc784fa054a42c2bbbab7ec8281c223468f5a51abd2112c0f4c3ee0c4fdbd2e5fe4e5e1d7f56222331ab8871e8c766904bc96def6d5afeb22eeb00ee41c7c1b10324a536631f602b7b6dc9816e1644c646893a080c5a377b877e0ba61bf0bc0ef7003176bf46c981601a13e001fe5fe4d179fae24b670e0b0b4037039d43458ae991b4f6c0d5f96ea91e3d6052e3c2ad2d4cac14c5e1f0ddeb747d623e844f2ad069b95965bcaf226100", @ANYRES16=r3, @ANYBLOB="010400000002e70c00090021ff04000019000000007b8ec5d6907ec701c7621f7beb52ac786c5627c74f1c39926e05337abb63c63730dc4d62480000000000000000fcffffff00000000"], 0x20}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x200000000, 0x1000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(r4, &(0x7f0000000300)) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x700, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000003c0)=0xffff5ab1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 307.998587][ T9354] sysfs: Unknown parameter '' 09:04:58 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000200)) 09:04:58 executing program 3: r0 = socket(0x200000000010, 0x5, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000012c0), 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000600)=""/143, &(0x7f0000000280)=0x8f) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x8, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080)=0x9, 0x4) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/12], @ANYBLOB='\f\x00\x00 \x00\x00\x00\x00'], @ANYBLOB="f500000000000010000000000000000000000000000000004800000000000000140100000100"/96], 0x90}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3d89d398d5dd8dcb37ac5b8f3ab61058e71ac0e5932afb2364d00f8a4df4520eb207baf86c3dfcfa5883cc169d2a7ef3f74537d597bafc784fa054a42c2bbbab7ec8281c223468f5a51abd2112c0f4c3ee0c4fdbd2e5fe4e5e1d7f56222331ab8871e8c766904bc96def6d5afeb22eeb00ee41c7c1b10324a536631f602b7b6dc9816e1644c646893a080c5a377b877e0ba61bf0bc0ef7003176bf46c981601a13e001fe5fe4d179fae24b670e0b0b4037039d43458ae991b4f6c0d5f96ea91e3d6052e3c2ad2d4cac14c5e1f0ddeb747d623e844f2ad069b95965bcaf226100", @ANYRES16=r3, @ANYBLOB="010400000002e70c00090021ff04000019000000007b8ec5d6907ec701c7621f7beb52ac786c5627c74f1c39926e05337abb63c63730dc4d62480000000000000000fcffffff00000000"], 0x20}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x200000000, 0x1000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(r4, &(0x7f0000000300)) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x700, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000003c0)=0xffff5ab1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 308.207064][ T9373] sysfs: Unknown parameter '' 09:04:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x20000082) [ 308.320360][ T42] tipc: TX() has been purged, node left! 09:04:58 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='cgroup\x00', 0x1, &(0x7f0000000200)='\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000004000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffcde, 0x0, 0x0, 0x135) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2d1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000002c0)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="80f9ed22db4f97978066f6a7a4698b8f47fa3571cfc304d52ed72a0ef86dc20c456cc1947cf8eead1c68e4703c662b6f10dd67b557b130115d9d6b5b2e16c90b8f5cb26ddb9d5ef315efcbe3eff7c310649556d5c13b855e34d1dcc67b49818f096d00200c2236e96838a0bcd4f00766b17a01b77f28b3522c3e2d24afc57e1f31", 0x81}, {0x0}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x20, 0x4, 0x80, 0x5, 0x2, 0x3, 0x7f, 0x118, 0x40, 0x271, 0xc03d, 0x9, 0x38, 0x2, 0xffff, 0x8c, 0xfffb}, [{0x60000000, 0x55, 0x77c, 0x9, 0xff5, 0x1, 0x7fffffff, 0x3}], "ff493d41bb197e16c10189ca059d47a0832da8eebd9ab34503aef323d08fbd5864a60736c470b4c1cf4ec093de1aa5dee5fb67e8cabb02081f0cc5388fe409499612035d5f70526b4fcf724cd4e1cd483249b25f6dfa9fdd79e73360082f4c7b831d72c0fb5f9204ece0ad85dcd605f469ae45c241a56210b0c4c7adb726f3809e85e98c226e764c9e52affba2c1408fbe78cb880be9fbbd992c6958eb5e967aab4764264c1503448b63a6e2597e52abbc0d7876afb2ed4e109e7165a512e7b2b3ba2e1d7698493c63694ef02974e8109f39beb11d69e7a0fb156ea5f61f48e0a7fcf736305c1eda28f54a8599aa25b1a3d5341d4333744590", [[], [], [], []]}, 0x571) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000100)) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 308.582528][ T9385] sysfs: Unknown parameter '' 09:04:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x7, &(0x7f0000000080)=0x3, 0x2) 09:04:58 executing program 3: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsmount(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 09:04:58 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 09:04:58 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6, &(0x7f00000006c0)=[{&(0x7f00000001c0)="d8ef26828f5f6b040934f2208cbfce17285a423e3d67fcd1f9722481b89f541102126664fd983d4dd59316", 0x2b, 0x6}, {&(0x7f0000000200)="f23459d7", 0x4, 0xae45}, {&(0x7f0000000280)="1f6d1d5b68273fa0f5161285e961f609110f93851d392f896572ac1c0a6e6ac4b2862404e2d1becff372be1413745f2cf40a277811dfac9374a799bb1b6476806afdde0fca86d341780841df6fa7a762cf9552bb4260e77e82469df0cb922824cf858f1944dc09e83c1b079eea01b2445301c448f75c4861be6d3b586effd9edbd0b3b49b16cb39c18dd213aa67ff3d39529a6d95cb2bffbc0a5336e417bfb50d9e1d07cbbaaa5a7e44b10d0", 0xac, 0x2}, {&(0x7f0000000340)="6fb0dd6770adb564eb166c9cec530d29c0a0f3215c6afc06f39c9a852b13d46dd45dc390b517cccd4dae729503998208dc22f600884a2902db42d55b57a0ff0ebfa911d5c3a5885c816f31418a31aa92e6a3924a2ddcf2f2f104a7353096ca25adf9c054b60839", 0x67, 0xffffffff7fffffff}, {&(0x7f00000003c0)="6bf383b46871388499a264556c0990df2f7dce199df54ff8f8d0a4820f823fe7b2854fd752343f8848a3621ed40dfd3d099a268363d60b29c38fb54d6d5736ac690e289c90e260f60242bd1af40a22dbae4b6ecba81dbcbcb259cb1d1e0416eb38050eec782c297e7bfaab72534d5cfed17700b3337511b9ea4482518f74d0c8606a744b137bdf8b226de4fb5367cd4e3a055e959858e65e067686c56f08c0a66f5b2c2f000cb8b7b9ff6850288ad529d692d7dcee971348f905b48a15fc449c05", 0xc1, 0x3}, {&(0x7f0000000600)="d65de018dbcc1495ed0cb1581e4879ef293fe1b78261cfa9c8a61aec9f5edad0eecbd29f80851b98826e1a056c3aa2f86e30802456195a8419feca89a929c5b614d4c5c7a2d40da6bd3cedf5d9e929d7d8aaa477bbd106281d7c53612f80adb99a2c45a87443dc163c8e4c8335ab62d5339350818cf2696565483a1c99765cf58bba98c75c00dc53e598988d0f3dff6a646c0670a1190e04ac6d1a623d6632cf3011", 0xa2, 0x9}], 0x800002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000004000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffcde, 0x0, 0x0, 0x135) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2d1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000002c0)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="80f9ed22db4f97978066f6a7a4698b8f47fa3571cfc304d52ed72a0ef86dc20c456cc1947cf8eead1c68e4703c662b6f10dd67b557b130115d9d6b5b2e16c90b8f5cb26ddb9d5ef315efcbe3eff7c310649556d5c13b855e34d1dcc67b49818f096d00200c2236e96838a0bcd4f00766b17a01b77f28b3522c3e2d24afc57e1f31", 0x81}, {0x0}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x20, 0x4, 0x80, 0x5, 0x2, 0x3, 0x7f, 0x118, 0x40, 0x271, 0xc03d, 0x9, 0x38, 0x2, 0xffff, 0x8c, 0xfffb}, [{0x60000000, 0x55, 0x77c, 0x9, 0xff5, 0x1, 0x7fffffff, 0x3}], "ff493d41bb197e16c10189ca059d47a0832da8eebd9ab34503aef323d08fbd5864a60736c470b4c1cf4ec093de1aa5dee5fb67e8cabb02081f0cc5388fe409499612035d5f70526b4fcf724cd4e1cd483249b25f6dfa9fdd79e73360082f4c7b831d72c0fb5f9204ece0ad85dcd605f469ae45c241a56210b0c4c7adb726f3809e85e98c226e764c9e52affba2c1408fbe78cb880be9fbbd992c6958eb5e967aab4764264c1503448b63a6e2597e52abbc0d7876afb2ed4e109e7165a512e7b2b3ba2e1d7698493c63694ef02974e8109f39beb11d69e7a0fb156ea5f61f48e0a7fcf736305c1eda28f54a8599aa25b1a3d5341d4333744590", [[], [], [], []]}, 0x571) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000100)) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:04:58 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000225e8c42db815701c4add45bdf8df90000"], 0x48}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000006400012100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000000000008000b00c9000000"], 0x2c}}, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000080)={0x5, 0x7, [{0x0, 0x0, 0x8}, {0x9b, 0x0, 0x5}, {0x8111, 0x0, 0x1}, {0x4, 0x0, 0x8000000000000}, {0x7, 0x0, 0x2d}]}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924923aa, 0x0) 09:04:58 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800270010003904000000000010080000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001800128008000100736974000c0002800600120000000000"], 0x38}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:04:58 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 09:04:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x7, &(0x7f0000000080)=0x3, 0x2) [ 309.283035][ T9428] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 09:04:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000004000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffcde, 0x0, 0x0, 0x135) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2d1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000002c0)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="80f9ed22db4f97978066f6a7a4698b8f47fa3571cfc304d52ed72a0ef86dc20c456cc1947cf8eead1c68e4703c662b6f10dd67b557b130115d9d6b5b2e16c90b8f5cb26ddb9d5ef315efcbe3eff7c310649556d5c13b855e34d1dcc67b49818f096d00200c2236e96838a0bcd4f00766b17a01b77f28b3522c3e2d24afc57e1f31", 0x81}, {0x0}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x20, 0x4, 0x80, 0x5, 0x2, 0x3, 0x7f, 0x118, 0x40, 0x271, 0xc03d, 0x9, 0x38, 0x2, 0xffff, 0x8c, 0xfffb}, [{0x60000000, 0x55, 0x77c, 0x9, 0xff5, 0x1, 0x7fffffff, 0x3}], "ff493d41bb197e16c10189ca059d47a0832da8eebd9ab34503aef323d08fbd5864a60736c470b4c1cf4ec093de1aa5dee5fb67e8cabb02081f0cc5388fe409499612035d5f70526b4fcf724cd4e1cd483249b25f6dfa9fdd79e73360082f4c7b831d72c0fb5f9204ece0ad85dcd605f469ae45c241a56210b0c4c7adb726f3809e85e98c226e764c9e52affba2c1408fbe78cb880be9fbbd992c6958eb5e967aab4764264c1503448b63a6e2597e52abbc0d7876afb2ed4e109e7165a512e7b2b3ba2e1d7698493c63694ef02974e8109f39beb11d69e7a0fb156ea5f61f48e0a7fcf736305c1eda28f54a8599aa25b1a3d5341d4333744590", [[], [], [], []]}, 0x571) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000100)) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:04:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f0000000000)='./file0\x00', 0x581000, 0x8) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x3) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000400)={'team0\x00', 0x7}) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040001) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r13 = syz_open_procfs$namespace(r12, &(0x7f0000000180)='ns/user\x00') ioctl$NS_GET_NSTYPE(r13, 0xb703, 0x0) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r11, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0002278effffffffffffff00000c050079d4dd4c547033c57fd8e6bb4f68330000000000050035003b000000000034000700000005002d0000e4ffff030035000a00000005002e000007000009768791a2119bcea6489cf5e97495101dff286be3a2bd700d440dffb3ff42d5744f53a4437c60"], 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10000004) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x54}}, 0x0) 09:04:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x60001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000306e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 309.435175][ T9428] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 09:04:59 executing program 1: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x21) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={r3, 0x69, "4594e4d05bdece232cccb85f73e72037e7befe888a0a6b198483b68ae8948c6004f1303aac0e193ce3af3ea7540d3b69afae71b02974fb935804b3cdb4179da160fc06e65a3b273b8c84e25795696191431aab59510bf9c595e91ae754ab98a46b93fbe9a0ec76d548"}, &(0x7f0000000000)=0x71) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c653020e014d336b04b030400000000000092290a7e4555a763c15ced6a507f73c4d48ee0ae94a9445bd9ba75d3ca3e9b00bbc618baa64d30c1ffc296c152e86851126d92"], 0x27) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f00000002c0)={0x8, 0xf74, 0x7, 0x9, 0x7, 0x3f}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x10010000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x400}], 0x1c) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 09:04:59 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200200, 0x10) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 09:04:59 executing program 0: ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000000c0)={{0x2, 0x0, @reserved="802a8a0e2f569271deeaacd152949eead475d0c55ae1999fc4f966b7bdca0c85"}}) getpgid(0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) [ 309.826507][ T9451] device geneve2 entered promiscuous mode [ 309.884307][ T9461] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 309.933110][ T9461] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 310.061708][ T9461] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 09:04:59 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffe}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000000) 09:05:00 executing program 1: pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000004f33df6d6f6b570000aaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000800010073667100486818973f73461919309b68e1693572bb000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000001a4e624d29a84abf03265700000000000000000000000000000000000000000000000000000000000000ac20000089b53c947244306a0216a3de887763df5b42498b13bb1938de859ee6d7ae7dd2224dc672b69b4358871b170ea0b667832e5224ee3538f885b7abd9bc4a7d"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r5, @ANYBLOB="000800800000000003000000080001"], 0x3}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000080)={{0x1, 0x0, @descriptor="1e3aa454ece03227"}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r6) socket$inet(0x10, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe0, 0x0) 09:05:00 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xe0, 0x208800) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 09:05:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000004000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffcde, 0x0, 0x0, 0x135) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2d1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000002c0)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="80f9ed22db4f97978066f6a7a4698b8f47fa3571cfc304d52ed72a0ef86dc20c456cc1947cf8eead1c68e4703c662b6f10dd67b557b130115d9d6b5b2e16c90b8f5cb26ddb9d5ef315efcbe3eff7c310649556d5c13b855e34d1dcc67b49818f096d00200c2236e96838a0bcd4f00766b17a01b77f28b3522c3e2d24afc57e1f31", 0x81}, {0x0}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x20, 0x4, 0x80, 0x5, 0x2, 0x3, 0x7f, 0x118, 0x40, 0x271, 0xc03d, 0x9, 0x38, 0x2, 0xffff, 0x8c, 0xfffb}, [{0x60000000, 0x55, 0x77c, 0x9, 0xff5, 0x1, 0x7fffffff, 0x3}], "ff493d41bb197e16c10189ca059d47a0832da8eebd9ab34503aef323d08fbd5864a60736c470b4c1cf4ec093de1aa5dee5fb67e8cabb02081f0cc5388fe409499612035d5f70526b4fcf724cd4e1cd483249b25f6dfa9fdd79e73360082f4c7b831d72c0fb5f9204ece0ad85dcd605f469ae45c241a56210b0c4c7adb726f3809e85e98c226e764c9e52affba2c1408fbe78cb880be9fbbd992c6958eb5e967aab4764264c1503448b63a6e2597e52abbc0d7876afb2ed4e109e7165a512e7b2b3ba2e1d7698493c63694ef02974e8109f39beb11d69e7a0fb156ea5f61f48e0a7fcf736305c1eda28f54a8599aa25b1a3d5341d4333744590", [[], [], [], []]}, 0x571) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 310.488960][ T9483] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. 09:05:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020601010000000e0000000000000100070000000500040000000003006269746d61703a706f7274001c0007800600054000000600000000000900000005000000000000000000"], 0x64}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x1, 'gretap0\x00', {}, 0x3f}) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r4, &(0x7f00000004c0)=[{{&(0x7f0000000300)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000001d40)=[{0x0, 0x1, 0x5172, "3935737d575e668bbcaaf430187a369633c2d0823792698f74109739b8273e9c31147a7aa4f701040000000000005ed96b40dfc485c8e53bc775adde4094a0670a5328503717a7c95b4973ca80a91a1362d8b9bc3c1ec131be0d3463ad8f8446f03f1be2c3f6408de3d15854737fea10bd5ccd2d9afc70dd2e7c3c3c1595c9a0a4"}, {0x0, 0x107, 0x3690}, {0x0, 0x11, 0xfffffffb, "0f6ccf3e5675adb29f37e78f599376905c201815930a3fd9c483dfeba748ef47ca8dbf9f26d701d23b59c781255044cf153ab1214cfff01700e6e3e7060987989c502012979dbb19f0b9083a578761f17df39318920fd6f036a69d4b1023477bcd63028174b580ef71d765bc4ce591b26b71612c3655f7d37fe1f7a6f672a563f7d942f1715a45bcacb43303cfbe1c4775cf4239b80412be9a45749c9f5f707c2b2052da87207bb9ea1f94db6bc7ab75386c9a9379e23d4ddf4b36a8497cf7ecd9922643bf2623dc21b76850e7bcc72c2f57379ea4767d0de86487bd215b896b1e127b3a0a4c06ec84cf475f78e257ffbcf1"}, {0x0, 0x10c, 0x3, "9821d77528df2e5ae2305eec7c37f5dbbd9ef044fdf1443a58ede91f85349813e343bb6d51fbd70bcfdddfaad2547fce0fd2b05eb53151fb66ea7bf1df5e5a286f33a825546df250ba4e"}, {0x0, 0x113, 0x100, "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"}, {0x0, 0x1, 0x7ff, "96df106a32b9990ff83a4dd55c47db89fa3084ce9993b58b467fc1d3991afbc3bd133da36f7214c20b86cfdfba998388114a29ecfa55738c2f3a6c8d747c076e86d7802a1c27b906b7befa76c5a8d30d0037c5083f91827d230601537a3b75e4469f199cdfe5e1aa899dc0119963f899449a8470c8d34d0f19752dd283d8409d08933b5a3e3d3b3b2f70cf023d7ae7f462175dd3a7260af4dd64"}]}}], 0x4000096, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000002c0)=0x10) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x84c0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r6, 0x40045731, &(0x7f0000000240)=0x1) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x2, 0x0) sendto$l2tp(r7, &(0x7f0000000540)="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", 0x1000, 0x400c800, &(0x7f0000001540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, 0x2}, 0x10) getsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 310.565002][ T9480] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 09:05:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x60001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000306e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 09:05:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f0000000000)='./file0\x00', 0x581000, 0x8) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x3) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000400)={'team0\x00', 0x7}) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040001) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r13 = syz_open_procfs$namespace(r12, &(0x7f0000000180)='ns/user\x00') ioctl$NS_GET_NSTYPE(r13, 0xb703, 0x0) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r11, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0002278effffffffffffff00000c050079d4dd4c547033c57fd8e6bb4f68330000000000050035003b000000000034000700000005002d0000e4ffff030035000a00000005002e000007000009768791a2119bcea6489cf5e97495101dff286be3a2bd700d440dffb3ff42d5744f53a4437c60"], 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10000004) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x54}}, 0x0) 09:05:00 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r3 = creat(0x0, 0x0) socket$kcm(0x29, 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000200)={0x6, 0x4}) r4 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r4, r1, 0x0, 0x100000000) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x8}, 0x16, 0x2) fcntl$getflags(0xffffffffffffffff, 0xb) [ 310.728038][ T9506] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.982563][ T9511] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 310.994427][ T9511] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 310.995673][ T9513] device geneve2 entered promiscuous mode [ 311.017699][ T9511] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 09:05:00 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) accept(r0, &(0x7f0000000000)=@tipc=@id, &(0x7f00000000c0)=0x80) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x45a86eae971fa6ee, 0x2) 09:05:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x60001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000306e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 09:05:00 executing program 1: pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000004f33df6d6f6b570000aaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000800010073667100486818973f73461919309b68e1693572bb000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000001a4e624d29a84abf03265700000000000000000000000000000000000000000000000000000000000000ac20000089b53c947244306a0216a3de887763df5b42498b13bb1938de859ee6d7ae7dd2224dc672b69b4358871b170ea0b667832e5224ee3538f885b7abd9bc4a7d"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r5, @ANYBLOB="000800800000000003000000080001"], 0x3}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000080)={{0x1, 0x0, @descriptor="1e3aa454ece03227"}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r6) socket$inet(0x10, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe0, 0x0) 09:05:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000004000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffcde, 0x0, 0x0, 0x135) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2d1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000002c0)) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="80f9ed22db4f97978066f6a7a4698b8f47fa3571cfc304d52ed72a0ef86dc20c456cc1947cf8eead1c68e4703c662b6f10dd67b557b130115d9d6b5b2e16c90b8f5cb26ddb9d5ef315efcbe3eff7c310649556d5c13b855e34d1dcc67b49818f096d00200c2236e96838a0bcd4f00766b17a01b77f28b3522c3e2d24afc57e1f31", 0x81}, {0x0}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x20, 0x4, 0x80, 0x5, 0x2, 0x3, 0x7f, 0x118, 0x40, 0x271, 0xc03d, 0x9, 0x38, 0x2, 0xffff, 0x8c, 0xfffb}, [{0x60000000, 0x55, 0x77c, 0x9, 0xff5, 0x1, 0x7fffffff, 0x3}], "ff493d41bb197e16c10189ca059d47a0832da8eebd9ab34503aef323d08fbd5864a60736c470b4c1cf4ec093de1aa5dee5fb67e8cabb02081f0cc5388fe409499612035d5f70526b4fcf724cd4e1cd483249b25f6dfa9fdd79e73360082f4c7b831d72c0fb5f9204ece0ad85dcd605f469ae45c241a56210b0c4c7adb726f3809e85e98c226e764c9e52affba2c1408fbe78cb880be9fbbd992c6958eb5e967aab4764264c1503448b63a6e2597e52abbc0d7876afb2ed4e109e7165a512e7b2b3ba2e1d7698493c63694ef02974e8109f39beb11d69e7a0fb156ea5f61f48e0a7fcf736305c1eda28f54a8599aa25b1a3d5341d4333744590", [[], [], [], []]}, 0x571) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:05:01 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = semget(0x0, 0x2, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f0000000600), 0x6000) r4 = creat(0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000200)) semctl$SEM_INFO(r3, 0x0, 0x13, &(0x7f0000000180)=""/73) r6 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) sendfile(r6, r1, 0x0, 0x100000000) r7 = creat(0x0, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/btrfs-control\x00', 0x101, 0x0) ioctl$KVM_GET_MSRS(r8, 0xc008ae88, &(0x7f00000006c0)={0x3, 0x0, [{}, {}, {}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r12) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x44008, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000000800,max_read=0x0000000000000982,blksize=0x0000000000000000,default_permissions,allow_other,blksize=0x0000000000000200,max_read=0x0000000000000001,allow_other,euid>', @ANYRESDEC=r5, @ANYBLOB=',euid>', @ANYRESDEC=r12, @ANYBLOB=',seclabel,appraise,appraise_type=imasig,\x00']) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000080)) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 09:05:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) r1 = creat(0x0, 0x0) accept(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x80) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x64}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000280)={'team_slave_0\x00', {0x2, 0x4e21, @remote}}) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0xafb9d0c2fade2e35, &(0x7f0000000200)=""/83, &(0x7f0000000180)=0x53) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r7, &(0x7f0000000d00), 0x400004e, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) r9 = memfd_create(&(0x7f0000000000)=',eth0\x00', 0x5) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r9, 0x1, 0x2000, 0xfffff000}) [ 311.564942][ T9549] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.574879][ T9542] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 311.635524][ T9542] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 311.723867][ T9542] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 311.739029][ T9552] ================================================================== [ 311.747229][ T9552] BUG: KCSAN: data-race in ip6_tnl_start_xmit / ip6_tnl_start_xmit [ 311.755119][ T9552] [ 311.757572][ T9552] write to 0xffff8880afb98140 of 8 bytes by task 9557 on cpu 1: [ 311.765219][ T9552] ip6_tnl_start_xmit+0x449/0x1160 [ 311.770386][ T9552] dev_hard_start_xmit+0xef/0x430 [ 311.775502][ T9552] __dev_queue_xmit+0x14e9/0x1ba0 [ 311.780562][ T9552] dev_queue_xmit+0x21/0x30 [ 311.785082][ T9552] packet_sendmsg+0x1ed8/0x3b60 [ 311.789980][ T9552] sock_sendmsg+0x9f/0xc0 [ 311.794606][ T9552] ____sys_sendmsg+0x212/0x4d0 [ 311.799431][ T9552] ___sys_sendmsg+0xb5/0x100 [ 311.804033][ T9552] __sys_sendmmsg+0x123/0x350 [ 311.808734][ T9552] __x64_sys_sendmmsg+0x64/0x80 [ 311.813680][ T9552] do_syscall_64+0xcc/0x3a0 [ 311.818182][ T9552] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 311.824052][ T9552] [ 311.826504][ T9552] read to 0xffff8880afb98140 of 8 bytes by task 9552 on cpu 0: [ 311.834102][ T9552] ip6_tnl_start_xmit+0x436/0x1160 [ 311.839214][ T9552] dev_hard_start_xmit+0xef/0x430 [ 311.844275][ T9552] __dev_queue_xmit+0x14e9/0x1ba0 [ 311.849298][ T9552] dev_queue_xmit+0x21/0x30 [ 311.853793][ T9552] packet_sendmsg+0x1ed8/0x3b60 [ 311.858643][ T9552] sock_sendmsg+0x9f/0xc0 [ 311.862962][ T9552] ____sys_sendmsg+0x212/0x4d0 [ 311.867740][ T9552] ___sys_sendmsg+0xb5/0x100 [ 311.872348][ T9552] __sys_sendmmsg+0x123/0x350 [ 311.877044][ T9552] __x64_sys_sendmmsg+0x64/0x80 [ 311.881911][ T9552] do_syscall_64+0xcc/0x3a0 [ 311.886520][ T9552] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 311.892411][ T9552] [ 311.894757][ T9552] Reported by Kernel Concurrency Sanitizer on: [ 311.901055][ T9552] CPU: 0 PID: 9552 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 311.909684][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:05:01 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000180)='\'[\x00', &(0x7f00000001c0)='+\x00', &(0x7f0000000200)='tasks\x00', &(0x7f0000000280)='keyringkeyring\x00', &(0x7f00000002c0)='*+%-bdev}ppp1Q[\x00', &(0x7f0000000300)='cpuset.mems\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='],\x00'], &(0x7f0000000500)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='./cgroup.cpu/syz0\x00', &(0x7f00000004c0)='\x00'], 0x364db6c44b20bcc1) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={r5, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x3, 0x0, 0x0, 0x4, 0x3ff, 0x8, 0x0, 0x0, 0x9, 0x5, 0x3, 0x4]}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e24, 0x8, @empty, 0x6d}}, 0x26a, 0x7ff}, 0x90) sendfile(r3, r1, 0x0, 0x100000000) [ 311.919744][ T9552] ================================================================== [ 311.927819][ T9552] Kernel panic - not syncing: panic_on_warn set ... [ 311.934429][ T9552] CPU: 0 PID: 9552 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 311.943018][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.953190][ T9552] Call Trace: [ 311.956500][ T9552] dump_stack+0x11d/0x181 [ 311.960853][ T9552] panic+0x210/0x640 [ 311.964797][ T9552] ? vprintk_func+0x8d/0x140 [ 311.969390][ T9552] kcsan_report.cold+0xc/0x15 [ 311.974137][ T9552] kcsan_setup_watchpoint+0x2e2/0x380 [ 311.979639][ T9552] __tsan_read8+0xc6/0x100 [ 311.984361][ T9552] ip6_tnl_start_xmit+0x436/0x1160 [ 311.989718][ T9552] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 311.995762][ T9552] ? __read_once_size+0x68/0x120 [ 312.001346][ T9552] dev_hard_start_xmit+0xef/0x430 [ 312.006432][ T9552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.012719][ T9552] __dev_queue_xmit+0x14e9/0x1ba0 [ 312.017787][ T9552] ? skb_set_owner_w+0x158/0x290 [ 312.022733][ T9552] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 312.028971][ T9552] dev_queue_xmit+0x21/0x30 [ 312.033536][ T9552] packet_sendmsg+0x1ed8/0x3b60 [ 312.038444][ T9552] ? __const_udelay+0x36/0x40 [ 312.043121][ T9552] ? __udelay+0x10/0x20 [ 312.047316][ T9552] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.053629][ T9552] ? aa_sk_perm+0x170/0x590 [ 312.058153][ T9552] ? apparmor_socket_sendmsg+0x3b/0x50 [ 312.063656][ T9552] ? packet_getsockopt+0x640/0x640 [ 312.068782][ T9552] sock_sendmsg+0x9f/0xc0 [ 312.073137][ T9552] ____sys_sendmsg+0x212/0x4d0 [ 312.077933][ T9552] ___sys_sendmsg+0xb5/0x100 [ 312.082521][ T9552] ? __fget+0xb8/0x1d0 [ 312.086628][ T9552] ? __fget_light+0xaf/0x190 [ 312.091240][ T9552] ? __fdget+0x2c/0x40 [ 312.095360][ T9552] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.101617][ T9552] __sys_sendmmsg+0x123/0x350 [ 312.106320][ T9552] ? _copy_to_user+0x84/0xc0 [ 312.110913][ T9552] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.117218][ T9552] ? put_timespec64+0x94/0xc0 [ 312.122002][ T9552] __x64_sys_sendmmsg+0x64/0x80 [ 312.126892][ T9552] do_syscall_64+0xcc/0x3a0 [ 312.131450][ T9552] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 312.137341][ T9552] RIP: 0033:0x45b399 [ 312.141249][ T9552] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.161318][ T9552] RSP: 002b:00007f00357f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 312.169742][ T9552] RAX: ffffffffffffffda RBX: 00007f00357f36d4 RCX: 000000000045b399 [ 312.177783][ T9552] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000006 [ 312.185762][ T9552] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 312.193819][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 312.201821][ T9552] R13: 00000000000008cc R14: 00000000004ca262 R15: 000000000075bf2c [ 312.211209][ T9552] Kernel Offset: disabled [ 312.215548][ T9552] Rebooting in 86400 seconds..