xd0/LS\xdf\xd4\xc7\x91S\xb7\x1f\f\xbe\xde4F+\x85\xb4\x97', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x48) [ 571.612234] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start ff87fbff) [ 571.666584] FAT-fs (loop5): Filesystem has been set read-only 20:06:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00\x00\x00\x02', {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'veth1_to\xc4[\xb5\x88m\x00\x00\x01', {0x2, 0x0, @multicast2}}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vga_arbiter\x00', 0x7ffd, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x1, 0x12) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x6}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000480)={r6, 0x1}, 0x8) pkey_alloc(0x0, 0xffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000400)=""/10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x1000) close(r7) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') preadv(r9, &(0x7f0000000480), 0x10000000000001ed, 0x0) 20:06:52 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10020006007, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='ext4\x00', 0x0, 0x0) 20:06:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x2, 0x32, 0xffffffffffffffff, 0x0) [ 572.101518] print_req_error: 280 callbacks suppressed [ 572.101533] print_req_error: I/O error, dev loop10, sector 2 flags 0 [ 572.114641] EXT4-fs (loop10): unable to read superblock 20:06:53 executing program 5: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) select(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0) 20:06:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x7, 0x10, 0x7, 0x0, 0x0, [{}, {}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 20:06:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, 0x0, 0x10013c93e) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 20:06:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 20:06:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd101, 0x0, 0x60}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 20:06:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, 0x0, 0x10013c93e) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 20:06:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0xffffff87}}, &(0x7f0000000080)='M[Z\xf2\xa4\nf07\xc3Ju-\x01\xc2W>\x86E\x10*\xe7{\x15\xba)%\xdc@\x8f*\xe1=\x85-\xf6\xd3\xf2a|\xa6\x1f\x97\xbe70BL\x7f=\xc08\xc2\xb4\x85\xfc?8\xec\x93\a[M-\xcc\b\xad\xceP9\x8a\xc40\x83\xd5\b\x1d\xc7o\xbb\xec\x87\xdf\xd4\x9c\xa7s\xbf\xfd\xdc\xc9\xffI\x82r\x90\x05\xb5\a\xec`VY\x94}\xbfMF\x84\xb9ZmFW\xe39+s\xa16\xff\xb5 \xa4d\x1bm=\x1c\xa1`\"\xaf\xe4\x9b\xd8\xcb\xb3\x82D\xc2\xa4>\x87\xbd\xfe\x1b\x1b\xae\xe7\xe4\x7f\xd0/LS\xdf\xd4\xc7\x91S\xb7\x1f\f\xbe\xde4F+\x85\xb4\x97', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x48) 20:06:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, 0x0, 0x10013c93e) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 20:06:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, 0x0, 0x10013c93e) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) [ 574.910800] device bridge_slave_1 left promiscuous mode [ 574.916294] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.971272] device bridge_slave_0 left promiscuous mode [ 574.976731] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.334772] net_ratelimit: 22 callbacks suppressed [ 575.334781] protocol 88fb is buggy, dev hsr_slave_0 [ 575.344845] protocol 88fb is buggy, dev hsr_slave_1 [ 576.220748] protocol 88fb is buggy, dev hsr_slave_0 [ 576.225844] protocol 88fb is buggy, dev hsr_slave_1 [ 576.543449] protocol 88fb is buggy, dev hsr_slave_0 [ 576.548614] protocol 88fb is buggy, dev hsr_slave_1 [ 576.624087] protocol 88fb is buggy, dev hsr_slave_0 [ 576.629185] protocol 88fb is buggy, dev hsr_slave_1 [ 576.637265] bond5 (unregistering): Released all slaves [ 576.649200] bond4 (unregistering): Released all slaves [ 576.661309] bond3 (unregistering): Released all slaves [ 576.674732] bond2 (unregistering): Released all slaves [ 576.687895] bond1 (unregistering): Released all slaves [ 576.738052] device hsr_slave_1 left promiscuous mode [ 576.808448] device hsr_slave_0 left promiscuous mode [ 576.870029] team0 (unregistering): Port device team_slave_1 removed [ 576.882792] team0 (unregistering): Port device team_slave_0 removed [ 576.895605] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 576.974309] bond0 (unregistering): Released all slaves [ 577.027460] protocol 88fb is buggy, dev hsr_slave_0 [ 577.032516] protocol 88fb is buggy, dev hsr_slave_1 [ 577.116940] IPVS: ftp: loaded support on port[0] = 21 [ 577.187835] chnl_net:caif_netlink_parms(): no params data found [ 577.223642] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.230327] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.237203] device bridge_slave_0 entered promiscuous mode [ 577.245509] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.252073] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.259388] device bridge_slave_1 entered promiscuous mode [ 577.277800] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 577.290748] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 577.306456] team0: Port device team_slave_0 added [ 577.312902] team0: Port device team_slave_1 added [ 577.372862] device hsr_slave_0 entered promiscuous mode [ 577.440995] device hsr_slave_1 entered promiscuous mode [ 577.557481] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.563916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.570558] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.576975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.619388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.633559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.641358] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.661429] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.674680] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.690074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.698397] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.704806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.729336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.743126] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.749562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.782681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 577.790833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 577.805398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.812876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.828678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 577.840538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 577.869821] 8021q: adding VLAN 0 to HW filter on device batadv0 20:06:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e652e0f29f0260f0f2390f20f219a66b9ac0a00000f323ef20f1a5b00ba4100edfe47070f210866b8000000000f23c80f21f866350800f0000f23f8f3a5", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000740)={0x8, "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", 0x1000}, 0xffffffffffffff35) 20:06:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd101, 0x0, 0x60}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 20:06:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0xffffff87}}, &(0x7f0000000080)='M[Z\xf2\xa4\nf07\xc3Ju-\x01\xc2W>\x86E\x10*\xe7{\x15\xba)%\xdc@\x8f*\xe1=\x85-\xf6\xd3\xf2a|\xa6\x1f\x97\xbe70BL\x7f=\xc08\xc2\xb4\x85\xfc?8\xec\x93\a[M-\xcc\b\xad\xceP9\x8a\xc40\x83\xd5\b\x1d\xc7o\xbb\xec\x87\xdf\xd4\x9c\xa7s\xbf\xfd\xdc\xc9\xffI\x82r\x90\x05\xb5\a\xec`VY\x94}\xbfMF\x84\xb9ZmFW\xe39+s\xa16\xff\xb5 \xa4d\x1bm=\x1c\xa1`\"\xaf\xe4\x9b\xd8\xcb\xb3\x82D\xc2\xa4>\x87\xbd\xfe\x1b\x1b\xae\xe7\xe4\x7f\xd0/LS\xdf\xd4\xc7\x91S\xb7\x1f\f\xbe\xde4F+\x85\xb4\x97', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x48) 20:06:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 20:06:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, 0x0, 0x10013c93e) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 20:06:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, 0x0, 0x10013c93e) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 20:06:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd101, 0x0, 0x60}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 20:06:59 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, 0x0, 0x48890) mkdir(&(0x7f0000000000)='./file0\x00', 0xdffffffffffffffe) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00?\x0f', 0xffffffffffffffff, 0x4c00000000006800}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2, 0x0) dup(0xffffffffffffffff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) 20:06:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0xd101, 0x0, 0x60}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 20:06:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e652e0f29f0260f0f2390f20f219a66b9ac0a00000f323ef20f1a5b00ba4100edfe47070f210866b8000000000f23c80f21f866350800f0000f23f8f3a5", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000740)={0x8, "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", 0x1000}, 0xffffffffffffff35) 20:06:59 executing program 0: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getrule={0x14, 0x22, 0x401}, 0x9c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff25, &(0x7f0000000180)={&(0x7f0000000040)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in=@multicast1, 0x0, 0xa}, [@srcaddr={0x14}]}, 0x3c}, 0x8}, 0x0) 20:06:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x40122000000003, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x30b000, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)=0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000700)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM\x0eV5\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1eD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N\x00%q\x00\x00\x00\x00\x00\x00\x00\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x2301}) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20:06:59 executing program 2: r0 = socket(0x1000000000000010, 0x20000000802, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="240000001a0025f00018009300edfc0e800300000000af00000000000800010048050006", 0x24) [ 578.892509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 20:06:59 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, 0x0, 0x48890) mkdir(&(0x7f0000000000)='./file0\x00', 0xdffffffffffffffe) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00?\x0f', 0xffffffffffffffff, 0x4c00000000006800}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2, 0x0) dup(0xffffffffffffffff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) [ 578.972449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 20:06:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e652e0f29f0260f0f2390f20f219a66b9ac0a00000f323ef20f1a5b00ba4100edfe47070f210866b8000000000f23c80f21f866350800f0000f23f8f3a5", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000740)={0x8, "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", 0x1000}, 0xffffffffffffff35) 20:06:59 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, 0x0, 0x48890) mkdir(&(0x7f0000000000)='./file0\x00', 0xdffffffffffffffe) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00?\x0f', 0xffffffffffffffff, 0x4c00000000006800}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2, 0x0) dup(0xffffffffffffffff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) 20:06:59 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c000700030001000000000025000000000000000000"], 0x16) sendfile(r0, r0, &(0x7f0000000140), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1e4, &(0x7f0000000000)=[{}]}, 0x10) 20:07:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x100000000000002, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @link_local, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 20:07:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e652e0f29f0260f0f2390f20f219a66b9ac0a00000f323ef20f1a5b00ba4100edfe47070f210866b8000000000f23c80f21f866350800f0000f23f8f3a5", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000740)={0x8, "ada55b881888a64e792d9a4f8e8e10637e62e7156901a194b2da09f0f2d825993377dc83cfa11ff304d4d7179baacc7233b8c3d530b48e1e1ad132a5a5043a0084b0982777a9797d2a1184148045c7c5c433bcaa81ca713e70493b2b737b479e3e171bef4d572fe5ca9e10f381654350968c2463689d3009bfb3815d64f5919470153aa7712c8b6c0ef83f38721fe0c65a13c2ce06a8c90541b23f8af6d5b36c77691d716c8328a4b9ed8b6b28baa832374366ba4fa8e80064d98bbda13c08c5b4e39babc9a381e71c3e0347b23f8b73ad639e1d6898401ac440d0f3c386b55f401963af061deb152015142449fb713e8021821f95ed521195ff33506a5ed43b755c59eb31b5ce015d0311e3a1080d6a2c5580a9171249ebcb5b07b67cc307d80072fbef5fd2ac6d188a6ad8b29a3c155f8c12c12074394dba0cccc462f39a40175d1023f3d622fa2249c7b9dd6043a9440f233337954ca5114fcd7f906c3038cb6b528d2e89e607910904d345a5884fdd6dac791e32838412f9d01afff2fa22a22e5bcc49c1dcbf652cc786caef71ab96be4638c8ab5436d8872e7f71033d311fbec6e75ce408e62320554cae777a7929bd0380883604c264ab470659b69eb114c9e83d09194f235200a87c0d805dc09c29693eea279b06f218d0d9d9cb6866333de77395a2108f7f23ff78499fb1bdc5702bc6593586fc9d0ff5f873d236da788afe6b4eed60c611bfad621dad6df391154b745473f6a2beb5b6a6fc8cdcaea25e14e29ade4d8904fc0bd47056fe4e9dbb8112cc1c8849e8a562d0634688675d3af2407497de8ea854a4f463ee9a3844700beac66f09803baad46f31d367f14fa0983bbbdee4c6d2ac9e5b0ea1d0ae9ab380bc8ed01d98e29bfaf7ac6a3ebcc6b9f07b1b3e268758ea106cc4cb652eda66038c80d8dff69098d26c8a05f0f55c2fe5bee142297f485c9baec438c80264db6947b2ce22792f5f4cc9c8f616b99044ac50d7b71bcf60759fc86c9c07353d382c51db39230ed7d35e0d719e14cdd6d7d1db6b7694a9ff325143f9ba91c27af60bee1c5ea85142beaef64efc0b2926e3e1974982de6997bdaa4b2f4c056e1ede444e1336edc49f9d7c4f9f267321d62dc01517d55a13e0c2fc69e587ff8911417b7c7adbf911cad4efcf5b26b63e68006a8730b831a85ffdc9acccd5840889e059872ec7a9738ddca40f53382910959e5c3ca0947067844c8d75773f3d9446d04aaf4e05c9af21d9631a1f1579d02196a2df8e3a3d35224d73ad91e87f9e49d87b11f0558ce09325ae725f5f0c7c8beb89f762a3d202405752b0ccceaf35057f621d532ee83ace15dc2c1bf570946eb76897d198d6b4833432916e5145f4263dbecb835b3c2ec8308f9eba67bfa96399057612b8f8883b9f5929fde349ab8c1d0f9986c0ac6c312db2c24636ebb18140de68d22444cb72970b5d6dc87534e62a636ace4d443deb3130d5d450cd1937071c4d68625a3fc548198ad0fde7104b406bab3db2dc4d2cb19cd6344eee32c7f9b4101f8a6a7835c94d386e0de37bae93c6c4bcb6b5cfb854f53c7e03affd92884ba8758f8dba323a3fc2bcc02bbb25e113b0b097372f1d3bf3890154ede0f25ab2e48e9b8ecdab2daed3711d64178ba2a86ffc178426db851ed7f31950ddd83b19f0a8cee33434381a1261fa9751ed96d54f676c240dad14c7848334bffed69dbb1efb37f4bbe76d71ebceeba30a47ee73f668ee31b94f7d2bdefcad0d0cae17b9d909a9e39518d99d536a2095990f6725864ef2af89210d0be42eedd9a5db71dbf0dcaf3ff5c9ccdc77fb0f394f8cea889036f59e742abe61d45484820579937b3b22ea1da5b28afa9c72db860b516458f8868b71311224558b28e5cbbde71c1cd721d25cdb807df59590c6116828d2e8d06fc7dbac37e4bf9b357a360a5e902b104696f69ff83372a8598372cedbd6d65edf62542d57af8adfe830e202e8e6f72a860aaa17f21aa5d91101ddff216ed72cbf87ad59a29bfc09f9275ccc18f629d9272ebfe424a431ebac7822d9bd32c348b751417110d9476d4a8a0a2def49d375e4d8d3a8593b8a3fc3c1c905ce204d0a24c4e716944a88900148bcc4a1e9ce0231a6245306c32abdc77c4b56e42a29a92f968977bac74cfcb2769c2084985f882920f5f0e173bdd8b2de23de253e8f2e1fc4ea0e0aa6f9f76c6ba3a707f58259280da921a85d50cf259978a942375eff965e18e5d54129b5033185eaa456db6bb07f14acd06c4d526f729157daf6b6a297ce3f8d09323f3bcc7b7792a9063bbbf5b3924d4442422d64aaaf1c35c2fbf95e8bd4e2d1290947f8269da9d5f8243ec139a1197571395adccf402d43549135dd6258d6c98ef0d927ff33a5f9d67ff6b62a00e222efd46b17dda20b60debbe690dcfd78381ae1b0ee5c75b56108db38d7450c74ac509b042e7645300f03fa830c1b07f1e44dc58c93b0a2bc608005dca5b3919243431ef9ae665f48674959ca19b6ccffd9259b1ed717592492fd1ad17812cabeafd5d9adf74ac78ab759e8c6f54e2ea204a8f8400d72dcf97ce15d8a66147fd17b7c92c8e21076ea967aebea4859c6f99ed43c4c7d33a526c1fb1168a979f330be729593d598ca9451cadc295e5f0835b9dc507c4048186dc8b6e79251d7c3085ae5a93a4b06cb047d319771b09328bd0ca51796b1e7b028b0b0fd1de37b30876dccc57b237f31ee0e2df0aac9326bb43dcafc623fa78d274a5f2bb3073a3ed853be2380a039685c78e1a6eebe92d737c7e28b09e54de8019b8bef027d877cf6acabc23a34602a518c3867ba9b2b726424362f843410782e17072e808db733fa0b8926d68d71b0c32a37adc563520c332e404d17210a33773e912380f8d99af1a40b104797f9f116575545d223ba84db98f74224370278b7d38acfcc9ec9f788dd8fe7bb02d677ab1acaeb814f4e2a141c040c94109fd517d4647d1d906dadcdbdc99103c9c8898a51eaa540fe33f1aef70a6f480972b94e2db1530649534fe9a976b5035a63273eab57e507573be5ceaf54dc15a6eeadd2f9008bbf7e59b5d01a5d753c302a90f35f0eb0947cfc6006c99681c9aca869d645e999a029dede3c208a1d6cd4d1fe681e0002c38146c7470a93faf0fb18cb1163b39c9ca250e01b7a090ff0b4946a1dc397844d8d51694d1fb5f2bb61d10aff49b07628f33c44e7d55e910b54743ebb82a93c0be2e68efc88fb634ed6c116a999a92d64ef64352f2302ab64f5c4159356f977b35df651d30c85bbffa30caf521f328e1c17302e302b34fb719a7d3388bacd0ddce8a6badbd5a21c7a6ca493d82c20a69134e0e16e583afebbfa70e73c612d2e96d35d6c87f258e8681b22ed1c876bbc1d53c9f1a084d1b76792d1fc71a81677485478f55491a1b7c276365da41f09e24c1bd70d614a411cbf251dd9444ce5ead419455254a556aaf270d65151ef7077590e702c1f795e295762763dbba02212f7003213981871065eb4ec3ec71e0693539a454f222db4ce45f6c71d4943fa244c30ca0eedc1919fc1d765bc1acec1b468c8bdd8d619e530163b92c0182d395b405b5ff082b2d2c1d1b2e19c881bae5c444521bfe2bbac7c04873e1e8e8a4097ecf7c69bfc11af0c90b2ddc5b11f45fcf43ad9edfd7ecebff060ce5e3b8b86ec29488a9453665ab8308112ab4a8fe84d9b931ba0c564fc79a9eb1c67bd0fd9e50ae441140faea5521fc62ee825cd84ae276f6e4f109202a07f620c394471cd3edfd7d7a58a98c7f5ef690b89d0fb77e216114b00d3e4795cb999eee2786e0b8b319a45eb2a6557d62d5efa34aea8c9037b41c7120f1d365a73bbf960a23c94b1768cff1f242ae9a633ca1cc56b6cf3285c4a501bbc0ece7561c2dc2ae91f030deb8f8014fe7609c97434a4991649cebaa3a6e59b284a37cecfeb68591c297e55316429c3a16d9baedcbea4680502c6da851e3a9b110dd03e95a2b149bb891d71de8a0d68c975b59d781c5350814126dc393dd7e21505219fc1241cfa8949a4928946a3260db2718a20c16acda7eb01afe0668d7169b2f8660ca4c0ce2df3ccf43081211829c1c84a506b02c501673d3dd56e197038125a0a48e3dbc23e1f44380b1ec1415b964d02448c115f587600ea550f0607d0be9438906c9c93449e0954cbbccc27d57600f3c85e2cc60e98159dc0127bb443656413d19e453696dcd760d6d9ad4e0468069f7595a816e70df8b2043f7e9fa3f6e2503905c78d6e81e43c7dd440a5ad5dc690eb971f804af3014f28c29de15f4093c9ef920ee8e6fc34a2d4e8f839407ff42a3ea53cba488ca0d763a191483dff97f31053fc60092714bedab732d2b482142ef382e07867c11d710c24da30957d44fb933f399c937c66730d044bc5a4a7a4e27626e137c94afd0c5a461e7a40f2e387c5b38183fae147420b3f570f243b73c918ee4149eadc50103a514003d4d63dccd18f89904f42ff29349c091682e71feabc25a98de1841c3972e40bbfc029563e6212ea4deadf632932dfa45a6e2b77c4b9a217e7222deca4e7e75d918bd1efaadfe5c6ead6e87e1f8101278b63e9b784d9ff866b031b8bfed04528bee00708850281cfec88b54bd88adbe408386aecd1b9448f9788e664fa4ec9d5148a26ba802ad97a98ef567e32ea6eadc747b616c128e9c6bc90b0ffb0e39bfa085777d968e53805def6dd3d166462c0b67326a6cbbd2c1967cdfd5071082bd2eee182f875f0cfadca976bcf08018c38d8a79f47b93037d850e561360a19f29f7310db7674cede7ffd60479f2f70840ac0e7dca1bf466a1c8785c1bbcc6045da681df57a096bca37fcd2074d2f9b48ba0a798973b5e825df0bd2761e39660c7f1f1ba486e00fd92032d68516a580160b187231b476ffccdf9239ec8e4390c0510d0c669183697a7145daef211c2609008753541c4016e2aac7521325548d9b725f9ebdf3ff67b4c1c48b4853961c928684542e094c1214e12763889fa1e890e3b5c7cca27c3e56d7d336923a2fb71af0aa8a8b1a83de579f883104f33e456522f12cabc9e75f6e205d996711d68991eaff715d174efe8e4eedecef8f4256e20263ac5576dfd084ba87e8b139ce4649d0804ca713e30d1050f8bd99baf7ca9e6e97193b69364b3e1fbf4c1a040af2112cdff20505b5190b99c88a001f02d002cc48c07fcfb21342ca25af9a7f968393178feb31236d8b4c429fbdf0795a5375784f88be8507f422c1728739e92b3db2d123c7c087fd07f110e97dd49271ec9e914c0b55b9792a8150da74802e9983e7cf76498030aa71aac35c212bff5c6d670dd45d9020eecf9f72fa09523d5af197b1f547bda8af251142a348a782c67b285146aeaa6c6b5efd62cc07c6b2d2818cea51e13e905c1f563dfa002236211614ab7c7c7a36fa68a4427570af2375406cf185dae42fa3e7e5da24792466e11bb250cb0679e319d0cd7bd6a338c7191d3beb3ace992730235f1c436d4cab87971b5e5aa606273ebd87a83f4e3ccba4667866b54e30fc912012fbaf6f4ccae8a6ed274a57cc6debed1fe98fa5c817836591b83f6e664a8cdf2ca99722ff0b88c15681f911e4a7143d3917da0a8cf87ae68c4e1fefd077b53ecd73a7d3bd43021edc26e2fe3d3455dc87ee70301d0303f5f75e7928ac15ffe34608d59b2f4c8fdf5e50ed6bc3899c74a9a796646f5a9ba42872875ed1460913aeab4570288ba46770b7cd99ce9db889454419295f4d02dd8740c37862216c383e8f9bb8", 0x1000}, 0xffffffffffffff35) [ 579.379067] device nr0 entered promiscuous mode 20:07:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, r3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='xfs\x00', 0x4) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000040000, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="8aeefdcc5adaf09685b188fdfc31f3332f1ed685f4dbacc5c2cb067fd8479469906b21bb1ae3545a8335aee574a0acc2d098a7cd883599c3f307ac38874be83a9874af4b58d062e48191f7c12d8edf7c5cef2d326546f32517bb32c6191db3e38171f23fe5f9b79b38b3c5b1447d0a678ef7eb5f7bbbbe4e0826d05f5baeed7fa89368c501f544a009", 0x89}], 0x800, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffffffffffffe, 0x0, &(0x7f00000001c0)) 20:07:00 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, 0x0, 0x48890) mkdir(&(0x7f0000000000)='./file0\x00', 0xdffffffffffffffe) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00?\x0f', 0xffffffffffffffff, 0x4c00000000006800}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2, 0x0) dup(0xffffffffffffffff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) 20:07:00 executing program 3: clock_adjtime(0x44, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000003}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000080)) 20:07:00 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101001, 0x0) recvmmsg(r0, 0x0, 0x2c6, 0xfffffffffffffffe, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x3, r1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0xff}, 0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) r2 = dup(0xffffffffffffffff) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140), &(0x7f0000000240), 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/79, 0x19) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000700)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000640)=0xfffffe27) [ 580.416021] net_ratelimit: 23 callbacks suppressed [ 580.416048] protocol 88fb is buggy, dev hsr_slave_0 [ 580.426978] protocol 88fb is buggy, dev hsr_slave_1 [ 580.739331] protocol 88fb is buggy, dev hsr_slave_0 [ 580.744720] protocol 88fb is buggy, dev hsr_slave_1 [ 580.818909] protocol 88fb is buggy, dev hsr_slave_0 [ 580.824032] protocol 88fb is buggy, dev hsr_slave_1 20:07:01 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c000700030001000000000025000000000000000000"], 0x16) sendfile(r0, r0, &(0x7f0000000140), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1e4, &(0x7f0000000000)=[{}]}, 0x10) 20:07:01 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, 0x0, 0x48890) mkdir(&(0x7f0000000000)='./file0\x00', 0xdffffffffffffffe) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00?\x0f', 0xffffffffffffffff, 0x4c00000000006800}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2, 0x0) dup(0xffffffffffffffff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) 20:07:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, r3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='xfs\x00', 0x4) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000040000, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="8aeefdcc5adaf09685b188fdfc31f3332f1ed685f4dbacc5c2cb067fd8479469906b21bb1ae3545a8335aee574a0acc2d098a7cd883599c3f307ac38874be83a9874af4b58d062e48191f7c12d8edf7c5cef2d326546f32517bb32c6191db3e38171f23fe5f9b79b38b3c5b1447d0a678ef7eb5f7bbbbe4e0826d05f5baeed7fa89368c501f544a009", 0x89}], 0x800, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffffffffffffe, 0x0, &(0x7f00000001c0)) 20:07:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, r3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='xfs\x00', 0x4) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000040000, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="8aeefdcc5adaf09685b188fdfc31f3332f1ed685f4dbacc5c2cb067fd8479469906b21bb1ae3545a8335aee574a0acc2d098a7cd883599c3f307ac38874be83a9874af4b58d062e48191f7c12d8edf7c5cef2d326546f32517bb32c6191db3e38171f23fe5f9b79b38b3c5b1447d0a678ef7eb5f7bbbbe4e0826d05f5baeed7fa89368c501f544a009", 0x89}], 0x800, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffffffffffffe, 0x0, &(0x7f00000001c0)) 20:07:01 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, 0x0, 0x48890) mkdir(&(0x7f0000000000)='./file0\x00', 0xdffffffffffffffe) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00?\x0f', 0xffffffffffffffff, 0x4c00000000006800}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2, 0x0) dup(0xffffffffffffffff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) [ 581.222826] protocol 88fb is buggy, dev hsr_slave_0 [ 581.229231] protocol 88fb is buggy, dev hsr_slave_1 20:07:02 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, 0x0, 0x48890) mkdir(&(0x7f0000000000)='./file0\x00', 0xdffffffffffffffe) mount(0x0, 0x0, &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00?\x0f', 0xffffffffffffffff, 0x4c00000000006800}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2, 0x0) dup(0xffffffffffffffff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) [ 581.625615] protocol 88fb is buggy, dev hsr_slave_0 [ 581.630808] protocol 88fb is buggy, dev hsr_slave_1 20:07:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x1f0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x2, 0x0, &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bc\x00', 's\x01\x000\x00\x00\x02\x00\x00\x00\xff\xff\x00', 'vcan0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0x70, 0xe8, 0x160}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "3c0d7e5830346a2ed16158a74e8f4041660fa995860632657d780125539354f0526a69680cf86d1658f344fc1000ee2066922b22fe2b586b8697bd2ece2bc2a3"}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "2ce719c99cffcbf4d7e80e410bb5007c6981466b6431c7e6b129fcead3f149b589996102627779dc3b23bf8250fc3acd9e8be08a4bbab9be219f504cae3a7e4d"}}}}]}, {0x0, '\x00', 0x1, 0xfffffdfffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x268) syz_open_procfs(0x0, 0x0) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) 20:07:02 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c000700030001000000000025000000000000000000"], 0x16) sendfile(r0, r0, &(0x7f0000000140), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1e4, &(0x7f0000000000)=[{}]}, 0x10) 20:07:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4) 20:07:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4) 20:07:02 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4) 20:07:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, r3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='xfs\x00', 0x4) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000040000, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="8aeefdcc5adaf09685b188fdfc31f3332f1ed685f4dbacc5c2cb067fd8479469906b21bb1ae3545a8335aee574a0acc2d098a7cd883599c3f307ac38874be83a9874af4b58d062e48191f7c12d8edf7c5cef2d326546f32517bb32c6191db3e38171f23fe5f9b79b38b3c5b1447d0a678ef7eb5f7bbbbe4e0826d05f5baeed7fa89368c501f544a009", 0x89}], 0x800, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffffffffffffe, 0x0, &(0x7f00000001c0)) 20:07:03 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000), 0x6) 20:07:03 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101001, 0x0) recvmmsg(r0, 0x0, 0x2c6, 0xfffffffffffffffe, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x3, r1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0xff}, 0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) r2 = dup(0xffffffffffffffff) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140), &(0x7f0000000240), 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/79, 0x19) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000700)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000640)=0xfffffe27) 20:07:03 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4) 20:07:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, r3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='xfs\x00', 0x4) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000040000, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="8aeefdcc5adaf09685b188fdfc31f3332f1ed685f4dbacc5c2cb067fd8479469906b21bb1ae3545a8335aee574a0acc2d098a7cd883599c3f307ac38874be83a9874af4b58d062e48191f7c12d8edf7c5cef2d326546f32517bb32c6191db3e38171f23fe5f9b79b38b3c5b1447d0a678ef7eb5f7bbbbe4e0826d05f5baeed7fa89368c501f544a009", 0x89}], 0x800, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffffffffffffe, 0x0, &(0x7f00000001c0)) 20:07:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, r3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='xfs\x00', 0x4) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000040000, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="8aeefdcc5adaf09685b188fdfc31f3332f1ed685f4dbacc5c2cb067fd8479469906b21bb1ae3545a8335aee574a0acc2d098a7cd883599c3f307ac38874be83a9874af4b58d062e48191f7c12d8edf7c5cef2d326546f32517bb32c6191db3e38171f23fe5f9b79b38b3c5b1447d0a678ef7eb5f7bbbbe4e0826d05f5baeed7fa89368c501f544a009", 0x89}], 0x800, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffffffffffffe, 0x0, &(0x7f00000001c0)) 20:07:03 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000), 0x6) 20:07:03 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xf6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\x00\x04\x00\x00\x00\x00\x00\x00Ci|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19\x7fG3\xc1E\xe6e7\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd72G-\xea\x02\xcb\x1d\xe7\r\x10{\xa1>\x98\x8eZ\x95\b\x00\x00\x00\v\xf3\xea\xa3\x88\x19\x9a\xabQ\xffw\xd2,\xe6\x90\xf8\xbf\xa0\xb8mI\xd5r\xe8`\xca\xedz\x82\xeb\x1bL\xa7\xb6\xb8\xfa\x1a\xd2\xd8\xd35\xc3\x1be\xd2\x83w\x8e\x1e \t\xecS&\x06\xe8\xcd\xb6\x95bR\x00') sendfile(r0, r2, &(0x7f00000000c0)=0x99, 0xdd) [ 582.644735] XFS (loop5): Invalid superblock magic number 20:07:03 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c000700030001000000000025000000000000000000"], 0x16) sendfile(r0, r0, &(0x7f0000000140), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1e4, &(0x7f0000000000)=[{}]}, 0x10) 20:07:03 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000), 0x6) 20:07:03 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000000), 0x6) 20:07:04 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) 20:07:04 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) 20:07:04 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) 20:07:04 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101001, 0x0) recvmmsg(r0, 0x0, 0x2c6, 0xfffffffffffffffe, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x3, r1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0xff}, 0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) r2 = dup(0xffffffffffffffff) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140), &(0x7f0000000240), 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/79, 0x19) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000700)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000640)=0xfffffe27) 20:07:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, r3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='xfs\x00', 0x4) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000040000, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @empty}, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x7f, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="8aeefdcc5adaf09685b188fdfc31f3332f1ed685f4dbacc5c2cb067fd8479469906b21bb1ae3545a8335aee574a0acc2d098a7cd883599c3f307ac38874be83a9874af4b58d062e48191f7c12d8edf7c5cef2d326546f32517bb32c6191db3e38171f23fe5f9b79b38b3c5b1447d0a678ef7eb5f7bbbbe4e0826d05f5baeed7fa89368c501f544a009", 0x89}], 0x800, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffffffffffffe, 0x0, &(0x7f00000001c0)) 20:07:04 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) 20:07:04 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) 20:07:04 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x4004, 0x8000007fffffff9) sendfile(r0, r1, 0x0, 0x8000fffffffe) 20:07:04 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) [ 583.887884] audit: type=1804 audit(1551816424.661:147): pid=21683 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir342887702/syzkaller.PsBGXY/199/bus" dev="sda1" ino=16882 res=1 20:07:04 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) [ 584.000956] audit: type=1800 audit(1551816424.690:148): pid=21683 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16882 res=0 20:07:04 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) 20:07:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 20:07:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) 20:07:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000001c0)) [ 584.175414] audit: type=1804 audit(1551816424.720:149): pid=21683 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir342887702/syzkaller.PsBGXY/199/bus" dev="sda1" ino=16882 res=1 20:07:05 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) [ 584.271926] audit: type=1804 audit(1551816424.740:150): pid=21689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir342887702/syzkaller.PsBGXY/199/bus" dev="sda1" ino=16882 res=1 [ 584.413976] audit: type=1800 audit(1551816424.740:151): pid=21689 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16882 res=0 20:07:05 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101001, 0x0) recvmmsg(r0, 0x0, 0x2c6, 0xfffffffffffffffe, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x3, r1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0xff}, 0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) r2 = dup(0xffffffffffffffff) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000140), &(0x7f0000000240), 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) getdents64(r2, &(0x7f00000002c0)=""/79, 0x19) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000700)) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000640)=0xfffffe27) 20:07:05 executing program 2: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000027000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000400)={0xfffffffffffffffd, 0x1ff, 0x3b, 0x9, [], [], [], 0x4, 0x0, 0x0, 0x9, "c7146b6576629996954d2f4fe074be4e"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:07:05 executing program 1: r0 = gettid() timer_create(0xb, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) 20:07:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 20:07:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) 20:07:05 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x10001, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001340)={0x0, 0x0, 0x1, {0x1, @vbi}}) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000000700)=0xe5, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x400101, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000002c0)=""/38, &(0x7f0000000300)=0x26) gettid() ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='veth0_to_bond\x00') epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000004c0)={0x5}, 0xffffffffffffff89) socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f0000000400)="15961f559ede13b78c1dde2f6051ff7c7e58f1167180540e2a401c2300c53cdf6397a19594f1548926a883bf33ae4f8c0d5881670012914e73b223cc2ef96a31990c0cdda405716f04d1efd2aed9c2836129d8aa2a", 0x55, 0xfffffffffffffffb) msgget(0x1, 0x100) keyctl$invalidate(0x15, r4) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000540)=0x6) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f00000006c0)) socket$vsock_dgram(0x28, 0x2, 0x0) [ 584.862716] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 20:07:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) [ 584.915205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 20:07:05 executing program 1: r0 = gettid() timer_create(0xb, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) 20:07:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) 20:07:05 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90}, 0x90) 20:07:05 executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0xfc, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, @perf_config_ext={0x1, 0x5c6}, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getrlimit(0x5, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x2628}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x10, r0, 0x0) 20:07:05 executing program 0: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff0000966f1503db"], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x0, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, 0x0, &(0x7f0000047ffc), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40), 0x0, 0x2a00}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 585.820407] net_ratelimit: 22 callbacks suppressed [ 585.820416] protocol 88fb is buggy, dev hsr_slave_0 [ 585.830531] protocol 88fb is buggy, dev hsr_slave_1 20:07:06 executing program 1: r0 = gettid() timer_create(0xb, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) 20:07:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223, 0x3e8}, @local, {[@lsrr={0x83, 0xb, 0x5ef, [@remote={0xac, 0x223}, @multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 20:07:07 executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0xfc, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, @perf_config_ext={0x1, 0x5c6}, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getrlimit(0x5, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x2628}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x10, r0, 0x0) 20:07:07 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@getsa={0x28, 0x12, 0x403, 0x0, 0x0, {@in=@broadcast}}, 0x28}}, 0x0) 20:07:07 executing program 1: r0 = gettid() timer_create(0xb, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) 20:07:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0xdf) [ 586.346680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:07:07 executing program 4: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0x10) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001cf, 0x0) 20:07:07 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x0, 0xf, "084e0a4e9293834eaa38e7b5449e356bf3c1f9f7e85efe99153f9ac7177cdb7a", 0x1ff, 0x7, 0x4, 0x4, 0x205}) fsetxattr$security_evm(r0, 0x0, &(0x7f00000000c0)=@sha1={0x1, "c3ce547508d3f5b5a8a5e1822f16ad97f34637a8"}, 0x15, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x20000000000080e8, 0x113) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) 20:07:07 executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0xfc, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, @perf_config_ext={0x1, 0x5c6}, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getrlimit(0x5, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x2628}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x10, r0, 0x0) 20:07:07 executing program 1: mkdir(&(0x7f0000000140)='.//ile0\x00', 0x0) symlink(&(0x7f0000000040)='.//ile0\x00', &(0x7f0000000000)='./file1\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x0) renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') [ 586.628524] protocol 88fb is buggy, dev hsr_slave_0 [ 586.633933] protocol 88fb is buggy, dev hsr_slave_1 20:07:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0xdf) [ 586.707788] protocol 88fb is buggy, dev hsr_slave_0 [ 586.712905] protocol 88fb is buggy, dev hsr_slave_1 20:07:07 executing program 0: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff0000966f1503db"], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x0, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, 0x0, &(0x7f0000047ffc), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40), 0x0, 0x2a00}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:07:07 executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0xfc, 0x2) syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, @perf_config_ext={0x1, 0x5c6}, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getrlimit(0x5, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x2628}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x10, r0, 0x0) 20:07:07 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x0, 0xf, "084e0a4e9293834eaa38e7b5449e356bf3c1f9f7e85efe99153f9ac7177cdb7a", 0x1ff, 0x7, 0x4, 0x4, 0x205}) fsetxattr$security_evm(r0, 0x0, &(0x7f00000000c0)=@sha1={0x1, "c3ce547508d3f5b5a8a5e1822f16ad97f34637a8"}, 0x15, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x20000000000080e8, 0x113) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) [ 586.949117] overlayfs: filesystem on './file0' not supported as upperdir 20:07:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0xdf) [ 587.041351] protocol 88fb is buggy, dev hsr_slave_0 [ 587.047300] protocol 88fb is buggy, dev hsr_slave_1 [ 587.121213] protocol 88fb is buggy, dev hsr_slave_0 [ 587.126367] protocol 88fb is buggy, dev hsr_slave_1 20:07:08 executing program 1: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x0, 0xf, "084e0a4e9293834eaa38e7b5449e356bf3c1f9f7e85efe99153f9ac7177cdb7a", 0x1ff, 0x7, 0x4, 0x4, 0x205}) fsetxattr$security_evm(r0, 0x0, &(0x7f00000000c0)=@sha1={0x1, "c3ce547508d3f5b5a8a5e1822f16ad97f34637a8"}, 0x15, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x20000000000080e8, 0x113) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) 20:07:08 executing program 4: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0x10) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001cf, 0x0) 20:07:08 executing program 5: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0x10) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001cf, 0x0) 20:07:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r0, 0xdf) 20:07:08 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x0, 0xf, "084e0a4e9293834eaa38e7b5449e356bf3c1f9f7e85efe99153f9ac7177cdb7a", 0x1ff, 0x7, 0x4, 0x4, 0x205}) fsetxattr$security_evm(r0, 0x0, &(0x7f00000000c0)=@sha1={0x1, "c3ce547508d3f5b5a8a5e1822f16ad97f34637a8"}, 0x15, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x20000000000080e8, 0x113) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) 20:07:08 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) set_thread_area(0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x2001007f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 20:07:08 executing program 2: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x0, 0xf, "084e0a4e9293834eaa38e7b5449e356bf3c1f9f7e85efe99153f9ac7177cdb7a", 0x1ff, 0x7, 0x4, 0x4, 0x205}) fsetxattr$security_evm(r0, 0x0, &(0x7f00000000c0)=@sha1={0x1, "c3ce547508d3f5b5a8a5e1822f16ad97f34637a8"}, 0x15, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x20000000000080e8, 0x113) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) 20:07:08 executing program 1: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x0, 0xf, "084e0a4e9293834eaa38e7b5449e356bf3c1f9f7e85efe99153f9ac7177cdb7a", 0x1ff, 0x7, 0x4, 0x4, 0x205}) fsetxattr$security_evm(r0, 0x0, &(0x7f00000000c0)=@sha1={0x1, "c3ce547508d3f5b5a8a5e1822f16ad97f34637a8"}, 0x15, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x20000000000080e8, 0x113) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) 20:07:08 executing program 0: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff0000966f1503db"], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x0, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, 0x0, &(0x7f0000047ffc), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40), 0x0, 0x2a00}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:07:08 executing program 5: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0x10) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001cf, 0x0) 20:07:08 executing program 2: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 20:07:08 executing program 4: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0x10) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001cf, 0x0) 20:07:09 executing program 1: r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x0, 0xf, "084e0a4e9293834eaa38e7b5449e356bf3c1f9f7e85efe99153f9ac7177cdb7a", 0x1ff, 0x7, 0x4, 0x4, 0x205}) fsetxattr$security_evm(r0, 0x0, &(0x7f00000000c0)=@sha1={0x1, "c3ce547508d3f5b5a8a5e1822f16ad97f34637a8"}, 0x15, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x20000000000080e8, 0x113) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) 20:07:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) [ 588.542247] bridge_slave_1: FDB only supports static addresses [ 588.621416] bridge_slave_1: FDB only supports static addresses 20:07:09 executing program 5: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0x10) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001cf, 0x0) 20:07:09 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x1d, 0x10, "7a54169c995a00d77162631a4acce4ca08dc74836851536fab74c7713532987b2dc2d65c500f65dff32e0e34811e9ece4c99be0ac228a402907390adaee93d62", "8a2f279b5a221f8712daa0d8606f7bab5e464ee7afbbd9109735783ae8f7f2ac2b791b72a9f271297e7fd4350dfb18f1cbf37fb8e65472d7206a15745a6db0e8", "ae184b3e2cae57079e7daf7b054fb6f9881462cf0f0bab9ecf14c003956a10da", [0x0, 0x4]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getegid() bind$bt_sco(r1, 0x0, 0x0) listen(r1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x9, 0x100000001, 0x10001, 0x0, 0x1}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461eb886a5e54e8ff5", 0x4c}], 0x1}, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0), 0x14) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x0) open(0x0, 0x0, 0x0) 20:07:09 executing program 4: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0x10) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001cf, 0x0) 20:07:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x35c, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4) 20:07:09 executing program 1: socketpair$unix(0x1, 0x400000002, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 20:07:09 executing program 0: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff0000966f1503db"], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x0, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, 0x0, &(0x7f0000047ffc), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40), 0x0, 0x2a00}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 589.277082] xt_nfacct: accounting object `syz1' does not exists 20:07:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$sock_ifreq(r0, 0x8943, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x0f#\x00\x02', @ifru_mtu}) 20:07:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40200000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af21, &(0x7f0000000040)={0x0, 0x2000000}) 20:07:10 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="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", 0xfc) 20:07:10 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x8000) sendfile(r0, r1, 0x0, 0x80000000000d) [ 589.631819] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 20:07:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$sock_ifreq(r0, 0x8943, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x0f#\x00\x02', @ifru_mtu}) 20:07:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40200000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af21, &(0x7f0000000040)={0x0, 0x2000000}) 20:07:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getitimer(0x4000000003, &(0x7f0000000040)) 20:07:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x480000) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) ptrace(0x4207, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x8, 0xeab3, 0x800]}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000008c0)={0x0, 0x4, 0x0, 0x5}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000940), 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000480)) fchown(r3, 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpgid(0x0) sendmsg(r6, &(0x7f0000000440)={&(0x7f0000000200)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)}, {0x0}], 0x2}, 0x40000) 20:07:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40200000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af21, &(0x7f0000000040)={0x0, 0x2000000}) 20:07:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$sock_ifreq(r0, 0x8943, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x0f#\x00\x02', @ifru_mtu}) 20:07:10 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 20:07:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0x30) 20:07:11 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x8000) sendfile(r0, r1, 0x0, 0x80000000000d) 20:07:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$sock_ifreq(r0, 0x8943, &(0x7f00000000c0)={'eql\x00\x18\x00\xa9[\b`\x00\x00\x0f#\x00\x02', @ifru_mtu}) 20:07:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40200000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af21, &(0x7f0000000040)={0x0, 0x2000000}) 20:07:11 executing program 0: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002700) [ 590.373538] syz-executor.4 (22661): /proc/22654/oom_adj is deprecated, please use /proc/22654/oom_score_adj instead. 20:07:11 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x201000000001, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/mixer\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x292000}, 0xc, &(0x7f0000000380)={&(0x7f0000001c40)={0xb8, r3, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xb8}}, 0x1) socket$unix(0x1, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_create(0x4, &(0x7f0000000500)={0x0, 0x36, 0x3, @thr={0x0, 0x0}}, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x2101}, {r5, 0x6}, {r2, 0x10}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x8000}, 0x8) 20:07:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0x30) 20:07:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) write$cgroup_subtree(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0063707520360e5d490e76"], 0xb) [ 590.902637] net_ratelimit: 18 callbacks suppressed [ 590.902646] protocol 88fb is buggy, dev hsr_slave_0 [ 590.907681] protocol 88fb is buggy, dev hsr_slave_1 20:07:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x480000) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) ptrace(0x4207, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x8, 0xeab3, 0x800]}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000008c0)={0x0, 0x4, 0x0, 0x5}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000940), 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000480)) fchown(r3, 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpgid(0x0) sendmsg(r6, &(0x7f0000000440)={&(0x7f0000000200)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)}, {0x0}], 0x2}, 0x40000) 20:07:11 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x8000) sendfile(r0, r1, 0x0, 0x80000000000d) 20:07:11 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3fffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000006d00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000400000009500000000000000"], 0x0}, 0x48) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x7, 0x0) 20:07:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0x30) 20:07:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x29, 0x2}}) close(r2) close(r1) 20:07:11 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x201000000001, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/mixer\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x292000}, 0xc, &(0x7f0000000380)={&(0x7f0000001c40)={0xb8, r3, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xb8}}, 0x1) socket$unix(0x1, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_create(0x4, &(0x7f0000000500)={0x0, 0x36, 0x3, @thr={0x0, 0x0}}, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x2101}, {r5, 0x6}, {r2, 0x10}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x8000}, 0x8) 20:07:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0x30) [ 591.225385] protocol 88fb is buggy, dev hsr_slave_0 [ 591.230569] protocol 88fb is buggy, dev hsr_slave_1 20:07:12 executing program 0: clone(0x80008000010ff7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x1000000001048, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) [ 591.305974] protocol 88fb is buggy, dev hsr_slave_0 [ 591.311131] protocol 88fb is buggy, dev hsr_slave_1 20:07:12 executing program 4: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) sendmsg(r1, &(0x7f0000f36fc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) 20:07:12 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0xc0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x42000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:07:12 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x8000) sendfile(r0, r1, 0x0, 0x80000000000d) 20:07:12 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x201000000001, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/mixer\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x292000}, 0xc, &(0x7f0000000380)={&(0x7f0000001c40)={0xb8, r3, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xb8}}, 0x1) socket$unix(0x1, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_create(0x4, &(0x7f0000000500)={0x0, 0x36, 0x3, @thr={0x0, 0x0}}, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x2101}, {r5, 0x6}, {r2, 0x10}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x8000}, 0x8) 20:07:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x480000) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) ptrace(0x4207, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x8, 0xeab3, 0x800]}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000008c0)={0x0, 0x4, 0x0, 0x5}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000940), 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000480)) fchown(r3, 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpgid(0x0) sendmsg(r6, &(0x7f0000000440)={&(0x7f0000000200)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)}, {0x0}], 0x2}, 0x40000) 20:07:12 executing program 4: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) sendmsg(r1, &(0x7f0000f36fc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) 20:07:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x100000000000005, &(0x7f0000000080)=0x7, 0x3) close(r0) [ 591.709742] protocol 88fb is buggy, dev hsr_slave_0 [ 591.714935] protocol 88fb is buggy, dev hsr_slave_1 20:07:12 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0xc0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x42000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:07:12 executing program 4: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) sendmsg(r1, &(0x7f0000f36fc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) 20:07:12 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0xc0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x42000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:07:12 executing program 4: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) sendmsg(r1, &(0x7f0000f36fc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) 20:07:12 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r0, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x5, 0x800) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:07:12 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0xc0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x42000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:07:12 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x201000000001, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/mixer\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x292000}, 0xc, &(0x7f0000000380)={&(0x7f0000001c40)={0xb8, r3, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xb8}}, 0x1) socket$unix(0x1, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_create(0x4, &(0x7f0000000500)={0x0, 0x36, 0x3, @thr={0x0, 0x0}}, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x2101}, {r5, 0x6}, {r2, 0x10}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x8000}, 0x8) 20:07:12 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0xc0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x42000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:07:12 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r0, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x5, 0x800) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 592.112623] protocol 88fb is buggy, dev hsr_slave_0 [ 592.117719] protocol 88fb is buggy, dev hsr_slave_1 20:07:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x480000) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) ptrace(0x4207, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x8, 0xeab3, 0x800]}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000008c0)={0x0, 0x4, 0x0, 0x5}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000940), 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000480)) fchown(r3, 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getpgid(0x0) sendmsg(r6, &(0x7f0000000440)={&(0x7f0000000200)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)}, {0x0}], 0x2}, 0x40000) 20:07:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r0, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x5, 0x800) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:07:13 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r0, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x5, 0x800) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:07:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r0, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x5, 0x800) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:07:13 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="c63be23752197a365ddc1582cfc08d0900db090f1e9d2314ca7f840d28bcf6ae953389a07242a7c37e6f75fcd36eb119c9b3f4e848650add9cccc4bef81eae020d0e9387bf9770d654ecf02aef2346b9dd3bdea678dbf907fbdea5ecd474edea038ebb6619e74bab5979a7abc261d188ec3205a1f01371ad2493612c654c9c79012c92cb29fa19dbb81219e28588456f48ba6194e7195f8dd5d7275fb4399ee7f1abd54d5483d516764bec8d48", 0xad, 0xfffffffffffffff9) r2 = memfd_create(&(0x7f0000000040)=']\xa3\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321092e2f1121cf9c7f0d6c39d266696c65308e58f6599db28f6ec2e0d69b5c5345adbee22d773c4ce6837e5eefc4a0cf9f203f7310b3d3f8d8c55e280ac7ea59272767190fbd1d5647766eba530102a74275454718d39d930bf4d1bf0c43fd4f7f606f037d0806f2b1088080280a7046a0423dc73d5279366355885b4616d50392ec8a03856300000000000000006bd08c18abd1b199b40a10e59cad7e23456f8806b4e0fb3907c997080488c750c76849e484"], 0xb4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) socket(0x8, 0xb, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x14102e, 0x0) mmap(&(0x7f00003c1000/0x3000)=nil, 0x3000, 0x400000000, 0x10, r4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000300)=0x9, 0x4) lsetxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64EXEC\x00', &(0x7f00000002c0)='nodev\x00', 0x6, 0x2) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', 0x0, 0x0, 0x1) getpriority(0x1, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) keyctl$set_timeout(0xf, r1, 0x60) recvmmsg(r0, &(0x7f000000a500), 0x0, 0x0, 0x0) 20:07:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000200000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 20:07:14 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r0, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x5, 0x800) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:07:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="c63be23752197a365ddc1582cfc08d0900db090f1e9d2314ca7f840d28bcf6ae953389a07242a7c37e6f75fcd36eb119c9b3f4e848650add9cccc4bef81eae020d0e9387bf9770d654ecf02aef2346b9dd3bdea678dbf907fbdea5ecd474edea038ebb6619e74bab5979a7abc261d188ec3205a1f01371ad2493612c654c9c79012c92cb29fa19dbb81219e28588456f48ba6194e7195f8dd5d7275fb4399ee7f1abd54d5483d516764bec8d48", 0xad, 0xfffffffffffffff9) r2 = memfd_create(&(0x7f0000000040)=']\xa3\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321092e2f1121cf9c7f0d6c39d266696c65308e58f6599db28f6ec2e0d69b5c5345adbee22d773c4ce6837e5eefc4a0cf9f203f7310b3d3f8d8c55e280ac7ea59272767190fbd1d5647766eba530102a74275454718d39d930bf4d1bf0c43fd4f7f606f037d0806f2b1088080280a7046a0423dc73d5279366355885b4616d50392ec8a03856300000000000000006bd08c18abd1b199b40a10e59cad7e23456f8806b4e0fb3907c997080488c750c76849e484"], 0xb4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) socket(0x8, 0xb, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x14102e, 0x0) mmap(&(0x7f00003c1000/0x3000)=nil, 0x3000, 0x400000000, 0x10, r4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000300)=0x9, 0x4) lsetxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64EXEC\x00', &(0x7f00000002c0)='nodev\x00', 0x6, 0x2) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', 0x0, 0x0, 0x1) getpriority(0x1, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) keyctl$set_timeout(0xf, r1, 0x60) recvmmsg(r0, &(0x7f000000a500), 0x0, 0x0, 0x0) [ 596.307470] net_ratelimit: 22 callbacks suppressed [ 596.307479] protocol 88fb is buggy, dev hsr_slave_0 [ 596.317840] protocol 88fb is buggy, dev hsr_slave_1 [ 596.719237] bridge0: port 3(gretap0) entered disabled state [ 596.726546] device gretap0 left promiscuous mode [ 596.731406] bridge0: port 3(gretap0) entered disabled state [ 597.095720] IPVS: stopping master sync thread 15877 ... [ 597.114170] protocol 88fb is buggy, dev hsr_slave_0 [ 597.119329] protocol 88fb is buggy, dev hsr_slave_1 [ 597.149108] IPVS: ftp: loaded support on port[0] = 21 [ 597.194831] protocol 88fb is buggy, dev hsr_slave_0 [ 597.199902] protocol 88fb is buggy, dev hsr_slave_1 [ 597.290152] chnl_net:caif_netlink_parms(): no params data found [ 597.357437] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.363846] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.371153] device bridge_slave_0 entered promiscuous mode [ 597.440964] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.448486] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.455313] device bridge_slave_1 entered promiscuous mode [ 597.471747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 597.481077] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 597.527585] protocol 88fb is buggy, dev hsr_slave_0 [ 597.532641] protocol 88fb is buggy, dev hsr_slave_1 [ 597.562234] team0: Port device team_slave_0 added [ 597.568711] team0: Port device team_slave_1 added [ 597.598166] protocol 88fb is buggy, dev hsr_slave_0 [ 597.603244] protocol 88fb is buggy, dev hsr_slave_1 [ 597.620941] device hsr_slave_0 entered promiscuous mode [ 597.658963] device hsr_slave_1 entered promiscuous mode [ 597.752139] IPVS: ftp: loaded support on port[0] = 21 [ 597.757672] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.764065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.770740] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.777076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.065524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.074894] chnl_net:caif_netlink_parms(): no params data found [ 598.158971] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.165605] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.173262] device bridge_slave_0 entered promiscuous mode [ 598.180388] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.187232] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.194760] device bridge_slave_1 entered promiscuous mode [ 598.209030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 598.217693] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.224629] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.232060] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 598.295229] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.308239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 598.371624] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 598.396316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 598.404117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 598.412222] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.418639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.429045] team0: Port device team_slave_0 added [ 598.439956] team0: Port device team_slave_1 added [ 598.450447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 598.458710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 598.466478] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.472826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.531094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 598.539178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 598.547620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 598.555233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.563009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 598.570923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.638319] device hsr_slave_0 entered promiscuous mode [ 598.727778] device hsr_slave_1 entered promiscuous mode [ 598.847639] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.857899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.869183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.876420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 598.885215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.893152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.901343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.908920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 598.991943] device bridge_slave_1 left promiscuous mode [ 598.997465] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.025059] device bridge_slave_0 left promiscuous mode [ 599.030862] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.858586] device hsr_slave_1 left promiscuous mode [ 600.928955] device hsr_slave_0 left promiscuous mode [ 600.989610] team0 (unregistering): Port device team_slave_1 removed [ 601.002187] team0 (unregistering): Port device team_slave_0 removed [ 601.015595] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 601.086440] bond0 (unregistering): Released all slaves [ 601.212285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.290114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.341544] Disabling bearer [ 601.346220] Left network mode [ 601.353868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 601.361603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 601.370429] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.380906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 601.389438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 601.396971] net_ratelimit: 24 callbacks suppressed [ 601.396989] protocol 88fb is buggy, dev hsr_slave_0 [ 601.397019] protocol 88fb is buggy, dev hsr_slave_1 [ 601.415053] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.421467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.440922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 601.448101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 601.456374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 601.464552] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.470941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.479255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.487720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.496116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.504319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.512345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.520245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.534515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 601.545565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.557350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.565315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.573268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.581101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.591008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.619619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.639112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.683070] protocol 88fb is buggy, dev hsr_slave_0 [ 601.688166] protocol 88fb is buggy, dev hsr_slave_1 [ 601.712302] protocol 88fb is buggy, dev hsr_slave_0 [ 601.717415] protocol 88fb is buggy, dev hsr_slave_1 [ 601.792967] protocol 88fb is buggy, dev hsr_slave_0 [ 601.798061] protocol 88fb is buggy, dev hsr_slave_1 [ 601.803326] protocol 88fb is buggy, dev hsr_slave_0 [ 601.808382] protocol 88fb is buggy, dev hsr_slave_1 20:07:22 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0xc0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x42000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:07:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r0, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x5, 0x800) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:07:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:07:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="c63be23752197a365ddc1582cfc08d0900db090f1e9d2314ca7f840d28bcf6ae953389a07242a7c37e6f75fcd36eb119c9b3f4e848650add9cccc4bef81eae020d0e9387bf9770d654ecf02aef2346b9dd3bdea678dbf907fbdea5ecd474edea038ebb6619e74bab5979a7abc261d188ec3205a1f01371ad2493612c654c9c79012c92cb29fa19dbb81219e28588456f48ba6194e7195f8dd5d7275fb4399ee7f1abd54d5483d516764bec8d48", 0xad, 0xfffffffffffffff9) r2 = memfd_create(&(0x7f0000000040)=']\xa3\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321092e2f1121cf9c7f0d6c39d266696c65308e58f6599db28f6ec2e0d69b5c5345adbee22d773c4ce6837e5eefc4a0cf9f203f7310b3d3f8d8c55e280ac7ea59272767190fbd1d5647766eba530102a74275454718d39d930bf4d1bf0c43fd4f7f606f037d0806f2b1088080280a7046a0423dc73d5279366355885b4616d50392ec8a03856300000000000000006bd08c18abd1b199b40a10e59cad7e23456f8806b4e0fb3907c997080488c750c76849e484"], 0xb4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) socket(0x8, 0xb, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x14102e, 0x0) mmap(&(0x7f00003c1000/0x3000)=nil, 0x3000, 0x400000000, 0x10, r4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000300)=0x9, 0x4) lsetxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64EXEC\x00', &(0x7f00000002c0)='nodev\x00', 0x6, 0x2) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', 0x0, 0x0, 0x1) getpriority(0x1, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) keyctl$set_timeout(0xf, r1, 0x60) recvmmsg(r0, &(0x7f000000a500), 0x0, 0x0, 0x0) 20:07:22 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x4205, r1, 0x0, &(0x7f00000000c0)={0x0}) 20:07:22 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0xc0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x42000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:07:23 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f000000c080)=[{{0x0, 0x0, &(0x7f0000007e80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000007d80)=""/230, 0xe6}], 0x6}}], 0x1, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007e00), 0x115, 0x0) 20:07:23 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="c63be23752197a365ddc1582cfc08d0900db090f1e9d2314ca7f840d28bcf6ae953389a07242a7c37e6f75fcd36eb119c9b3f4e848650add9cccc4bef81eae020d0e9387bf9770d654ecf02aef2346b9dd3bdea678dbf907fbdea5ecd474edea038ebb6619e74bab5979a7abc261d188ec3205a1f01371ad2493612c654c9c79012c92cb29fa19dbb81219e28588456f48ba6194e7195f8dd5d7275fb4399ee7f1abd54d5483d516764bec8d48", 0xad, 0xfffffffffffffff9) r2 = memfd_create(&(0x7f0000000040)=']\xa3\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2321092e2f1121cf9c7f0d6c39d266696c65308e58f6599db28f6ec2e0d69b5c5345adbee22d773c4ce6837e5eefc4a0cf9f203f7310b3d3f8d8c55e280ac7ea59272767190fbd1d5647766eba530102a74275454718d39d930bf4d1bf0c43fd4f7f606f037d0806f2b1088080280a7046a0423dc73d5279366355885b4616d50392ec8a03856300000000000000006bd08c18abd1b199b40a10e59cad7e23456f8806b4e0fb3907c997080488c750c76849e484"], 0xb4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x11) socket(0x8, 0xb, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x14102e, 0x0) mmap(&(0x7f00003c1000/0x3000)=nil, 0x3000, 0x400000000, 0x10, r4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000300)=0x9, 0x4) lsetxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64EXEC\x00', &(0x7f00000002c0)='nodev\x00', 0x6, 0x2) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', 0x0, 0x0, 0x1) getpriority(0x1, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) keyctl$set_timeout(0xf, r1, 0x60) recvmmsg(r0, &(0x7f000000a500), 0x0, 0x0, 0x0) 20:07:23 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) [ 602.550441] kvm [23645]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f 20:07:23 executing program 3: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80000001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 20:07:23 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x4011) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x404}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) 20:07:23 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) [ 603.013651] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 20:07:23 executing program 1: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) [ 603.088759] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 20:07:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:07:23 executing program 3: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80000001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 20:07:23 executing program 4: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:24 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:24 executing program 1: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) [ 603.884870] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 20:07:24 executing program 4: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:24 executing program 3: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80000001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) [ 604.132967] kvm [23708]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f 20:07:24 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x4011) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x404}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 604.336214] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 20:07:25 executing program 3: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80000001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) [ 604.501201] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 20:07:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:07:25 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:25 executing program 4: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:25 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x4011) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x404}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 605.178030] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 20:07:25 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x4011) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x404}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 605.291914] binder: release 8404:8405 transaction 9 out, still active [ 605.306379] binder: unexpected work type, 4, not freed [ 605.307902] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 20:07:26 executing program 4: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) [ 605.393012] binder: undelivered TRANSACTION_COMPLETE [ 605.406897] binder: send failed reply for transaction 6 to 8356:8374 [ 605.421787] binder: send failed reply for transaction 9, target dead [ 605.473932] binder: send failed reply for transaction 12 to 8432:8452 [ 605.510411] binder: send failed reply for transaction 15, target dead [ 605.548142] binder: send failed reply for transaction 16, target dead [ 605.562642] binder: send failed reply for transaction 17, target dead [ 605.568306] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 605.580571] binder: send failed reply for transaction 18, target dead [ 605.604860] binder: undelivered TRANSACTION_COMPLETE [ 605.623637] binder: undelivered TRANSACTION_ERROR: 29189 20:07:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 605.873736] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. [ 606.344464] binder: undelivered TRANSACTION_COMPLETE [ 606.349767] binder: undelivered TRANSACTION_ERROR: 29189 [ 607.672455] device bridge_slave_1 left promiscuous mode [ 607.677998] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.733340] device bridge_slave_0 left promiscuous mode [ 607.738776] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.509879] device hsr_slave_1 left promiscuous mode [ 609.550551] device hsr_slave_0 left promiscuous mode [ 609.603457] team0 (unregistering): Port device team_slave_1 removed [ 609.615330] team0 (unregistering): Port device team_slave_0 removed [ 609.629403] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 609.708225] bond0 (unregistering): Released all slaves [ 609.798816] IPVS: ftp: loaded support on port[0] = 21 [ 609.863867] chnl_net:caif_netlink_parms(): no params data found [ 609.896905] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.897007] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.910748] device bridge_slave_0 entered promiscuous mode [ 609.925301] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.931816] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.938605] device bridge_slave_1 entered promiscuous mode [ 609.956059] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 609.965574] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 609.985173] team0: Port device team_slave_0 added [ 609.991510] team0: Port device team_slave_1 added [ 610.102855] device hsr_slave_0 entered promiscuous mode [ 610.152669] device hsr_slave_1 entered promiscuous mode [ 610.240509] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.246941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.253632] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.260001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.332524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.359171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.373577] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.382256] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.406000] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.424881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.433321] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.439983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.473724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.483469] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.490104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.525339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 610.533622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 610.548856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.564519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.575736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.583469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 610.591545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.613538] 8021q: adding VLAN 0 to HW filter on device batadv0 20:07:31 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:31 executing program 1: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:31 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x4011) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x404}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) 20:07:31 executing program 4: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:31 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x4011) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x404}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) 20:07:31 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) [ 610.963483] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. [ 611.078516] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.379432] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 20:07:32 executing program 4: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:32 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:32 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:32 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1e2ba62e) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) 20:07:32 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @remote, @bcast, 0x1, @null}, 0x1c) [ 612.090886] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 20:07:32 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='keyringGPL\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0xdcff}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)="fd48783839aef42ad5be0c1905324e7afa075e54582d907576cadf16f26f514d68f4788b2c80b189d341e14c28d34b315b7fe13e3343a13569b87ed9a53077521b671801", 0x44}], 0x1}, 0x4011) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000440)=0x2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x404}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee405dc09000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) 20:07:32 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:32 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2201001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3, 0x2e) r0 = add_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000004c0)="5dbad7075bb4a8b2f5854836f66f65ddd2d9c89a93dd7ecaf10949135590a1", 0x1f, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/237, 0xed) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xccc3, 0x200000) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x5, 0x5}) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 20:07:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xfffffffffffff801, 0x8001, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x6) [ 612.305790] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 20:07:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00\x00\x9e\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 612.443600] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 20:07:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xfffffffffffff801, 0x8001, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x6) 20:07:33 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1e2ba62e) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) 20:07:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00\x00\x9e\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 20:07:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xfffffffffffff801, 0x8001, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x6) 20:07:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000001c0)={0x80000, "7f18e1d5efb59e906f394adc504088a94aa9d9e982d1a713295debbbd824fd3a", 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xe9a}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) 20:07:33 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="5500000018007f7000fe01b2a4a280930a60050000a84302910000003900090023000c00030000000d000500030000000000c78b80082314e9030b9d566885b16732009b0d00b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 20:07:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xfffffffffffff801, 0x8001, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x6) [ 613.184176] bond0: cannot enslave bond to itself. 20:07:33 executing program 5: r0 = socket$kcm(0x29, 0x2000000000000005, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001400)=0x5b60, 0x4) 20:07:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00\x00\x9e\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 20:07:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}, 0x59, r1}) setsockopt$inet6_int(r0, 0x29, 0x1000000f9, &(0x7f0000000540)=0x7, 0xfffffffffffffeef) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x28c, 0x3ef, 0x200000000000000, 0x30c, 0x0, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0x3603, 0x252, 0x8]}, 0x75, r2}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x1f, 0x0, 0x100000000, 0x0, r2}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000580)=ANY=[@ANYBLOB="210000004dc3bff6a3d819d4caffffff7f27b369c0cc545640afff9af97288ee0bb983881a4d5271b477752b2332869f8df76ac8a5cffba513d97cc2d108efcf86a162af492933a098526f09ce2d231d6eafb62662d4f36557ef073c6d14917acda8cd8bc15db5e20c0601dfade311fbe7b4c9470e0069887a949be29c0c9c96119e9e9e5a1ad639155f2c0163403e7043f2eebfe6d1dfd98ea3351cef7267d0b51fc002401a764fe2ea949601e8859b7ea7413ae9d46ab007cf797afd6f7d8d62395a50baff0289bea4cb3d49b420cf2364be57d7147083b88189f68b8d0858f6a186f91c"], 0x0) rename(&(0x7f0000000780)='./file0\x00', &(0x7f0000000a80)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r5, 0x1000) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001380)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8001000000002b) connect$inet6(r7, &(0x7f00000000c0), 0x1c) sendmsg(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x0) 20:07:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="230000005e0081aee4050c00000f00000000a300001832e0948bc609f6d8db51260185", 0x23}], 0x1}, 0x0) socketpair(0x8, 0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) 20:07:33 executing program 2: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) fremovexattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) setgroups(0x7, &(0x7f0000000580)=[r6, 0x0, r4, r5, r4, r6, r6]) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000400)={0x1, 'veth1_to_team\x00'}, 0x18) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000780)=0xe8) mount$9p_tcp(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x40000, &(0x7f00000007c0)=ANY=[@ANYBLOB=',aname=*eth1\x00,euid>', @ANYRESDEC=r7]) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) r8 = semget(0x0, 0x2, 0x40) semctl$SEM_STAT(r8, 0x4, 0x12, &(0x7f00000008c0)=""/210) sync() ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) fcntl$addseals(r3, 0x409, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x9, 0x0, 0x4c, 0x100, 0x1, 0x10000, 0x9, 0x100000000, 0x8, 0x5, 0x3, 0x1c}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) 20:07:33 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0x0, &(0x7f00000004c0)={0x0, 0x3}, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x0, 0xe0}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x8c, 0x4, 0x7}}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x8001, 0x800) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xbd07, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setgroups(0x0, 0x0) semget(0x3, 0x6, 0x168f41475595d2f3) [ 613.452082] bond0: cannot enslave bond to itself. [ 613.528588] audit: type=1804 audit(1551816454.045:152): pid=23875 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir175953066/syzkaller.b3q8bG/10/bus" dev="sda1" ino=16487 res=1 [ 613.632904] audit: type=1800 audit(1551816454.045:153): pid=23875 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16487 res=0 20:07:34 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1e2ba62e) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) 20:07:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00\x00\x9e\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 20:07:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="230000005e0081aee4050c00000f00000000a300001832e0948bc609f6d8db51260185", 0x23}], 0x1}, 0x0) socketpair(0x8, 0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) [ 613.803827] bond0: cannot enslave bond to itself. 20:07:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="230000005e0081aee4050c00000f00000000a300001832e0948bc609f6d8db51260185", 0x23}], 0x1}, 0x0) socketpair(0x8, 0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) 20:07:34 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 613.981169] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:07:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="230000005e0081aee4050c00000f00000000a300001832e0948bc609f6d8db51260185", 0x23}], 0x1}, 0x0) socketpair(0x8, 0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) 20:07:34 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0x0, &(0x7f00000004c0)={0x0, 0x3}, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x0, 0xe0}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x8c, 0x4, 0x7}}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x8001, 0x800) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xbd07, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setgroups(0x0, 0x0) semget(0x3, 0x6, 0x168f41475595d2f3) [ 614.331023] audit: type=1804 audit(1551816454.848:154): pid=23880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir175953066/syzkaller.b3q8bG/10/bus" dev="sda1" ino=16487 res=1 20:07:35 executing program 2: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) fremovexattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) setgroups(0x7, &(0x7f0000000580)=[r6, 0x0, r4, r5, r4, r6, r6]) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000400)={0x1, 'veth1_to_team\x00'}, 0x18) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000780)=0xe8) mount$9p_tcp(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x40000, &(0x7f00000007c0)=ANY=[@ANYBLOB=',aname=*eth1\x00,euid>', @ANYRESDEC=r7]) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) r8 = semget(0x0, 0x2, 0x40) semctl$SEM_STAT(r8, 0x4, 0x12, &(0x7f00000008c0)=""/210) sync() ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) fcntl$addseals(r3, 0x409, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x9, 0x0, 0x4c, 0x100, 0x1, 0x10000, 0x9, 0x100000000, 0x8, 0x5, 0x3, 0x1c}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) [ 614.450503] audit: type=1804 audit(1551816454.917:155): pid=23918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir175953066/syzkaller.b3q8bG/10/bus" dev="sda1" ino=16487 res=1 20:07:35 executing program 0: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) fremovexattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) setgroups(0x7, &(0x7f0000000580)=[r6, 0x0, r4, r5, r4, r6, r6]) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000400)={0x1, 'veth1_to_team\x00'}, 0x18) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000780)=0xe8) mount$9p_tcp(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x40000, &(0x7f00000007c0)=ANY=[@ANYBLOB=',aname=*eth1\x00,euid>', @ANYRESDEC=r7]) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) r8 = semget(0x0, 0x2, 0x40) semctl$SEM_STAT(r8, 0x4, 0x12, &(0x7f00000008c0)=""/210) sync() ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) fcntl$addseals(r3, 0x409, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x9, 0x0, 0x4c, 0x100, 0x1, 0x10000, 0x9, 0x100000000, 0x8, 0x5, 0x3, 0x1c}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) 20:07:35 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0x0, &(0x7f00000004c0)={0x0, 0x3}, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x0, 0xe0}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x8c, 0x4, 0x7}}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x8001, 0x800) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xbd07, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setgroups(0x0, 0x0) semget(0x3, 0x6, 0x168f41475595d2f3) [ 614.637635] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 614.658189] audit: type=1800 audit(1551816454.917:156): pid=23918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16487 res=0 20:07:35 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1e2ba62e) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) 20:07:35 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0x0, &(0x7f00000004c0)={0x0, 0x3}, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x0, 0xe0}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x8c, 0x4, 0x7}}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x8001, 0x800) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xbd07, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setgroups(0x0, 0x0) semget(0x3, 0x6, 0x168f41475595d2f3) 20:07:35 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 614.863289] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:07:35 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0x0, &(0x7f00000004c0)={0x0, 0x3}, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x0, 0xe0}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x8c, 0x4, 0x7}}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x8001, 0x800) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xbd07, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setgroups(0x0, 0x0) semget(0x3, 0x6, 0x168f41475595d2f3) [ 615.036313] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:07:35 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0x0, &(0x7f00000004c0)={0x0, 0x3}, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x0, 0xe0}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x8c, 0x4, 0x7}}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x8001, 0x800) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xbd07, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setgroups(0x0, 0x0) semget(0x3, 0x6, 0x168f41475595d2f3) 20:07:35 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0x0, &(0x7f00000004c0)={0x0, 0x3}, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x8, 0x0, 0xe0}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x8c, 0x4, 0x7}}, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x8001, 0x800) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xbd07, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) setgroups(0x0, 0x0) semget(0x3, 0x6, 0x168f41475595d2f3) 20:07:36 executing program 0: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) fremovexattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) setgroups(0x7, &(0x7f0000000580)=[r6, 0x0, r4, r5, r4, r6, r6]) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000400)={0x1, 'veth1_to_team\x00'}, 0x18) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000780)=0xe8) mount$9p_tcp(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x40000, &(0x7f00000007c0)=ANY=[@ANYBLOB=',aname=*eth1\x00,euid>', @ANYRESDEC=r7]) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) r8 = semget(0x0, 0x2, 0x40) semctl$SEM_STAT(r8, 0x4, 0x12, &(0x7f00000008c0)=""/210) sync() ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) fcntl$addseals(r3, 0x409, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x9, 0x0, 0x4c, 0x100, 0x1, 0x10000, 0x9, 0x100000000, 0x8, 0x5, 0x3, 0x1c}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) 20:07:36 executing program 2: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) fremovexattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) setgroups(0x7, &(0x7f0000000580)=[r6, 0x0, r4, r5, r4, r6, r6]) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000400)={0x1, 'veth1_to_team\x00'}, 0x18) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000780)=0xe8) mount$9p_tcp(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x40000, &(0x7f00000007c0)=ANY=[@ANYBLOB=',aname=*eth1\x00,euid>', @ANYRESDEC=r7]) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) r8 = semget(0x0, 0x2, 0x40) semctl$SEM_STAT(r8, 0x4, 0x12, &(0x7f00000008c0)=""/210) sync() ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) fcntl$addseals(r3, 0x409, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x9, 0x0, 0x4c, 0x100, 0x1, 0x10000, 0x9, 0x100000000, 0x8, 0x5, 0x3, 0x1c}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) [ 615.475090] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue 20:07:36 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc7, &(0x7f00000000c0)) 20:07:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000580)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') lseek(r0, 0xfffffffffffffffc, 0x4) 20:07:36 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 20:07:36 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) dup2(r1, r0) 20:07:36 executing program 0: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) fremovexattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) setgroups(0x7, &(0x7f0000000580)=[r6, 0x0, r4, r5, r4, r6, r6]) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000400)={0x1, 'veth1_to_team\x00'}, 0x18) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000780)=0xe8) mount$9p_tcp(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x40000, &(0x7f00000007c0)=ANY=[@ANYBLOB=',aname=*eth1\x00,euid>', @ANYRESDEC=r7]) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) r8 = semget(0x0, 0x2, 0x40) semctl$SEM_STAT(r8, 0x4, 0x12, &(0x7f00000008c0)=""/210) sync() ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) fcntl$addseals(r3, 0x409, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x9, 0x0, 0x4c, 0x100, 0x1, 0x10000, 0x9, 0x100000000, 0x8, 0x5, 0x3, 0x1c}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) 20:07:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x301, 0x0) 20:07:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:07:36 executing program 3: listxattr(0x0, &(0x7f0000000340)=""/113, 0x71) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x3}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) [ 616.151866] netlink: 'syz-executor.3': attribute type 21 has an invalid length. 20:07:36 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0xfffffffffffffeed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x2}, 0x2f) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0xca) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x0}, 0x18) [ 616.192854] netlink: 'syz-executor.3': attribute type 21 has an invalid length. 20:07:36 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000070a07031dfffd946fa283e920200a0003000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 20:07:36 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 616.344537] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:07:37 executing program 2: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) fremovexattr(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) setsockopt$sock_void(r3, 0x1, 0xfffffffffffffffc, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) setgroups(0x7, &(0x7f0000000580)=[r6, 0x0, r4, r5, r4, r6, r6]) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000400)={0x1, 'veth1_to_team\x00'}, 0x18) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000780)=0xe8) mount$9p_tcp(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x40000, &(0x7f00000007c0)=ANY=[@ANYBLOB=',aname=*eth1\x00,euid>', @ANYRESDEC=r7]) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) r8 = semget(0x0, 0x2, 0x40) semctl$SEM_STAT(r8, 0x4, 0x12, &(0x7f00000008c0)=""/210) sync() ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x1f) fcntl$addseals(r3, 0x409, 0x0) close(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x9, 0x0, 0x4c, 0x100, 0x1, 0x10000, 0x9, 0x100000000, 0x8, 0x5, 0x3, 0x1c}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) 20:07:37 executing program 1: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.-.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f0000000640)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xdaf}}, {@sq={'sq', 0x3d, 0xc17f}}, {@sq={'sq', 0x3d, 0x8}}, {@sq={'sq'}}, {@rq={'rq', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0x5}}], [{@smackfsroot={'smackfsroot', 0x3d, '/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00'}}, {@subj_role={'subj_role'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fsname={'fsname', 0x3d, '\'-GPL'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) mount(&(0x7f0000000040)=@nullb='::,.:nullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='P\xf0selinuxcgroup\x00') clock_gettime(0x0, &(0x7f0000004300)={0x0, 0x0}) getsockname$llc(r0, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/151, 0x97}, {0x0}, {&(0x7f0000001940)=""/205, 0xcd}], 0x3, &(0x7f0000001a40)=""/175, 0xaf}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/4096, 0x1000}, 0x20}, {{&(0x7f0000002f80)=@ipx, 0x80, &(0x7f0000004200)=[{0x0}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x2}, 0xee2d}], 0x3, 0x10043, &(0x7f0000004340)={r1, r2+30000000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 20:07:37 executing program 3: unshare(0x44000000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xd88, 0x8001, 0x0, 0x1, 0x2, 0x0, 0x8, 0x8}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x80400, 0x0) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfc000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc0) 20:07:37 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc7, &(0x7f00000000c0)) [ 616.570980] IPVS: ftp: loaded support on port[0] = 21 [ 616.679604] libceph: resolve '.' (ret=-3): failed 20:07:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x29021) syz_open_dev$mice(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8000000000, 0x2}) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x0, 0x2}], 0xfdda) [ 616.787837] libceph: parse_ips bad ip '::,.:nullb' [ 616.848961] libceph: resolve '.' (ret=-3): failed 20:07:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xfb3f) fallocate(r0, 0x0, 0x0, 0x8000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) 20:07:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000021ff4)={0x2001}) [ 616.910040] libceph: parse_ips bad ip '::,.:nullb' 20:07:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af00, &(0x7f00000000c0)) 20:07:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/49, 0xf}, {&(0x7f0000000600)=""/4096, 0x1f10}], 0x2}}], 0x2, 0x0, 0x0) 20:07:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x29021) syz_open_dev$mice(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8000000000, 0x2}) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x0, 0x2}], 0xfdda) 20:07:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000002c0)="63d7438888e9b543f9", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f0000000000)=""/83, 0x61a, 0x0) 20:07:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x400000000031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x7, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000000)) 20:07:37 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc7, &(0x7f00000000c0)) 20:07:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000002c0)="63d7438888e9b543f9", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f0000000000)=""/83, 0x61a, 0x0) [ 617.613284] net_ratelimit: 22 callbacks suppressed [ 617.613330] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 617.766895] IPVS: ftp: loaded support on port[0] = 21 [ 618.128426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 618.149005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 618.200293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:07:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x400000000031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x7, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000000)) 20:07:38 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x29021) syz_open_dev$mice(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8000000000, 0x2}) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x0, 0x2}], 0xfdda) 20:07:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000002c0)="63d7438888e9b543f9", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f0000000000)=""/83, 0x61a, 0x0) 20:07:38 executing program 3: unshare(0x44000000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xd88, 0x8001, 0x0, 0x1, 0x2, 0x0, 0x8, 0x8}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x80400, 0x0) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfc000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc0) 20:07:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000011d400300000000006506000001ed00002704000000ffffffcd460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='P\\\x88\x1c'}, 0x48) 20:07:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000002c0)="63d7438888e9b543f9", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f0000000000)=""/83, 0x61a, 0x0) 20:07:38 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc7, &(0x7f00000000c0)) 20:07:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x400000000031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x7, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000000)) [ 618.414700] IPVS: ftp: loaded support on port[0] = 21 20:07:38 executing program 4: unshare(0x44000000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xd88, 0x8001, 0x0, 0x1, 0x2, 0x0, 0x8, 0x8}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x80400, 0x0) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfc000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc0) 20:07:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x29021) syz_open_dev$mice(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x8000000000, 0x2}) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x0, 0x2}], 0xfdda) [ 618.624248] IPVS: ftp: loaded support on port[0] = 21 20:07:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)) 20:07:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x400000000031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x7, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000000)) 20:07:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)) 20:07:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@secondary='builtin_and_secondary_trusted\x00') add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz'}, 0x0, 0x0, r0) 20:07:39 executing program 2: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 619.427267] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 20:07:40 executing program 3: unshare(0x44000000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xd88, 0x8001, 0x0, 0x1, 0x2, 0x0, 0x8, 0x8}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x80400, 0x0) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfc000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc0) 20:07:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)) 20:07:40 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 20:07:40 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fdatasync(r0) 20:07:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)) [ 619.856714] IPVS: ftp: loaded support on port[0] = 21 [ 619.938175] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 20:07:40 executing program 4: unshare(0x44000000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xd88, 0x8001, 0x0, 0x1, 0x2, 0x0, 0x8, 0x8}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x80400, 0x0) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfc000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc0) 20:07:40 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fdatasync(r0) 20:07:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x78, &(0x7f0000013e95), 0x4) close(r2) close(r1) 20:07:40 executing program 2: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 20:07:40 executing program 0: r0 = socket(0x1000000000000001, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) acct(&(0x7f0000000380)='./file0\x00') 20:07:40 executing program 0: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) clone(0x8090900, 0x0, 0x0, 0x0, 0x0) [ 620.295614] IPVS: ftp: loaded support on port[0] = 21 20:07:40 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fdatasync(r0) [ 621.131539] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 20:07:41 executing program 3: unshare(0x44000000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xd88, 0x8001, 0x0, 0x1, 0x2, 0x0, 0x8, 0x8}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x80400, 0x0) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfc000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc0) 20:07:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000200)={0x0, 0x0, @start}) ioctl$sock_inet_SIOCRTMSG(r0, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @empty}}) 20:07:41 executing program 1: perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x400000010, 0x802, 0x0) write(r0, &(0x7f0000000000)="fc00000048000708ab092500090007000aab08000a0000000000e293210001c000000000000000000000000009000000fa2c1ec28656aaa79bb94b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d70500c91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b176e83df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429f3794dec896592d69d38a873cf1587c3b", 0xfc) 20:07:41 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fdatasync(r0) 20:07:41 executing program 2: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 621.313463] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 621.459530] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 621.483611] IPVS: ftp: loaded support on port[0] = 21 [ 621.499778] vhci_hcd: default hub control req: 010b v0000 i0000 l0 20:07:42 executing program 4: unshare(0x44000000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xd88, 0x8001, 0x0, 0x1, 0x2, 0x0, 0x8, 0x8}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x80400, 0x0) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000080), 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfc000000, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc0) 20:07:42 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x6, 0x4, 0x4, 0xfff7ffffffff7ffe, 0x4, 0x1}, 0x24) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) 20:07:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x0, 0xca}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @multicast1}, &(0x7f00000001c0)=0x8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 20:07:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000200)={0x0, 0x0, @start}) ioctl$sock_inet_SIOCRTMSG(r0, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @empty}}) [ 621.811034] vhci_hcd: default hub control req: 010b v0000 i0000 l0 20:07:42 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) shutdown(r2, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 621.917066] IPVS: ftp: loaded support on port[0] = 21 20:07:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000200)={0x0, 0x0, @start}) ioctl$sock_inet_SIOCRTMSG(r0, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @empty}}) 20:07:42 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) [ 622.205874] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 622.972140] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 623.032161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 20:07:43 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 20:07:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000200)={0x0, 0x0, @start}) ioctl$sock_inet_SIOCRTMSG(r0, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @empty}}) 20:07:43 executing program 2: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 20:07:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x0, 0xca}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @multicast1}, &(0x7f00000001c0)=0x8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) [ 623.194640] vhci_hcd: default hub control req: 010b v0000 i0000 l0 20:07:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x0, 0xca}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @multicast1}, &(0x7f00000001c0)=0x8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 20:07:44 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 20:07:44 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x7}], 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x9}, 0x1c) 20:07:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) [ 623.827267] audit: type=1800 audit(1551816464.269:157): pid=24269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16888 res=0 [ 623.905509] audit: type=1804 audit(1551816464.289:158): pid=24269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir175953066/syzkaller.b3q8bG/29/file0" dev="sda1" ino=16888 res=1 [ 623.941055] audit: type=1800 audit(1551816464.289:159): pid=24269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16888 res=0 20:07:44 executing program 1: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 20:07:44 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x7}], 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x9}, 0x1c) 20:07:44 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_mount_image$hfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYRES16], 0xffffff3d) tkill(r0, 0x1000000000016) 20:07:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x0, 0xca}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @multicast1}, &(0x7f00000001c0)=0x8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 20:07:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') preadv(r0, &(0x7f0000000480), 0x20000000000001e6, 0x0) 20:07:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x0, 0xca}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @multicast1}, &(0x7f00000001c0)=0x8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 20:07:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) [ 624.429610] audit: type=1804 audit(1551816464.854:160): pid=24284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir175953066/syzkaller.b3q8bG/29/file0" dev="sda1" ino=16888 res=1 [ 624.556805] audit: type=1800 audit(1551816464.854:161): pid=24284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16888 res=0 20:07:45 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x7}], 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x9}, 0x1c) [ 624.722431] audit: type=1800 audit(1551816465.152:162): pid=24300 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16892 res=0 [ 624.793596] audit: type=1804 audit(1551816465.192:163): pid=24300 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir175953066/syzkaller.b3q8bG/30/file0" dev="sda1" ino=16892 res=1 20:07:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') preadv(r0, &(0x7f0000000480), 0x20000000000001e6, 0x0) [ 624.992525] audit: type=1800 audit(1551816465.192:164): pid=24300 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16892 res=0 20:07:45 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) shutdown(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x7}], 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x9}, 0x1c) 20:07:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x0, 0xca}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @multicast1}, &(0x7f00000001c0)=0x8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) [ 625.469657] audit: type=1800 audit(1551816465.886:165): pid=24318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16892 res=0 [ 625.535673] audit: type=1804 audit(1551816465.945:166): pid=24318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir175953066/syzkaller.b3q8bG/31/file0" dev="sda1" ino=16892 res=1 20:07:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x1, 0x0, 0xca}) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@dev, @multicast1}, &(0x7f00000001c0)=0x8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 20:07:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x82, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 20:07:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') preadv(r0, &(0x7f0000000480), 0x20000000000001e6, 0x0) 20:07:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:48 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000500)="1e0000000104ff000300000000000000f30501000800010001e3aa96a66e", 0x1e) 20:07:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) [ 628.510616] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 20:07:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x82, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 628.591644] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 20:07:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') preadv(r0, &(0x7f0000000480), 0x20000000000001e6, 0x0) [ 628.635614] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 628.775881] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 20:07:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc00000003000600000000190200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) 20:07:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x5}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) write(r0, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x12500) clock_gettime(0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 20:07:49 executing program 4: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 20:07:49 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0/bus\x00') [ 629.574947] kauditd_printk_skb: 25 callbacks suppressed [ 629.574962] audit: type=1800 audit(1551816469.971:192): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16919 res=0 20:07:50 executing program 1: socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2) [ 629.712946] audit: type=1800 audit(1551816469.971:193): pid=24393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16916 res=0 20:07:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)="2e00000027008100e00f80ecdb374cb90453c8650407007400000000fb120003000e00da1b40d819a90600150000", 0x2e}], 0x1}, 0x0) 20:07:50 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f00000000c0)=0x3305, 0x4) [ 629.877005] audit: type=1804 audit(1551816470.001:194): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir055546749/syzkaller.OegId0/207/file0" dev="sda1" ino=16919 res=1 20:07:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xa2}) [ 630.000526] audit: type=1800 audit(1551816470.001:195): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16919 res=0 [ 630.064789] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 20:07:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x200000487]}) [ 630.157883] audit: type=1804 audit(1551816470.011:196): pid=24393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir787466423/syzkaller.nXhEV2/53/file0" dev="sda1" ino=16916 res=1 [ 630.181519] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 20:07:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x82, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 20:07:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x80000001) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1b) write(r1, 0x0, 0x0) 20:07:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0x3ff, 0x4) recvmmsg(r1, &(0x7f0000006500), 0x0, 0x0, 0x0) [ 630.310163] audit: type=1800 audit(1551816470.011:197): pid=24393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16916 res=0 20:07:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "80eb77850e71f1738d18eda7bf59da86"}) 20:07:50 executing program 3: syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r0 = add_key(0x0, 0x0, &(0x7f0000000640)="9cb71e24b0bb6f50a6dc6f63c533eb6c27bd38be519d110af711f1d9d767021c8c92305618b8c5deb7b663f3bfee7695efc496f55c1f9437a4b6d16f38ad5be723ee066cd46431", 0x47, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r0, 0x1, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0xc3, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0xe7f, 0x4) add_key$user(&(0x7f00000004c0)='user\x00', 0x0, 0x0, 0x0, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="000068000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) pkey_alloc(0x0, 0xf7ffffdffffffffc) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x7530}}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xc0, 0x80) 20:07:50 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000180)={{0x3, @remote, 0x2}, [@default, @default, @rose, @default, @remote, @bcast, @netrom, @netrom]}, 0x48) 20:07:50 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x140, &(0x7f0000000000)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 20:07:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x371fcda8}) 20:07:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000100), &(0x7f0000000080)=0x4) [ 630.641866] loop3: p1 < > p4 [ 630.708732] loop3: partition table partially beyond EOD, truncated 20:07:51 executing program 4: syz_mount_image$erofs(&(0x7f00000001c0)='erofs\x00', &(0x7f0000000200)='./file0\x00', 0x300, 0x0, 0x0, 0x0, 0x0) [ 630.746419] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 630.838827] loop3: p1 size 2 extends beyond EOD, truncated 20:07:51 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x5, 0x10000) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000480)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x80800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000032c0), 0x80000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000035c0)={&(0x7f00000001c0), 0x7, 0x0}, 0x24008011) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) timerfd_create(0x0, 0x80800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f00000004c0), 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x20012, 0xffffffffffffffff, 0x0) 20:07:51 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000180)={{0x3, @remote, 0x2}, [@default, @default, @rose, @default, @remote, @bcast, @netrom, @netrom]}, 0x48) [ 630.971832] erofs: read_super, device -> /dev/loop4 [ 631.013228] erofs: options -> [ 631.014929] loop3: p4 start 1854537728 is beyond EOD, truncated [ 631.038337] erofs: cannot read erofs superblock [ 631.075074] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 20:07:51 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000180)={{0x3, @remote, 0x2}, [@default, @default, @rose, @default, @remote, @bcast, @netrom, @netrom]}, 0x48) 20:07:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x82, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 631.344865] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 20:07:51 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x5, 0x10000) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000480)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x80800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000032c0), 0x80000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000035c0)={&(0x7f00000001c0), 0x7, 0x0}, 0x24008011) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) timerfd_create(0x0, 0x80800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f00000004c0), 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x20012, 0xffffffffffffffff, 0x0) 20:07:51 executing program 3: syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r0 = add_key(0x0, 0x0, &(0x7f0000000640)="9cb71e24b0bb6f50a6dc6f63c533eb6c27bd38be519d110af711f1d9d767021c8c92305618b8c5deb7b663f3bfee7695efc496f55c1f9437a4b6d16f38ad5be723ee066cd46431", 0x47, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r0, 0x1, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0xc3, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0xe7f, 0x4) add_key$user(&(0x7f00000004c0)='user\x00', 0x0, 0x0, 0x0, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="000068000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) pkey_alloc(0x0, 0xf7ffffdffffffffc) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x7530}}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xc0, 0x80) [ 631.439275] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de [ 631.453217] erofs: read_super, device -> /dev/loop4 [ 631.459513] erofs: options -> [ 631.465937] erofs: cannot read erofs superblock 20:07:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x371fcda8}) 20:07:52 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000580)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) connect$ax25(r0, &(0x7f0000000180)={{0x3, @remote, 0x2}, [@default, @default, @rose, @default, @remote, @bcast, @netrom, @netrom]}, 0x48) 20:07:52 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="e30323fe6c3215ed3e54320415c8872901ffebe8fc6d64ad6800080000003532a54db0db0da8c722f71f0d8681c8ee1a5873175e4f353155df"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 631.868337] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de 20:07:52 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0xe, 0x401) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @multicast2, @broadcast}, 0xc) ioctl(0xffffffffffffffff, 0x100, &(0x7f0000000040)="0adc1f123c1212768a5ad0") fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) getpid() perf_event_open(0x0, 0x0, 0x0, r2, 0x2) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={r3, &(0x7f00000001c0)=""/94}) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, &(0x7f00000002c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x80323, 0x2}) 20:07:52 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f00000002c0)={r1, r2+10000000}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000005000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}]) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000480)='bdev\x00', 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') 20:07:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r1, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) close(r1) exit_group(0x0) [ 632.208100] loop3: p1 < > p4 [ 632.211863] loop3: partition table partially beyond EOD, truncated [ 632.244121] loop3: p1 size 2 extends beyond EOD, truncated 20:07:52 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x5, 0x10000) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000480)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x80800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000032c0), 0x80000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000035c0)={&(0x7f00000001c0), 0x7, 0x0}, 0x24008011) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) timerfd_create(0x0, 0x80800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f00000004c0), 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x20012, 0xffffffffffffffff, 0x0) 20:07:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r1, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) close(r1) exit_group(0x0) [ 632.402398] Dev loop5: unable to read RDB block 1 [ 632.409961] loop3: p4 start 1854537728 is beyond EOD, truncated [ 632.428585] loop5: unable to read partition table [ 632.468843] loop5: partition table beyond EOD, truncated [ 632.499924] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 20:07:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r1, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) close(r1) exit_group(0x0) 20:07:53 executing program 3: syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r0 = add_key(0x0, 0x0, &(0x7f0000000640)="9cb71e24b0bb6f50a6dc6f63c533eb6c27bd38be519d110af711f1d9d767021c8c92305618b8c5deb7b663f3bfee7695efc496f55c1f9437a4b6d16f38ad5be723ee066cd46431", 0x47, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r0, 0x1, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0xc3, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0xe7f, 0x4) add_key$user(&(0x7f00000004c0)='user\x00', 0x0, 0x0, 0x0, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="000068000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) pkey_alloc(0x0, 0xf7ffffdffffffffc) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x7530}}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xc0, 0x80) 20:07:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x371fcda8}) 20:07:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0xe, 0x401) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @multicast2, @broadcast}, 0xc) ioctl(0xffffffffffffffff, 0x100, &(0x7f0000000040)="0adc1f123c1212768a5ad0") fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) getpid() perf_event_open(0x0, 0x0, 0x0, r2, 0x2) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={r3, &(0x7f00000001c0)=""/94}) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, &(0x7f00000002c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x80323, 0x2}) [ 632.963842] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 633.003648] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 20:07:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r1, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) close(r1) exit_group(0x0) 20:07:53 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x5, 0x10000) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000480)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x80800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000032c0), 0x80000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000035c0)={&(0x7f00000001c0), 0x7, 0x0}, 0x24008011) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) timerfd_create(0x0, 0x80800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f00000004c0), 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x20012, 0xffffffffffffffff, 0x0) [ 633.250328] loop3: p1 < > p4 [ 633.268630] loop3: partition table partially beyond EOD, truncated [ 633.285439] Dev loop5: unable to read RDB block 1 [ 633.300734] loop5: unable to read partition table [ 633.302601] loop3: p1 size 2 extends beyond EOD, truncated [ 633.336545] loop5: partition table beyond EOD, truncated 20:07:53 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) 20:07:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0xe, 0x401) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @multicast2, @broadcast}, 0xc) ioctl(0xffffffffffffffff, 0x100, &(0x7f0000000040)="0adc1f123c1212768a5ad0") fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) getpid() perf_event_open(0x0, 0x0, 0x0, r2, 0x2) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={r3, &(0x7f00000001c0)=""/94}) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, &(0x7f00000002c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x80323, 0x2}) [ 633.356434] loop3: p4 start 1854537728 is beyond EOD, truncated [ 633.366901] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 20:07:54 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc028aa03, &(0x7f0000000000)={{}, 0x3000}) 20:07:54 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f00000002c0)={r1, r2+10000000}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000005000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}]) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000480)='bdev\x00', 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') [ 633.843205] __loop_clr_fd: partition scan of loop3 failed (rc=-22) [ 633.865686] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 633.881894] print_req_error: I/O error, dev loop3, sector 0 flags 80700 20:07:54 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f00000002c0)={r1, r2+10000000}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000005000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}]) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000480)='bdev\x00', 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') 20:07:54 executing program 0: ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) creat(0x0, 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1000002, 0x4002012, r0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc01723, 0x0, 0x0, 0x0, 0x2000000000002) [ 633.970302] print_req_error: I/O error, dev loop3, sector 0 flags 0 [ 633.977770] buffer_io_error: 279 callbacks suppressed [ 633.977780] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 633.991850] print_req_error: I/O error, dev loop3, sector 0 flags 0 [ 633.998388] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 634.007126] print_req_error: I/O error, dev loop3, sector 0 flags 0 20:07:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x371fcda8}) [ 634.013769] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 634.024269] print_req_error: I/O error, dev loop3, sector 0 flags 0 [ 634.030942] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 634.038630] print_req_error: I/O error, dev loop3, sector 0 flags 0 [ 634.045121] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 634.057451] print_req_error: I/O error, dev loop3, sector 0 flags 0 20:07:54 executing program 3: syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r0 = add_key(0x0, 0x0, &(0x7f0000000640)="9cb71e24b0bb6f50a6dc6f63c533eb6c27bd38be519d110af711f1d9d767021c8c92305618b8c5deb7b663f3bfee7695efc496f55c1f9437a4b6d16f38ad5be723ee066cd46431", 0x47, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r0, 0x1, r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0xc3, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0xe7f, 0x4) add_key$user(&(0x7f00000004c0)='user\x00', 0x0, 0x0, 0x0, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="000068000000000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001c40)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) pkey_alloc(0x0, 0xf7ffffdffffffffc) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futimesat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x7530}}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xc0, 0x80) [ 634.064861] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 634.076293] print_req_error: I/O error, dev loop3, sector 0 flags 0 [ 634.082846] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 634.096596] print_req_error: I/O error, dev loop3, sector 0 flags 0 [ 634.103172] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 634.111418] print_req_error: I/O error, dev loop3, sector 0 flags 0 [ 634.117910] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 634.127316] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 634.314286] Dev loop5: unable to read RDB block 1 [ 634.372660] loop5: unable to read partition table [ 634.414384] loop5: partition table beyond EOD, truncated [ 634.476717] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 634.511247] loop3: p1 < > p4 [ 634.532406] loop3: partition table partially beyond EOD, truncated [ 634.619345] loop3: p1 size 2 extends beyond EOD, truncated [ 634.696355] __loop_clr_fd: partition scan of loop5 failed (rc=-22) [ 634.798022] loop3: p4 start 1854537728 is beyond EOD, truncated 20:07:55 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f00000002c0)={r1, r2+10000000}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000005000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}]) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000480)='bdev\x00', 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') 20:07:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0xe, 0x401) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @multicast2, @broadcast}, 0xc) ioctl(0xffffffffffffffff, 0x100, &(0x7f0000000040)="0adc1f123c1212768a5ad0") fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) getpid() perf_event_open(0x0, 0x0, 0x0, r2, 0x2) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={r3, &(0x7f00000001c0)=""/94}) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, &(0x7f00000002c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x80323, 0x2}) 20:07:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000a65000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000000c0)=0x4000000, 0x8000, 0x2000000000002) [ 634.999008] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 20:07:55 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f00000002c0)={r1, r2+10000000}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000005000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}]) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000480)='bdev\x00', 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') 20:07:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000a65000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000000c0)=0x4000000, 0x8000, 0x2000000000002) 20:07:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x24020400) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r1, 0x11, 0xb, 0x0, &(0x7f0000001600)) 20:07:55 executing program 0: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001080)={'filter\x00', 0x4, "55bdea3c"}, &(0x7f0000000080)=0x28) 20:07:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4, 0x52}}}]}, 0x38}}, 0x0) 20:07:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000a65000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000000c0)=0x4000000, 0x8000, 0x2000000000002) 20:07:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000000400)='limits\x00') ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x7174}}}, &(0x7f0000000080)=0x84) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a4\x87\xcf6\xadWn2\x92k\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2*P[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdhy(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f', 0x0) execveat(r1, &(0x7f00000005c0)='\x00', &(0x7f0000000580)=[&(0x7f0000000300)='vboxnet0\x00', &(0x7f00000004c0)='eth1&!cpusetproc\x00'], &(0x7f0000000ac0), 0x1000) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dca, 0xfffffffffffffffa, 0xffff, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc9e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0xa22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77d, 0x0, 0x0, 0x2, 0x0, 0x6706, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3]}, 0x45c) fcntl$addseals(r1, 0x409, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xfffffffffffff46e, 0x0, 0x101, 0x6b, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3, 0x9, 0x7, 0x0, 0x1ff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x8, 0x8001, 0x0, 0xc1d, 0x2, 0xf0, 0x0, 0x0, 0x1, 0x679, 0x0, 0x466, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x80, 0x0, 0x2, 0x7, 0x1}, r2, 0x6, r0, 0x8) 20:07:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4, 0x52}}}]}, 0x38}}, 0x0) 20:07:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000a65000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000000c0)=0x4000000, 0x8000, 0x2000000000002) 20:07:56 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f00000002c0)={r1, r2+10000000}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000005000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}]) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000480)='bdev\x00', 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') 20:07:56 executing program 0: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xdcc0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0x0, 0x4c1, 0x0, [0xfeffffff]}) 20:07:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4, 0x52}}}]}, 0x38}}, 0x0) 20:07:56 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) request_key(&(0x7f0000000700)='.dead\x00', 0x0, &(0x7f0000000780)='user\x00', 0xfffffffffffffffb) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f00000002c0)={r1, r2+10000000}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000068000000000000000005000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}]) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000480)='bdev\x00', 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') 20:07:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000400)='limits\x00') ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x7174}}}, &(0x7f0000000080)=0x84) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a4\x87\xcf6\xadWn2\x92k\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2*P[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdhy(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f', 0x0) execveat(r1, &(0x7f00000005c0)='\x00', &(0x7f0000000580)=[&(0x7f0000000300)='vboxnet0\x00', &(0x7f00000004c0)='eth1&!cpusetproc\x00'], &(0x7f0000000ac0), 0x1000) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dca, 0xfffffffffffffffa, 0xffff, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc9e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0xa22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77d, 0x0, 0x0, 0x2, 0x0, 0x6706, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3]}, 0x45c) fcntl$addseals(r1, 0x409, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xfffffffffffff46e, 0x0, 0x101, 0x6b, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3, 0x9, 0x7, 0x0, 0x1ff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x8, 0x8001, 0x0, 0xc1d, 0x2, 0xf0, 0x0, 0x0, 0x1, 0x679, 0x0, 0x466, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x80, 0x0, 0x2, 0x7, 0x1}, r2, 0x6, r0, 0x8) 20:07:56 executing program 1: syz_open_procfs(0x0, &(0x7f0000000400)='limits\x00') ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x7174}}}, &(0x7f0000000080)=0x84) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a4\x87\xcf6\xadWn2\x92k\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2*P[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdhy(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f', 0x0) execveat(r1, &(0x7f00000005c0)='\x00', &(0x7f0000000580)=[&(0x7f0000000300)='vboxnet0\x00', &(0x7f00000004c0)='eth1&!cpusetproc\x00'], &(0x7f0000000ac0), 0x1000) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dca, 0xfffffffffffffffa, 0xffff, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc9e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0xa22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77d, 0x0, 0x0, 0x2, 0x0, 0x6706, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3]}, 0x45c) fcntl$addseals(r1, 0x409, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xfffffffffffff46e, 0x0, 0x101, 0x6b, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3, 0x9, 0x7, 0x0, 0x1ff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x8, 0x8001, 0x0, 0xc1d, 0x2, 0xf0, 0x0, 0x0, 0x1, 0x679, 0x0, 0x466, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x80, 0x0, 0x2, 0x7, 0x1}, r2, 0x6, r0, 0x8) 20:07:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) 20:07:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4, 0x52}}}]}, 0x38}}, 0x0) 20:07:56 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) close(r0) symlink(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) 20:07:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 20:07:56 executing program 1: syz_open_procfs(0x0, &(0x7f0000000400)='limits\x00') ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x7174}}}, &(0x7f0000000080)=0x84) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a4\x87\xcf6\xadWn2\x92k\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2*P[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdhy(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f', 0x0) execveat(r1, &(0x7f00000005c0)='\x00', &(0x7f0000000580)=[&(0x7f0000000300)='vboxnet0\x00', &(0x7f00000004c0)='eth1&!cpusetproc\x00'], &(0x7f0000000ac0), 0x1000) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dca, 0xfffffffffffffffa, 0xffff, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc9e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0xa22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77d, 0x0, 0x0, 0x2, 0x0, 0x6706, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3]}, 0x45c) fcntl$addseals(r1, 0x409, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xfffffffffffff46e, 0x0, 0x101, 0x6b, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3, 0x9, 0x7, 0x0, 0x1ff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x8, 0x8001, 0x0, 0xc1d, 0x2, 0xf0, 0x0, 0x0, 0x1, 0x679, 0x0, 0x466, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x80, 0x0, 0x2, 0x7, 0x1}, r2, 0x6, r0, 0x8) 20:07:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 20:07:57 executing program 1: syz_open_procfs(0x0, &(0x7f0000000400)='limits\x00') ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x7174}}}, &(0x7f0000000080)=0x84) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a4\x87\xcf6\xadWn2\x92k\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2*P[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdhy(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f', 0x0) execveat(r1, &(0x7f00000005c0)='\x00', &(0x7f0000000580)=[&(0x7f0000000300)='vboxnet0\x00', &(0x7f00000004c0)='eth1&!cpusetproc\x00'], &(0x7f0000000ac0), 0x1000) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dca, 0xfffffffffffffffa, 0xffff, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc9e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0xa22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77d, 0x0, 0x0, 0x2, 0x0, 0x6706, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3]}, 0x45c) fcntl$addseals(r1, 0x409, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xfffffffffffff46e, 0x0, 0x101, 0x6b, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3, 0x9, 0x7, 0x0, 0x1ff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x8, 0x8001, 0x0, 0xc1d, 0x2, 0xf0, 0x0, 0x0, 0x1, 0x679, 0x0, 0x466, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x80, 0x0, 0x2, 0x7, 0x1}, r2, 0x6, r0, 0x8) 20:07:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) socket$inet6(0xa, 0x803, 0x8) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r0, &(0x7f00000000c0)=@abs, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) epoll_create1(0x80000) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 20:07:57 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, 0x0, 0x0) 20:07:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x12, 0x0, &(0x7f0000000480)="263abd030e98ff4dc870bd6e88a800a088a8", 0x0, 0x1000}, 0x28) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x4000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000000c0)='syz1\x00') fcntl$setlease(r4, 0x400, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000300)=0x8001, 0x4) unshare(0x40000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r5], 0x0, 0x17, 0x0, 0xfffffffffffffffc}, 0x2fe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x200, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffd) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000340)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400000000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[0xf001], 0x0, 0x100, 0x279d}) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) [ 637.522999] IPVS: ftp: loaded support on port[0] = 21 [ 638.187320] IPVS: ftp: loaded support on port[0] = 21 [ 639.527784] IPVS: ftp: loaded support on port[0] = 21 [ 639.561723] device bridge_slave_1 left promiscuous mode [ 639.567734] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.617722] device bridge_slave_0 left promiscuous mode [ 639.630786] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.908009] device hsr_slave_1 left promiscuous mode [ 641.962095] device hsr_slave_0 left promiscuous mode [ 642.011652] team0 (unregistering): Port device team_slave_1 removed [ 642.025065] team0 (unregistering): Port device team_slave_0 removed [ 642.035586] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 642.101722] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 642.192805] bond0 (unregistering): Released all slaves [ 642.388285] chnl_net:caif_netlink_parms(): no params data found [ 642.448180] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.462260] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.469482] device bridge_slave_0 entered promiscuous mode [ 642.479695] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.493501] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.507399] device bridge_slave_1 entered promiscuous mode [ 642.574832] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 642.594519] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 642.635222] team0: Port device team_slave_0 added [ 642.653200] team0: Port device team_slave_1 added [ 642.721742] device hsr_slave_0 entered promiscuous mode [ 642.813818] device hsr_slave_1 entered promiscuous mode [ 642.953798] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.960240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.966934] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.973294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.104141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.132210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.144822] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.154740] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.175720] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.195836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.212415] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.218862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.248525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 643.256393] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.262815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.272408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 643.292225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 643.299884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 643.315162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 643.327055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.339456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.347347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.391124] 8021q: adding VLAN 0 to HW filter on device batadv0 20:08:03 executing program 4: syz_open_procfs(0x0, &(0x7f0000000400)='limits\x00') ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x7174}}}, &(0x7f0000000080)=0x84) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a4\x87\xcf6\xadWn2\x92k\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2*P[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdhy(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f', 0x0) execveat(r1, &(0x7f00000005c0)='\x00', &(0x7f0000000580)=[&(0x7f0000000300)='vboxnet0\x00', &(0x7f00000004c0)='eth1&!cpusetproc\x00'], &(0x7f0000000ac0), 0x1000) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dca, 0xfffffffffffffffa, 0xffff, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc9e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0xa22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77d, 0x0, 0x0, 0x2, 0x0, 0x6706, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3]}, 0x45c) fcntl$addseals(r1, 0x409, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xfffffffffffff46e, 0x0, 0x101, 0x6b, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3, 0x9, 0x7, 0x0, 0x1ff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x8, 0x8001, 0x0, 0xc1d, 0x2, 0xf0, 0x0, 0x0, 0x1, 0x679, 0x0, 0x466, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x80, 0x0, 0x2, 0x7, 0x1}, r2, 0x6, r0, 0x8) 20:08:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) socket$inet6(0xa, 0x803, 0x8) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r0, &(0x7f00000000c0)=@abs, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) epoll_create1(0x80000) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 20:08:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) 20:08:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 20:08:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_mount_image$iso9660(&(0x7f0000000c00)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@uid={'uid'}}]}) 20:08:03 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) 20:08:03 executing program 1: syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@session={'session', 0x3d, 0x180}}]}) 20:08:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) socket$inet6(0xa, 0x803, 0x8) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r0, &(0x7f00000000c0)=@abs, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) epoll_create1(0x80000) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 643.794138] ISOFS: Unable to identify CD-ROM format. 20:08:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 20:08:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000400)='limits\x00') ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0x7174}}}, &(0x7f0000000080)=0x84) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a4\x87\xcf6\xadWn2\x92k\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2*P[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdhy(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f', 0x0) execveat(r1, &(0x7f00000005c0)='\x00', &(0x7f0000000580)=[&(0x7f0000000300)='vboxnet0\x00', &(0x7f00000004c0)='eth1&!cpusetproc\x00'], &(0x7f0000000ac0), 0x1000) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dca, 0xfffffffffffffffa, 0xffff, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc9e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0xa22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77d, 0x0, 0x0, 0x2, 0x0, 0x6706, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3]}, 0x45c) fcntl$addseals(r1, 0x409, 0x1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xfffffffffffff46e, 0x0, 0x101, 0x6b, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3, 0x9, 0x7, 0x0, 0x1ff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x8, 0x8001, 0x0, 0xc1d, 0x2, 0xf0, 0x0, 0x0, 0x1, 0x679, 0x0, 0x466, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x80, 0x0, 0x2, 0x7, 0x1}, r2, 0x6, r0, 0x8) [ 644.034946] ISOFS: Unable to identify CD-ROM format. 20:08:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x100) ioctl$TCSBRK(r1, 0x5409, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) r2 = getpgid(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000900)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9917, 0xfffd}, 0xfffffffffffffffc) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x80240) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000640)=0x1) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x28, &(0x7f0000000100)}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000840)={'nat\x00'}, &(0x7f00000008c0)=0x78) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3) mlockall(0xfc) unshare(0x40000000) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000ac0)=""/190) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x10000, 0x1, 0x1, 0x101}) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') ioctl$KVM_SET_XSAVE(r0, 0x800455d1, 0x0) r3 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 20:08:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) socket$inet6(0xa, 0x803, 0x8) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r0, &(0x7f00000000c0)=@abs, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) epoll_create1(0x80000) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000800)='./file0\x00', 0x0) 20:08:04 executing program 0: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r2, &(0x7f0000000140)={0x17c}, 0x7) splice(r0, 0x0, r2, 0x0, 0x8ec1, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000000)={0xffffffffffffff8d}, 0x33b) write$P9_RREAD(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) close(r1) 20:08:04 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) 20:08:04 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) 20:08:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) 20:08:04 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) 20:08:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) dup3(r0, r1, 0x0) [ 644.881345] IPVS: ftp: loaded support on port[0] = 21 20:08:05 executing program 5: socket$inet(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7", 0x83, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c80)={0x0, 0x3}, &(0x7f0000000440)=0x2) times(&(0x7f0000000200)) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x80, 0x0, 0x3}, 0x10) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18000402}, 0xc, &(0x7f0000000480)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="000326bd7000fbdb0d00010054809ab44f00000000000008000000000c0014737918e316ce000000000000000053fb9ff4720732fe30f4f18e79bcfd89e4e06391268f8e18a454103bdb3d315d8f7e98203361f7d1135c8a757f13d6d48d6a715514fda6947cf8e16e76abf709d78b4840fc9fc555b871128c6d80a0642520c804618056f08dbe94c409ef8796fd"], 0x1}, 0x1, 0x0, 0x0, 0x40085}, 0x4000000) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x81, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000500)) r7 = socket(0x0, 0x4, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000940)=0xc) r12 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000a80)) r13 = getuid() r14 = getuid() r15 = geteuid() stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000c40)=[0xffffffffffffffff]) r19 = getegid() fstat(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) fstat(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x5}, [{0x2, 0x3, r8}, {0x2, 0x4, r9}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x1, r12}, {0x2, 0x1}, {0x2, 0x1, r13}, {0x2, 0x4, r14}, {0x2, 0x5, r15}], {0x4, 0x4}, [{0x8, 0x1, r16}, {0x8, 0x4, r17}, {0x8, 0x5, r18}, {0x8, 0x3, r19}, {0x8, 0x0, r20}, {0x8, 0x0, r21}, {0x8, 0x3, r22}, {0x8, 0x1, r23}], {0x10, 0x7}, {0x20, 0x2}}, 0xac, 0x3) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) sendto$inet6(r7, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f00000000c0), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) eventfd(0x5) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) [ 645.106882] IPVS: ftp: loaded support on port[0] = 21 20:08:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) [ 645.195482] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 20:08:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) 20:08:05 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) [ 647.315128] bridge0: port 3(gretap0) entered disabled state [ 647.322724] device gretap0 left promiscuous mode [ 647.327506] bridge0: port 3(gretap0) entered disabled state 20:08:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x100) ioctl$TCSBRK(r1, 0x5409, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) r2 = getpgid(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000900)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9917, 0xfffd}, 0xfffffffffffffffc) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x80240) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000640)=0x1) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x28, &(0x7f0000000100)}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000840)={'nat\x00'}, &(0x7f00000008c0)=0x78) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3) mlockall(0xfc) unshare(0x40000000) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000ac0)=""/190) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x10000, 0x1, 0x1, 0x101}) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') ioctl$KVM_SET_XSAVE(r0, 0x800455d1, 0x0) r3 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 20:08:07 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) 20:08:07 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'io'}]}, 0x4) 20:08:07 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) 20:08:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) 20:08:07 executing program 5: socket$inet(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7", 0x83, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c80)={0x0, 0x3}, &(0x7f0000000440)=0x2) times(&(0x7f0000000200)) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x80, 0x0, 0x3}, 0x10) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18000402}, 0xc, &(0x7f0000000480)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="000326bd7000fbdb0d00010054809ab44f00000000000008000000000c0014737918e316ce000000000000000053fb9ff4720732fe30f4f18e79bcfd89e4e06391268f8e18a454103bdb3d315d8f7e98203361f7d1135c8a757f13d6d48d6a715514fda6947cf8e16e76abf709d78b4840fc9fc555b871128c6d80a0642520c804618056f08dbe94c409ef8796fd"], 0x1}, 0x1, 0x0, 0x0, 0x40085}, 0x4000000) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x81, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000500)) r7 = socket(0x0, 0x4, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000940)=0xc) r12 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000a80)) r13 = getuid() r14 = getuid() r15 = geteuid() stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000c40)=[0xffffffffffffffff]) r19 = getegid() fstat(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) fstat(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x5}, [{0x2, 0x3, r8}, {0x2, 0x4, r9}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x1, r12}, {0x2, 0x1}, {0x2, 0x1, r13}, {0x2, 0x4, r14}, {0x2, 0x5, r15}], {0x4, 0x4}, [{0x8, 0x1, r16}, {0x8, 0x4, r17}, {0x8, 0x5, r18}, {0x8, 0x3, r19}, {0x8, 0x0, r20}, {0x8, 0x0, r21}, {0x8, 0x3, r22}, {0x8, 0x1, r23}], {0x10, 0x7}, {0x20, 0x2}}, 0xac, 0x3) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000001a40)="0e2122bb19339d38b186e92520ddba84685e0b86fa23c7e72655fcfac5c6eed3b765886074f11e35983a121b9e9023255847bcbf155952a6357595105ddd15bc53f9b074623b65da53a3baa8ab25f6fe90ed814f9a0ee0d95e3ba19161585460940283cd852c4867ebc4fa10a3543220fde8d51039ead0a06a8c6ba2bfc0bea193ab29f665dfee62480833ab46127fa419ce10cf06c40770b1e14cd7e5290e3c9885547784ff1448049526e920e5e7cccd14c10db5c46e0dc3fa9e366bfa0a006dd4421a488b469980761afd84a641f36fdc017e148c082b2eaa811c433925d2228bfa3bfff3128da60cf7039d088d261ac6183972aa9dee77a566b7d6e1f382305eafb22a6dd6647cf1df01a12e5375a5d3a97ab7610abbdaee73c5f0e00824a02a5f2770fcf91c42d77a728a624be6a5e1c9e4594914900c9729787baf73c72e6e0b537b32ea0a525bdfe235920c1f43b30a4ea81b31ed25b631afe5f7218a6f7fb1f093ffedd91339dfa48fe6cc1d86a03943051020c63cf2516c04d3dc8e54ecf6ce2d151bef5ab8c70da23f2c275e6d508d4db98685b129b7f0a6c1fabfa5ebf4a089a13d0a500242a3d8b1ccfef29a28b19d79172164ec33b5280cef48247baec949db89d1e1ccdcd32948df2e0021a405031f0bfdb8a99718bb5b11b21c8684133c372591604f90de90e79225dd22cf6e753141e63c4456e81ceded7b1828895368d0317ef34a3c5beed9c698948d4da661e34a9776816ee5c41fe28162cf8f3eda9b39a0db9ec981f8d101fdf1b1307e2dc9074c3a84fb040f0081f4f30b5ebd9f0e6ca8098cab68af80e37f72aea6257068960ce957edab20dd051a41666e24814554e2740fdc528da07b8ae97a06ab145be6132f1033a56b7db984830e00ad352445b9004e0eeffc27f834d510ab0c2880bc5065f0c925ebb7fc80210ee1b3c8b394d9296cd162159cbf8bac273b8eaf697a9c46f193a3fb2c1160017668aedee6e003e55efcd7095a2cec31fa8ce8b3197bf45d4c6e9b94e7e973da2a1709e5f1815305ec55dd2b3b002a812d568bd744a8d672ac2675089e232aaa3199546d8979467c632d76cd03b9ba8fd9363f18d6ddf5799280a856f8d9336dd6a79532a77dca0d917ff28c0613515e644da3cbe3c7684a5dba0dba1ea42488ebed30713f57ae583188990d9d269bbb0c45d1673cfde34d6f43824aa30214de2260d19347cc13fdc9598ed97452abeeeae126868c012fd1e7d5cd3296c41bb548a276a80e7729eba982be08b7645f654cf359f74ab451502ac7899f6fee27a2e163273f138a0fab44d2feb8f7d740332c5d89cef9a0b9905b1cb75a37272f0a5d17ce8e9d438ed52695238ac84a97013aba6ebefeac1df537cb01aae6e880d827c9b9fece09d5ad255a10dac00f48e02bb765c26c76337cbddcfb9f26faa61675cedf2c154ff8d9b550fe27d49d15c5d3e336cd84abdd33af185583bd4cde353ea3801aa2a7bec15565aaf03527da5511dbaab53da53574a5a93a4e9db930d8e3778adbf07427b7db3b4af44c438246585a6261b32694f2af1aa486fa183fc44560aea199bbf12d89cb315b103c96a12bc9c1b5dddf43946cae1daebbf6b57a7d29bcc1c02cddcd9a69cd9f3393b5cde5c6cf40b05ab1aee7ae92be8aac576bc40a926863f2bdddfc93760982ef61d54806d48fd51f746799f0f3dbbd1218a6a250decf22dc15c96cadaa58d6c110aa10092c2974b1729e09cc01a0444dcda602e8ef9204b7ac6c0326c728a21abe918433f239bb1f6fc5764a45c8d6403056c1de80185645a09f4e1ff2985eb1a7cd51047d49a7b195e96c594c2b39359f8c2d81c21cae87913c308622b0afa97dd8c127569a9696050b2ff1f992d9a901046c1ac19c3690ab21c983d4754ec83a5d2e6f4fcf84c7e6d4dd5043e91777eeb3dfacc7ecdaf9a2f71f26e7a840b5a819fb8578857f8e3483ae31212a3444a96c49c1fb6932a7edd4135f3a24c20d5419c821f49f8928773a88a723eb43571ca1bb15380e975eb2e33680bc2fe4266764b09671cf66463f2d217edd190c96cd84361a991c5ce81d3dc028c9682e68010388c8d76bd151adfd9f39df401cf277594c87b23aa09d9d1c20c7d5b805a3b31a995cdf3a465508d6338dc53717cabca0f5ab7305c3cbcbb49874033da017745cb34bac79b910d5fbbc067a2abf8ebc05e520921b8c3587bc7f8fe31476d036d9469b40c1c9cb7dc807313008993082a5a27b2525a46b432a6640cbbaa121892dbcd1dc2d126a0d68fec522fa70f5dfaf2b0e9c641e7ca09c24dc7818872d3cc297167a4c98b82d510f75a9a5f41eeae7bc7b9f1b2c3e4f8ae9592157520e99ba48f476390f681c927e4eadd8ddf2e6389153fde513b0e05276d29b702fc59d74fb1d77eb352b5061fddb07b74823ebadc45f380a8b5774c8f953daee56a238f84ef8cf76fc9f7c89ebded7855ee4e37e2d448a9798ae1f48666dd813d3d2bf5c1f1cc76295524b84cbb2855f645d0f77242cc4432c04330569aa97482779a005a6ca3a4825383265a48b50c050b8bd16ad921acf56cfda41a8665e50eccf38cd0e124a07ccfed4908880302761437738c2362e4478763781eecf59d32258c206d994b4e1451331ba75ac09a2fbd2784a0b3cea3373b20a5c88f15d81ac17c231b4a9574415b4660df57008b14e26b96a43593328d329f55dd83225584e71f6ac0e131635b1324a7f7be3ebfb00541306d40a90accaba8ae51652c4fca0174f14a7e02281acfa85bea3babcb3e81d797d21c20a51e5d7227088e583476cf03de6323de4b899c0db22fa1a7e0e32ff0f82b94a62021ee97490e926029993b3feaca022e313bf0fe9a7ef8a581c6bf0737a72582b5fc14735820587e26a85ccc1bf0e96fb2b896b31558447c4a3dff4fed6203fe796304275f38d6ef37f2951bc45de85feec2103cc797b88a67a4263298554c14deba4691af4585d3935cb155e1095a2707599814d6b0eb407719edff8b7b14c9978ac10c7ca2e78eaaab9702f2c96b8b6a34349adc662021b1d0f681ca85147c4e37a9d70e59cd8857e8284000006831afcf451f1fd8e093bbf89d11798273438baa1f55db1c0479e8d1d8a81cfd8b137a317d72389ab384d34f17fc77b23434440fe4c96a99b1bd243e024df11949b0fa20a122832e5318a776557d8f962d25811f6e84ac47b1b72d01dccb958762f83716b3a7cf2de96fee08b79eb8fff9e07f6c4a0625f7a8bfa88e109646f98e943608a11a9325e0c3f2a8e707a851f46a18783fe342aa85e351a4617ed4ccfefb6e336adcc61d164f352630cd0e98a691c969a404b33e6539b7a4d02c048a21c23e23df0ede5a7debc9d92da8d823d59e59c79cd87b715a6fc2eeb3ee59e82ec95beb0df756b557f393b637786ddbfb1870c721d8b562cc05307ec48352bba9b4e91e24e2ef866cd00e7c2f9bdc23634c893732cd2e0cde8dc5e174bd7f12ddb167ecdd3afd25dc9ea995f95d48c0cc2e4ab562133ac7a09bafa4bb4b17b247a875af4645a8b1aa3cd206a9a8f236ac8c4e3ccff6f01650b8ad9e95c04e60c79080a434167c6a86717732531d28e6207dc4e2cf6209244a2939ef7db8e9370211fb3f1495e0619373ee2a65b878632a33b2938ad813118e154ac1bcb57adc203fe3a475e212e45276d6819559aa79731f2d5ccaa3eb587d4fd870562b8710b6d7cdca684e83bbd3f6f076ac17d32a1cd7be42a7272f36d8949426a549a9b1839856f08ab230bfed949db22e91505de6983c60126d203d949fe628d1fbd6562bd9da9103f9706ded33b966a16cd8aec0786f2fafc4286569f03cbfc200a5264a7a96215c097e194d4597a3d0f03893dc654c28e959dde4b4873a4098fc26b44c26628f404e795ae9526c962685c02c2e95e02f7654af764a0224fa56a9a95a785c5b834befcfe0aa0ca13aa01f52b1b4533aa00a0f2280e46f434fda600aa3f9aabf425507fcccb92d7851ebf56b1d6b4621d0088f3f922ec7a1f07866c1b224146453c61e06763a259ba03f3c5ba7f1b14f52292239d4ab8f88b34d3ae10d71aa35d10499c1d4c86b48900f1f2b70f1264417c08e362c7b7c75110cf30161ce52e06f6d4a5d100acb4d8b3e5d9b9e1b9c0086d3cd6cc6a34f48ff31036e4f5954cba73ce87a467cd9b626f5e0847ce7f5338ea5c727d597a4d88982a5f6fa70feac4e3e8e2ea65123d96a689a347ac4a44232f9c77ad87900244b923ae8576d28505a20401f35e8483d61b906c811ccccfd8467f5a1456029d13119893179e117a4050265eb0c46588e548632dd1ca6f1938e4079ec9e6e6fee25f82f2220731c3017eaf7350f1f9e054cad2330d6d2445011559fcf9d5858c2239d03b7b2c5e0f57825a140e9def0de5b996a9d7e4e7241245ac624572ed7b431608dad133882658368a59cb04612b1dbc07611018b469cf5330dce1c0df24ac648f8462d92fc6558adb0efd99059a6dad975663b9580e66b37806bdb35459cfa30a929cbce0f407678e6b1cf3d89c0de58db7cd16e76b1964b2830f786554a1c527cf14b44b5bf9bcd2982fbdc981b749165d003d22f4143756db5073ae55a8ea4025bc8031b94cce52a87586d16c252ece288deefa98872b7508db3d5ce710f6d9f5cf3eb976df17dd8539e791980729df237f1f2503743d93adb450c831850553b5917874d12ff87ce8339e40613cf1620c30e95cf452971c8ebf99659deae38c3d78cfd34d3906fdefab8ffc4fef8a96d2fe648a6106bccc5178aebf3eb34f532c515da99f59d042aa6ce63d0126450c33f517673226f929b36712f89629c4bdb2a1abc3a88e1fd3fda7739764436bba415b173b4dc7dd7ed430ea1424a1f319b378a4ff9e4bc794df69600c0e5cc268c411b8d1d5169a8a2bb6d4eb63d1e0939e8fe8b9457b6200cfd0952def5592b7dfdf26198dd802a0355fe7841b92877a2c7ae56c28eae8dd27dcfc2886088dc4fa0775403a2689a41e12a97b605f3564b31e233bb40c55b31970a8d9bf566efe20c44e92f1603b895bdfb434193132884fca8f09e9e75d207d12c78e5ed70ea99a62dbbd9701cb702970c3a0851a5fa0e883026f619657980fec431c3cb97a500e5a459eac93b8611145ad2d0f61871eae710fdecbb12d1a7d16de36a487167c25f7c076e184606f0c9053e41f60a9372f3b27db69b1d66c7aa460f24c60fcf7ca1fc6f0c5bde81ccdd22d00ba9e13a7366dba2692d021f28c7120f8f9de389df1975fc912e3f72ada5256dc5025649c3af89ade290ca1f3562f1700091fd842a4b643518999ac3ee28fb0bada53e51719b90fed6f17b3119ece6581f2c82adddde6d2f4d2dc62ee9ada3055f72a121f60b7e76a48a1b4f5c012eb468846eded32c9068e5418bfd9c392d5fd7a847e3e13d510aa8cae33d4b918a936ec634790888cec831d203d3970f0c11c36481834651b949409655474e5b04130c6b3e9882dd67d9bf68c0b5f734c492b2d3392701f4d13bb7ec3703e9af8d746353940aa9dcd9713530944dacfcede0fbbaadacc0e9e6b92a5da0148a2aad0b52011c3b66718971c2e00cd642b130afedc30ed39709af31329cbbbd8c75ccf7cef4435e6a59af81b2d4f9c736a3a315eac493264ee4e41ff22e325a196c090580395329892525fcc042236545b6828ad29cddd8ae44f7aebe0a96da9e6562614fe460e267230f45db44d95884289e28a22e5e1dd5582e6703f9a704257fbe73fb2ba93d731", 0x1000}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) sendto$inet6(r7, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f00000000c0), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) eventfd(0x5) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) 20:08:07 executing program 3: socket$inet(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7", 0x83, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c80)={0x0, 0x3}, &(0x7f0000000440)=0x2) times(&(0x7f0000000200)) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x80, 0x0, 0x3}, 0x10) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18000402}, 0xc, &(0x7f0000000480)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="000326bd7000fbdb0d00010054809ab44f00000000000008000000000c0014737918e316ce000000000000000053fb9ff4720732fe30f4f18e79bcfd89e4e06391268f8e18a454103bdb3d315d8f7e98203361f7d1135c8a757f13d6d48d6a715514fda6947cf8e16e76abf709d78b4840fc9fc555b871128c6d80a0642520c804618056f08dbe94c409ef8796fd"], 0x1}, 0x1, 0x0, 0x0, 0x40085}, 0x4000000) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x81, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000500)) r7 = socket(0x0, 0x4, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000940)=0xc) r12 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000a80)) r13 = getuid() r14 = getuid() r15 = geteuid() stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000c40)=[0xffffffffffffffff]) r19 = getegid() fstat(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) fstat(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x5}, [{0x2, 0x3, r8}, {0x2, 0x4, r9}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x1, r12}, {0x2, 0x1}, {0x2, 0x1, r13}, {0x2, 0x4, r14}, {0x2, 0x5, r15}], {0x4, 0x4}, [{0x8, 0x1, r16}, {0x8, 0x4, r17}, {0x8, 0x5, r18}, {0x8, 0x3, r19}, {0x8, 0x0, r20}, {0x8, 0x0, r21}, {0x8, 0x3, r22}, {0x8, 0x1, r23}], {0x10, 0x7}, {0x20, 0x2}}, 0xac, 0x3) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) sendto$inet6(r7, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f00000000c0), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) eventfd(0x5) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) [ 648.026255] IPVS: ftp: loaded support on port[0] = 21 20:08:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) epoll_create1(0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xd}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r2, r3) mlockall(0x7) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0x0) 20:08:08 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000000079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="2303328408"]) 20:08:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) 20:08:08 executing program 5: socket$inet(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7", 0x83, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c80)={0x0, 0x3}, &(0x7f0000000440)=0x2) times(&(0x7f0000000200)) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x80, 0x0, 0x3}, 0x10) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18000402}, 0xc, &(0x7f0000000480)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="000326bd7000fbdb0d00010054809ab44f00000000000008000000000c0014737918e316ce000000000000000053fb9ff4720732fe30f4f18e79bcfd89e4e06391268f8e18a454103bdb3d315d8f7e98203361f7d1135c8a757f13d6d48d6a715514fda6947cf8e16e76abf709d78b4840fc9fc555b871128c6d80a0642520c804618056f08dbe94c409ef8796fd"], 0x1}, 0x1, 0x0, 0x0, 0x40085}, 0x4000000) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x81, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000500)) r7 = socket(0x0, 0x4, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000940)=0xc) r12 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000a80)) r13 = getuid() r14 = getuid() r15 = geteuid() stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000c40)=[0xffffffffffffffff]) r19 = getegid() fstat(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) fstat(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x5}, [{0x2, 0x3, r8}, {0x2, 0x4, r9}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x1, r12}, {0x2, 0x1}, {0x2, 0x1, r13}, {0x2, 0x4, r14}, {0x2, 0x5, r15}], {0x4, 0x4}, [{0x8, 0x1, r16}, {0x8, 0x4, r17}, {0x8, 0x5, r18}, {0x8, 0x3, r19}, {0x8, 0x0, r20}, {0x8, 0x0, r21}, {0x8, 0x3, r22}, {0x8, 0x1, r23}], {0x10, 0x7}, {0x20, 0x2}}, 0xac, 0x3) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) sendto$inet6(r7, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f00000000c0), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) eventfd(0x5) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) [ 648.629312] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 648.662737] IPVS: stopping master sync thread 16006 ... [ 648.688918] device bridge_slave_1 left promiscuous mode [ 648.707094] bridge0: port 2(bridge_slave_1) entered disabled state 20:08:09 executing program 3: socket$inet(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7", 0x83, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c80)={0x0, 0x3}, &(0x7f0000000440)=0x2) times(&(0x7f0000000200)) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x80, 0x0, 0x3}, 0x10) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18000402}, 0xc, &(0x7f0000000480)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="000326bd7000fbdb0d00010054809ab44f00000000000008000000000c0014737918e316ce000000000000000053fb9ff4720732fe30f4f18e79bcfd89e4e06391268f8e18a454103bdb3d315d8f7e98203361f7d1135c8a757f13d6d48d6a715514fda6947cf8e16e76abf709d78b4840fc9fc555b871128c6d80a0642520c804618056f08dbe94c409ef8796fd"], 0x1}, 0x1, 0x0, 0x0, 0x40085}, 0x4000000) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x81, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000500)) r7 = socket(0x0, 0x4, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000940)=0xc) r12 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000a80)) r13 = getuid() r14 = getuid() r15 = geteuid() stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000c40)=[0xffffffffffffffff]) r19 = getegid() fstat(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) fstat(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x5}, [{0x2, 0x3, r8}, {0x2, 0x4, r9}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x1, r12}, {0x2, 0x1}, {0x2, 0x1, r13}, {0x2, 0x4, r14}, {0x2, 0x5, r15}], {0x4, 0x4}, [{0x8, 0x1, r16}, {0x8, 0x4, r17}, {0x8, 0x5, r18}, {0x8, 0x3, r19}, {0x8, 0x0, r20}, {0x8, 0x0, r21}, {0x8, 0x3, r22}, {0x8, 0x1, r23}], {0x10, 0x7}, {0x20, 0x2}}, 0xac, 0x3) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) sendto$inet6(r7, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f00000000c0), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) eventfd(0x5) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) [ 648.786027] device bridge_slave_0 left promiscuous mode [ 648.791683] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.810604] device hsr_slave_1 left promiscuous mode [ 651.875957] device hsr_slave_0 left promiscuous mode [ 651.935117] team0 (unregistering): Port device team_slave_1 removed [ 651.947537] team0 (unregistering): Port device team_slave_0 removed [ 651.963013] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 652.037439] bond0 (unregistering): Released all slaves 20:08:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x100) ioctl$TCSBRK(r1, 0x5409, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) r2 = getpgid(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000900)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9917, 0xfffd}, 0xfffffffffffffffc) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x80240) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000640)=0x1) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="03451a8e3c88ae7d3921d4fed8b6b0d5ae82ad0c92ca7183616bb5a74befd952d61420bbef578f8c2355bd27a91eb9cca6a50fce0ef6acbd70669a369de13daa846776c333107a207dc4fb702fe58a7b5d90d6d10c7e818b85e9803b367b5bac3c0d5c50b939761f5084db7566f7163a8d69f912f057a2cb0eb729b622d61a1970851b3c2128225d250f0e6fe16f14438ff3c28214ead497c9c99c7605340596f839df56fad3bff523bf3f9c52196be697dd25ea78d7b43990c9a79f01ddc7c5245a5a97719a7a95b43f59677f230fc7cff2179bad8407a74c82498398609b773bb824f2db1180e35deb4dbea8e5a7bd1f89679538abc3e06b2b24aa6217d6b6") unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x28, &(0x7f0000000100)}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000840)={'nat\x00'}, &(0x7f00000008c0)=0x78) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3) mlockall(0xfc) unshare(0x40000000) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000ac0)=""/190) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x10000, 0x1, 0x1, 0x101}) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') ioctl$KVM_SET_XSAVE(r0, 0x800455d1, 0x0) r3 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 20:08:12 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121041, 0x0) clock_settime(0x0, &(0x7f00000002c0)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) getxattr(0x0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000640)={0x200, 0x0, 0x9, 0x1, 0x4, 0x400}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x4, 0x80, 0xffffffffffffffe0, 0x0, 0x6997, 0x0, 0x0, 0x3, 0x8, 0x8, 0x1f, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0xee, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x200, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x0, 0x7}, 0x1, 0x5, 0xfffffffffffffffb, 0x6, 0x0, 0x9, 0x7f}, 0x0, 0x7, r1, 0x8) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) mount(&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000180)) connect$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/73, 0x49, 0x2060, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000001c0)=0x101) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x47b}], 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x5, 0x6, 0x6}, 'syz0\x00', 0x17}) 20:08:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 20:08:12 executing program 5: socket$inet(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7", 0x83, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c80)={0x0, 0x3}, &(0x7f0000000440)=0x2) times(&(0x7f0000000200)) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x80, 0x0, 0x3}, 0x10) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18000402}, 0xc, &(0x7f0000000480)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="000326bd7000fbdb0d00010054809ab44f00000000000008000000000c0014737918e316ce000000000000000053fb9ff4720732fe30f4f18e79bcfd89e4e06391268f8e18a454103bdb3d315d8f7e98203361f7d1135c8a757f13d6d48d6a715514fda6947cf8e16e76abf709d78b4840fc9fc555b871128c6d80a0642520c804618056f08dbe94c409ef8796fd"], 0x1}, 0x1, 0x0, 0x0, 0x40085}, 0x4000000) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x81, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000500)) r7 = socket(0x0, 0x4, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000940)=0xc) r12 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000a80)) r13 = getuid() r14 = getuid() r15 = geteuid() stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000c40)=[0xffffffffffffffff]) r19 = getegid() fstat(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) fstat(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x5}, [{0x2, 0x3, r8}, {0x2, 0x4, r9}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x1, r12}, {0x2, 0x1}, {0x2, 0x1, r13}, {0x2, 0x4, r14}, {0x2, 0x5, r15}], {0x4, 0x4}, [{0x8, 0x1, r16}, {0x8, 0x4, r17}, {0x8, 0x5, r18}, {0x8, 0x3, r19}, {0x8, 0x0, r20}, {0x8, 0x0, r21}, {0x8, 0x3, r22}, {0x8, 0x1, r23}], {0x10, 0x7}, {0x20, 0x2}}, 0xac, 0x3) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) sendto$inet6(r7, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f00000000c0), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) eventfd(0x5) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) 20:08:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) 20:08:12 executing program 3: socket$inet(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7", 0x83, 0xfffffffffffffffd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c80)={0x0, 0x3}, &(0x7f0000000440)=0x2) times(&(0x7f0000000200)) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r5 = socket(0x1e, 0x4, 0x0) sync() setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x80, 0x0, 0x3}, 0x10) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18000402}, 0xc, &(0x7f0000000480)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="000326bd7000fbdb0d00010054809ab44f00000000000008000000000c0014737918e316ce000000000000000053fb9ff4720732fe30f4f18e79bcfd89e4e06391268f8e18a454103bdb3d315d8f7e98203361f7d1135c8a757f13d6d48d6a715514fda6947cf8e16e76abf709d78b4840fc9fc555b871128c6d80a0642520c804618056f08dbe94c409ef8796fd"], 0x1}, 0x1, 0x0, 0x0, 0x40085}, 0x4000000) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x81, 0x0) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000500)) r7 = socket(0x0, 0x4, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000940)=0xc) r12 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000a80)) r13 = getuid() r14 = getuid() r15 = geteuid() stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000c40)=[0xffffffffffffffff]) r19 = getegid() fstat(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getgid() stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) fstat(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000f00)={{}, {0x1, 0x5}, [{0x2, 0x3, r8}, {0x2, 0x4, r9}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x1, r12}, {0x2, 0x1}, {0x2, 0x1, r13}, {0x2, 0x4, r14}, {0x2, 0x5, r15}], {0x4, 0x4}, [{0x8, 0x1, r16}, {0x8, 0x4, r17}, {0x8, 0x5, r18}, {0x8, 0x3, r19}, {0x8, 0x0, r20}, {0x8, 0x0, r21}, {0x8, 0x3, r22}, {0x8, 0x1, r23}], {0x10, 0x7}, {0x20, 0x2}}, 0xac, 0x3) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000001a40)="0e2122bb19339d38b186e92520ddba84685e0b86fa23c7e72655fcfac5c6eed3b765886074f11e35983a121b9e9023255847bcbf155952a6357595105ddd15bc53f9b074623b65da53a3baa8ab25f6fe90ed814f9a0ee0d95e3ba19161585460940283cd852c4867ebc4fa10a3543220fde8d51039ead0a06a8c6ba2bfc0bea193ab29f665dfee62480833ab46127fa419ce10cf06c40770b1e14cd7e5290e3c9885547784ff1448049526e920e5e7cccd14c10db5c46e0dc3fa9e366bfa0a006dd4421a488b469980761afd84a641f36fdc017e148c082b2eaa811c433925d2228bfa3bfff3128da60cf7039d088d261ac6183972aa9dee77a566b7d6e1f382305eafb22a6dd6647cf1df01a12e5375a5d3a97ab7610abbdaee73c5f0e00824a02a5f2770fcf91c42d77a728a624be6a5e1c9e4594914900c9729787baf73c72e6e0b537b32ea0a525bdfe235920c1f43b30a4ea81b31ed25b631afe5f7218a6f7fb1f093ffedd91339dfa48fe6cc1d86a03943051020c63cf2516c04d3dc8e54ecf6ce2d151bef5ab8c70da23f2c275e6d508d4db98685b129b7f0a6c1fabfa5ebf4a089a13d0a500242a3d8b1ccfef29a28b19d79172164ec33b5280cef48247baec949db89d1e1ccdcd32948df2e0021a405031f0bfdb8a99718bb5b11b21c8684133c372591604f90de90e79225dd22cf6e753141e63c4456e81ceded7b1828895368d0317ef34a3c5beed9c698948d4da661e34a9776816ee5c41fe28162cf8f3eda9b39a0db9ec981f8d101fdf1b1307e2dc9074c3a84fb040f0081f4f30b5ebd9f0e6ca8098cab68af80e37f72aea6257068960ce957edab20dd051a41666e24814554e2740fdc528da07b8ae97a06ab145be6132f1033a56b7db984830e00ad352445b9004e0eeffc27f834d510ab0c2880bc5065f0c925ebb7fc80210ee1b3c8b394d9296cd162159cbf8bac273b8eaf697a9c46f193a3fb2c1160017668aedee6e003e55efcd7095a2cec31fa8ce8b3197bf45d4c6e9b94e7e973da2a1709e5f1815305ec55dd2b3b002a812d568bd744a8d672ac2675089e232aaa3199546d8979467c632d76cd03b9ba8fd9363f18d6ddf5799280a856f8d9336dd6a79532a77dca0d917ff28c0613515e644da3cbe3c7684a5dba0dba1ea42488ebed30713f57ae583188990d9d269bbb0c45d1673cfde34d6f43824aa30214de2260d19347cc13fdc9598ed97452abeeeae126868c012fd1e7d5cd3296c41bb548a276a80e7729eba982be08b7645f654cf359f74ab451502ac7899f6fee27a2e163273f138a0fab44d2feb8f7d740332c5d89cef9a0b9905b1cb75a37272f0a5d17ce8e9d438ed52695238ac84a97013aba6ebefeac1df537cb01aae6e880d827c9b9fece09d5ad255a10dac00f48e02bb765c26c76337cbddcfb9f26faa61675cedf2c154ff8d9b550fe27d49d15c5d3e336cd84abdd33af185583bd4cde353ea3801aa2a7bec15565aaf03527da5511dbaab53da53574a5a93a4e9db930d8e3778adbf07427b7db3b4af44c438246585a6261b32694f2af1aa486fa183fc44560aea199bbf12d89cb315b103c96a12bc9c1b5dddf43946cae1daebbf6b57a7d29bcc1c02cddcd9a69cd9f3393b5cde5c6cf40b05ab1aee7ae92be8aac576bc40a926863f2bdddfc93760982ef61d54806d48fd51f746799f0f3dbbd1218a6a250decf22dc15c96cadaa58d6c110aa10092c2974b1729e09cc01a0444dcda602e8ef9204b7ac6c0326c728a21abe918433f239bb1f6fc5764a45c8d6403056c1de80185645a09f4e1ff2985eb1a7cd51047d49a7b195e96c594c2b39359f8c2d81c21cae87913c308622b0afa97dd8c127569a9696050b2ff1f992d9a901046c1ac19c3690ab21c983d4754ec83a5d2e6f4fcf84c7e6d4dd5043e91777eeb3dfacc7ecdaf9a2f71f26e7a840b5a819fb8578857f8e3483ae31212a3444a96c49c1fb6932a7edd4135f3a24c20d5419c821f49f8928773a88a723eb43571ca1bb15380e975eb2e33680bc2fe4266764b09671cf66463f2d217edd190c96cd84361a991c5ce81d3dc028c9682e68010388c8d76bd151adfd9f39df401cf277594c87b23aa09d9d1c20c7d5b805a3b31a995cdf3a465508d6338dc53717cabca0f5ab7305c3cbcbb49874033da017745cb34bac79b910d5fbbc067a2abf8ebc05e520921b8c3587bc7f8fe31476d036d9469b40c1c9cb7dc807313008993082a5a27b2525a46b432a6640cbbaa121892dbcd1dc2d126a0d68fec522fa70f5dfaf2b0e9c641e7ca09c24dc7818872d3cc297167a4c98b82d510f75a9a5f41eeae7bc7b9f1b2c3e4f8ae9592157520e99ba48f476390f681c927e4eadd8ddf2e6389153fde513b0e05276d29b702fc59d74fb1d77eb352b5061fddb07b74823ebadc45f380a8b5774c8f953daee56a238f84ef8cf76fc9f7c89ebded7855ee4e37e2d448a9798ae1f48666dd813d3d2bf5c1f1cc76295524b84cbb2855f645d0f77242cc4432c04330569aa97482779a005a6ca3a4825383265a48b50c050b8bd16ad921acf56cfda41a8665e50eccf38cd0e124a07ccfed4908880302761437738c2362e4478763781eecf59d32258c206d994b4e1451331ba75ac09a2fbd2784a0b3cea3373b20a5c88f15d81ac17c231b4a9574415b4660df57008b14e26b96a43593328d329f55dd83225584e71f6ac0e131635b1324a7f7be3ebfb00541306d40a90accaba8ae51652c4fca0174f14a7e02281acfa85bea3babcb3e81d797d21c20a51e5d7227088e583476cf03de6323de4b899c0db22fa1a7e0e32ff0f82b94a62021ee97490e926029993b3feaca022e313bf0fe9a7ef8a581c6bf0737a72582b5fc14735820587e26a85ccc1bf0e96fb2b896b31558447c4a3dff4fed6203fe796304275f38d6ef37f2951bc45de85feec2103cc797b88a67a4263298554c14deba4691af4585d3935cb155e1095a2707599814d6b0eb407719edff8b7b14c9978ac10c7ca2e78eaaab9702f2c96b8b6a34349adc662021b1d0f681ca85147c4e37a9d70e59cd8857e8284000006831afcf451f1fd8e093bbf89d11798273438baa1f55db1c0479e8d1d8a81cfd8b137a317d72389ab384d34f17fc77b23434440fe4c96a99b1bd243e024df11949b0fa20a122832e5318a776557d8f962d25811f6e84ac47b1b72d01dccb958762f83716b3a7cf2de96fee08b79eb8fff9e07f6c4a0625f7a8bfa88e109646f98e943608a11a9325e0c3f2a8e707a851f46a18783fe342aa85e351a4617ed4ccfefb6e336adcc61d164f352630cd0e98a691c969a404b33e6539b7a4d02c048a21c23e23df0ede5a7debc9d92da8d823d59e59c79cd87b715a6fc2eeb3ee59e82ec95beb0df756b557f393b637786ddbfb1870c721d8b562cc05307ec48352bba9b4e91e24e2ef866cd00e7c2f9bdc23634c893732cd2e0cde8dc5e174bd7f12ddb167ecdd3afd25dc9ea995f95d48c0cc2e4ab562133ac7a09bafa4bb4b17b247a875af4645a8b1aa3cd206a9a8f236ac8c4e3ccff6f01650b8ad9e95c04e60c79080a434167c6a86717732531d28e6207dc4e2cf6209244a2939ef7db8e9370211fb3f1495e0619373ee2a65b878632a33b2938ad813118e154ac1bcb57adc203fe3a475e212e45276d6819559aa79731f2d5ccaa3eb587d4fd870562b8710b6d7cdca684e83bbd3f6f076ac17d32a1cd7be42a7272f36d8949426a549a9b1839856f08ab230bfed949db22e91505de6983c60126d203d949fe628d1fbd6562bd9da9103f9706ded33b966a16cd8aec0786f2fafc4286569f03cbfc200a5264a7a96215c097e194d4597a3d0f03893dc654c28e959dde4b4873a4098fc26b44c26628f404e795ae9526c962685c02c2e95e02f7654af764a0224fa56a9a95a785c5b834befcfe0aa0ca13aa01f52b1b4533aa00a0f2280e46f434fda600aa3f9aabf425507fcccb92d7851ebf56b1d6b4621d0088f3f922ec7a1f07866c1b224146453c61e06763a259ba03f3c5ba7f1b14f52292239d4ab8f88b34d3ae10d71aa35d10499c1d4c86b48900f1f2b70f1264417c08e362c7b7c75110cf30161ce52e06f6d4a5d100acb4d8b3e5d9b9e1b9c0086d3cd6cc6a34f48ff31036e4f5954cba73ce87a467cd9b626f5e0847ce7f5338ea5c727d597a4d88982a5f6fa70feac4e3e8e2ea65123d96a689a347ac4a44232f9c77ad87900244b923ae8576d28505a20401f35e8483d61b906c811ccccfd8467f5a1456029d13119893179e117a4050265eb0c46588e548632dd1ca6f1938e4079ec9e6e6fee25f82f2220731c3017eaf7350f1f9e054cad2330d6d2445011559fcf9d5858c2239d03b7b2c5e0f57825a140e9def0de5b996a9d7e4e7241245ac624572ed7b431608dad133882658368a59cb04612b1dbc07611018b469cf5330dce1c0df24ac648f8462d92fc6558adb0efd99059a6dad975663b9580e66b37806bdb35459cfa30a929cbce0f407678e6b1cf3d89c0de58db7cd16e76b1964b2830f786554a1c527cf14b44b5bf9bcd2982fbdc981b749165d003d22f4143756db5073ae55a8ea4025bc8031b94cce52a87586d16c252ece288deefa98872b7508db3d5ce710f6d9f5cf3eb976df17dd8539e791980729df237f1f2503743d93adb450c831850553b5917874d12ff87ce8339e40613cf1620c30e95cf452971c8ebf99659deae38c3d78cfd34d3906fdefab8ffc4fef8a96d2fe648a6106bccc5178aebf3eb34f532c515da99f59d042aa6ce63d0126450c33f517673226f929b36712f89629c4bdb2a1abc3a88e1fd3fda7739764436bba415b173b4dc7dd7ed430ea1424a1f319b378a4ff9e4bc794df69600c0e5cc268c411b8d1d5169a8a2bb6d4eb63d1e0939e8fe8b9457b6200cfd0952def5592b7dfdf26198dd802a0355fe7841b92877a2c7ae56c28eae8dd27dcfc2886088dc4fa0775403a2689a41e12a97b605f3564b31e233bb40c55b31970a8d9bf566efe20c44e92f1603b895bdfb434193132884fca8f09e9e75d207d12c78e5ed70ea99a62dbbd9701cb702970c3a0851a5fa0e883026f619657980fec431c3cb97a500e5a459eac93b8611145ad2d0f61871eae710fdecbb12d1a7d16de36a487167c25f7c076e184606f0c9053e41f60a9372f3b27db69b1d66c7aa460f24c60fcf7ca1fc6f0c5bde81ccdd22d00ba9e13a7366dba2692d021f28c7120f8f9de389df1975fc912e3f72ada5256dc5025649c3af89ade290ca1f3562f1700091fd842a4b643518999ac3ee28fb0bada53e51719b90fed6f17b3119ece6581f2c82adddde6d2f4d2dc62ee9ada3055f72a121f60b7e76a48a1b4f5c012eb468846eded32c9068e5418bfd9c392d5fd7a847e3e13d510aa8cae33d4b918a936ec634790888cec831d203d3970f0c11c36481834651b949409655474e5b04130c6b3e9882dd67d9bf68c0b5f734c492b2d3392701f4d13bb7ec3703e9af8d746353940aa9dcd9713530944dacfcede0fbbaadacc0e9e6b92a5da0148a2aad0b52011c3b66718971c2e00cd642b130afedc30ed39709af31329cbbbd8c75ccf7cef4435e6a59af81b2d4f9c736a3a315eac493264ee4e41ff22e325a196c090580395329892525fcc042236545b6828ad29cddd8ae44f7aebe0a96da9e6562614fe460e267230f45db44d95884289e28a22e5e1dd5582e6703f9a704257fbe73fb2ba93d731", 0x1000}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000007680)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/65, 0x41}], 0x1, &(0x7f0000001a00)=""/14, 0xe}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) sendto$inet6(r7, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f00000000c0), 0x0) sendfile(r3, r3, &(0x7f0000000540), 0x8) eventfd(0x5) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) [ 652.867943] IPVS: ftp: loaded support on port[0] = 21 [ 652.912317] attempt to access beyond end of device [ 653.004814] loop0: rw=4096, want=136, limit=4 [ 653.031568] gfs2: error 10 reading superblock 20:08:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 20:08:13 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121041, 0x0) clock_settime(0x0, &(0x7f00000002c0)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) getxattr(0x0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000640)={0x200, 0x0, 0x9, 0x1, 0x4, 0x400}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x4, 0x80, 0xffffffffffffffe0, 0x0, 0x6997, 0x0, 0x0, 0x3, 0x8, 0x8, 0x1f, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0xee, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x200, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x0, 0x7}, 0x1, 0x5, 0xfffffffffffffffb, 0x6, 0x0, 0x9, 0x7f}, 0x0, 0x7, r1, 0x8) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) mount(&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000180)) connect$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/73, 0x49, 0x2060, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000001c0)=0x101) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x47b}], 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x5, 0x6, 0x6}, 'syz0\x00', 0x17}) 20:08:13 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x100) ioctl$TCSBRK(r1, 0x5409, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) r2 = getpgid(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000900)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9917, 0xfffd}, 0xfffffffffffffffc) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x80240) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000640)=0x1) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x28, &(0x7f0000000100)}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000840)={'nat\x00'}, &(0x7f00000008c0)=0x78) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x3) mlockall(0xfc) unshare(0x40000000) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000ac0)=""/190) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x0, 0x6, 0x10000, 0x1, 0x1, 0x101}) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') ioctl$KVM_SET_XSAVE(r0, 0x800455d1, 0x0) r3 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 20:08:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) 20:08:13 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002000)=ANY=[@ANYBLOB="ffffffff00000001ffffff00ffffffff0180c200000000000000000000000000000000000000000000ffff00ffff00000000000000000000000000000000000000000000000000000000000000000000ffff00ffff00000000000000000000000007e41f0862007fffff000276657468310000000000000000000000766c616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000b0100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007fffe00000020f00000000000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000ffff00ff000000000000000000000000000000000000000000000000000000000000000000000000ff00ff00ff00000000000000000000fff8000100010000000400016272696467655f736c6176655f31000076657468305f746f5f626f6e6400000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000000000000000e0000002ffffffff0f0000000000000000002d0300000000ffffffff00000000aaaaaaaaaa00000000000000000000000000000000000000ff0000ffff0000000000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000ffffff000000000000000000000000060000054f58420002003f79616d300000000000000000000000007663616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000010000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001090000000300000000000080030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028000000"], 0x1) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121041, 0x0) clock_settime(0x0, &(0x7f00000002c0)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) getxattr(0x0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000640)={0x200, 0x0, 0x9, 0x1, 0x4, 0x400}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x4, 0x80, 0xffffffffffffffe0, 0x0, 0x6997, 0x0, 0x0, 0x3, 0x8, 0x8, 0x1f, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0xee, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x200, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x0, 0x7}, 0x1, 0x5, 0xfffffffffffffffb, 0x6, 0x0, 0x9, 0x7f}, 0x0, 0x7, r1, 0x8) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) mount(&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000180)) connect$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/73, 0x49, 0x2060, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000001c0)=0x101) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x47b}], 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x5, 0x6, 0x6}, 'syz0\x00', 0x17}) 20:08:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 654.071050] attempt to access beyond end of device [ 654.112576] loop0: rw=4096, want=136, limit=4 20:08:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 20:08:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 654.163317] gfs2: error 10 reading superblock 20:08:14 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121041, 0x0) clock_settime(0x0, &(0x7f00000002c0)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) getxattr(0x0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000640)={0x200, 0x0, 0x9, 0x1, 0x4, 0x400}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x4, 0x80, 0xffffffffffffffe0, 0x0, 0x6997, 0x0, 0x0, 0x3, 0x8, 0x8, 0x1f, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0xee, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x200, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x0, 0x7}, 0x1, 0x5, 0xfffffffffffffffb, 0x6, 0x0, 0x9, 0x7f}, 0x0, 0x7, r1, 0x8) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) mount(&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000180)) connect$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/73, 0x49, 0x2060, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000001c0)=0x101) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x47b}], 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x5, 0x6, 0x6}, 'syz0\x00', 0x17}) [ 654.228231] protocol 88fb is buggy, dev hsr_slave_0 [ 654.233358] protocol 88fb is buggy, dev hsr_slave_1 [ 654.246738] IPVS: ftp: loaded support on port[0] = 21 20:08:14 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121041, 0x0) clock_settime(0x0, &(0x7f00000002c0)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) getxattr(0x0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000640)={0x200, 0x0, 0x9, 0x1, 0x4, 0x400}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x4, 0x80, 0xffffffffffffffe0, 0x0, 0x6997, 0x0, 0x0, 0x3, 0x8, 0x8, 0x1f, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0xee, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x200, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x0, 0x7}, 0x1, 0x5, 0xfffffffffffffffb, 0x6, 0x0, 0x9, 0x7f}, 0x0, 0x7, r1, 0x8) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) mount(&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000180)) connect$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/73, 0x49, 0x2060, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000001c0)=0x101) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x47b}], 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x5, 0x6, 0x6}, 'syz0\x00', 0x17}) [ 654.470189] protocol 88fb is buggy, dev hsr_slave_0 [ 654.475283] protocol 88fb is buggy, dev hsr_slave_1 20:08:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 20:08:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) 20:08:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 654.853884] attempt to access beyond end of device [ 654.878416] loop5: rw=4096, want=136, limit=4 [ 654.905112] gfs2: error 10 reading superblock [ 655.047177] attempt to access beyond end of device [ 655.052196] loop0: rw=4096, want=136, limit=4 [ 655.076026] gfs2: error 10 reading superblock 20:08:15 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121041, 0x0) clock_settime(0x0, &(0x7f00000002c0)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) getxattr(0x0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000640)={0x200, 0x0, 0x9, 0x1, 0x4, 0x400}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x4, 0x80, 0xffffffffffffffe0, 0x0, 0x6997, 0x0, 0x0, 0x3, 0x8, 0x8, 0x1f, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0xee, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x200, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x0, 0x7}, 0x1, 0x5, 0xfffffffffffffffb, 0x6, 0x0, 0x9, 0x7f}, 0x0, 0x7, r1, 0x8) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) mount(&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000180)) connect$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/73, 0x49, 0x2060, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000001c0)=0x101) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x47b}], 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x5, 0x6, 0x6}, 'syz0\x00', 0x17}) [ 655.641797] attempt to access beyond end of device [ 655.713260] loop5: rw=4096, want=136, limit=4 [ 655.736194] gfs2: error 10 reading superblock [ 655.842069] protocol 88fb is buggy, dev hsr_slave_0 [ 655.847529] protocol 88fb is buggy, dev hsr_slave_1 20:08:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = open(&(0x7f00000001c0)='./file0\x00', 0x141442, 0x0) fstat(r1, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f00005d6000)) 20:08:17 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002000)=ANY=[@ANYBLOB="ffffffff00000001ffffff00ffffffff0180c200000000000000000000000000000000000000000000ffff00ffff00000000000000000000000000000000000000000000000000000000000000000000ffff00ffff00000000000000000000000007e41f0862007fffff000276657468310000000000000000000000766c616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000b0100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007fffe00000020f00000000000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000ffff00ff000000000000000000000000000000000000000000000000000000000000000000000000ff00ff00ff00000000000000000000fff8000100010000000400016272696467655f736c6176655f31000076657468305f746f5f626f6e6400000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000000000000000e0000002ffffffff0f0000000000000000002d0300000000ffffffff00000000aaaaaaaaaa00000000000000000000000000000000000000ff0000ffff0000000000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000ffffff000000000000000000000000060000054f58420002003f79616d300000000000000000000000007663616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000010000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001090000000300000000000080030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028000000"], 0x1) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121041, 0x0) clock_settime(0x0, &(0x7f00000002c0)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r5) getxattr(0x0, &(0x7f0000000340)=@known='security.capability\x00', &(0x7f0000000380)=""/88, 0x58) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000640)={0x200, 0x0, 0x9, 0x1, 0x4, 0x400}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x2, 0x4, 0x80, 0xffffffffffffffe0, 0x0, 0x6997, 0x0, 0x0, 0x3, 0x8, 0x8, 0x1f, 0xfffffffffffffcd1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, 0x0, 0x6, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0xee, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x200, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x0, 0x7}, 0x1, 0x5, 0xfffffffffffffffb, 0x6, 0x0, 0x9, 0x7f}, 0x0, 0x7, r1, 0x8) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) mount(&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000180)) connect$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f00000004c0)='./file0\x00', 0x3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) recvfrom$unix(r6, &(0x7f0000000200)=""/73, 0x49, 0x2060, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000001c0)=0x101) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x47b}], 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x5, 0x6, 0x6}, 'syz0\x00', 0x17}) 20:08:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 20:08:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) 20:08:17 executing program 1: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x10103, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@my=0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000002c0)={{0xa, 0x7, 0x1, 0xffffffff, '\x00', 0x8}, 0x6, 0x38, 0x5, r3, 0xa, 0x8, 'syz1\x00', &(0x7f0000000240)=['vmnet0posix_acl_access[vmnet1\x00', 'vboxnet1+\x00', 'R\trust\xe3cusgrVex:De', 'eth1!+\x00', 'tls\x00', '/dev/sequencer\x00', '\x00', ',procem1ppp1[\x00', '(!vmnet0\x00', 'user-@\x00'], 0x73, [], [0x4, 0xfb9, 0x9, 0x40]}) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$dmmidi(0x0, 0x0, 0x200) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000480)='tls\x00', 0xaf72) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xc005002000003fd6, 0x0, 0x0, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="84", 0x1}], 0x1) tkill(r5, 0x14) 20:08:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) [ 657.288028] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:08:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000880)={@ipx={0x4, 0x601, 0xdd5, "7fcf70907302", 0x1}, {0x0}, &(0x7f0000000180), 0x10}, 0xa0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000640)={'exec ', 'wlan1eth1-posix_acl_access\\\x00'}, 0x21) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008b", 0x12}], 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000680)) [ 657.565544] attempt to access beyond end of device [ 657.571335] loop0: rw=4096, want=136, limit=4 [ 657.577862] gfs2: error 10 reading superblock 20:08:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 657.760076] rdma_op 00000000b63d1aa8 conn xmit_rdma (null) 20:08:17 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) r1 = inotify_init() mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 657.940247] protocol 88fb is buggy, dev hsr_slave_0 [ 657.945386] protocol 88fb is buggy, dev hsr_slave_1 [ 658.019732] protocol 88fb is buggy, dev hsr_slave_0 20:08:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340)='F', 0x1, 0xfffffffffffffffd) socket(0xf, 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) keyctl$read(0x4, r0, &(0x7f0000005340)=""/4096, 0x1000) 20:08:18 executing program 1: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x10103, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@my=0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000002c0)={{0xa, 0x7, 0x1, 0xffffffff, '\x00', 0x8}, 0x6, 0x38, 0x5, r3, 0xa, 0x8, 'syz1\x00', &(0x7f0000000240)=['vmnet0posix_acl_access[vmnet1\x00', 'vboxnet1+\x00', 'R\trust\xe3cusgrVex:De', 'eth1!+\x00', 'tls\x00', '/dev/sequencer\x00', '\x00', ',procem1ppp1[\x00', '(!vmnet0\x00', 'user-@\x00'], 0x73, [], [0x4, 0xfb9, 0x9, 0x40]}) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$dmmidi(0x0, 0x0, 0x200) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000480)='tls\x00', 0xaf72) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xc005002000003fd6, 0x0, 0x0, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="84", 0x1}], 0x1) tkill(r5, 0x14) 20:08:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) 20:08:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) 20:08:18 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000880)={@ipx={0x4, 0x601, 0xdd5, "7fcf70907302", 0x1}, {0x0}, &(0x7f0000000180), 0x10}, 0xa0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000640)={'exec ', 'wlan1eth1-posix_acl_access\\\x00'}, 0x21) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008b", 0x12}], 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000680)) 20:08:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340)='F', 0x1, 0xfffffffffffffffd) socket(0xf, 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) keyctl$read(0x4, r0, &(0x7f0000005340)=""/4096, 0x1000) 20:08:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f5036c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/255, 0xff}], 0x5) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 658.693328] rdma_op 00000000697e1784 conn xmit_rdma (null) 20:08:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340)='F', 0x1, 0xfffffffffffffffd) socket(0xf, 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) keyctl$read(0x4, r0, &(0x7f0000005340)=""/4096, 0x1000) 20:08:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000880)={@ipx={0x4, 0x601, 0xdd5, "7fcf70907302", 0x1}, {0x0}, &(0x7f0000000180), 0x10}, 0xa0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000640)={'exec ', 'wlan1eth1-posix_acl_access\\\x00'}, 0x21) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008b", 0x12}], 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000680)) 20:08:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340)='F', 0x1, 0xfffffffffffffffd) socket(0xf, 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) keyctl$read(0x4, r0, &(0x7f0000005340)=""/4096, 0x1000) [ 659.146344] rdma_op 00000000c6589ae0 conn xmit_rdma (null) 20:08:19 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000880)={@ipx={0x4, 0x601, 0xdd5, "7fcf70907302", 0x1}, {0x0}, &(0x7f0000000180), 0x10}, 0xa0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000640)={'exec ', 'wlan1eth1-posix_acl_access\\\x00'}, 0x21) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008b", 0x12}], 0x1}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000680)) 20:08:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) 20:08:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000004dc0)) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, &(0x7f0000005300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{&(0x7f00000053c0)=@hci, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/119, 0x77}, {&(0x7f00000054c0)=""/149, 0x95}, {0x0}], 0x3, &(0x7f0000005600)=""/157, 0x9d}, 0x6a8d}, {{0x0, 0x0, &(0x7f0000005700), 0x0, &(0x7f0000005740)=""/8, 0x8}, 0xd860}, {{&(0x7f0000005780)=@nl=@unspec, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005800)=""/126, 0x7e}], 0x1, &(0x7f0000005b40)=""/197, 0xc5}, 0xfffffffffffffeff}, {{&(0x7f0000005c40)=@alg, 0x80, &(0x7f0000006140)=[{0x0}, {&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005f40)=""/187, 0xbb}, {&(0x7f0000006000)=""/222, 0xde}, {&(0x7f0000006100)=""/40, 0x28}], 0x5, &(0x7f00000061c0)=""/122, 0x7a}, 0x1}], 0x4, 0x3, &(0x7f0000006380)={r4, r5+10000000}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006580)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88\xae|\b\xca\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v\x0e\xc2F\x82\x9b\xe2U\x0fb=\xbe$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0xb3fc, 0xb706}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000100)={0x9, 0x6ff3e968}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r7 = socket(0x11, 0x803, 0x300) r8 = socket$inet(0x2, 0x80003, 0x2000000080) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r7, &(0x7f0000002e00), 0x386, 0x0, 0x0) [ 659.434928] rdma_op 000000004ced133a conn xmit_rdma (null) [ 660.036404] net_ratelimit: 8 callbacks suppressed [ 660.036413] protocol 88fb is buggy, dev hsr_slave_0 [ 660.046507] protocol 88fb is buggy, dev hsr_slave_1 [ 660.117086] protocol 88fb is buggy, dev hsr_slave_0 [ 660.122212] protocol 88fb is buggy, dev hsr_slave_1 20:08:21 executing program 1: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x10103, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@my=0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000002c0)={{0xa, 0x7, 0x1, 0xffffffff, '\x00', 0x8}, 0x6, 0x38, 0x5, r3, 0xa, 0x8, 'syz1\x00', &(0x7f0000000240)=['vmnet0posix_acl_access[vmnet1\x00', 'vboxnet1+\x00', 'R\trust\xe3cusgrVex:De', 'eth1!+\x00', 'tls\x00', '/dev/sequencer\x00', '\x00', ',procem1ppp1[\x00', '(!vmnet0\x00', 'user-@\x00'], 0x73, [], [0x4, 0xfb9, 0x9, 0x40]}) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$dmmidi(0x0, 0x0, 0x200) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000480)='tls\x00', 0xaf72) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xc005002000003fd6, 0x0, 0x0, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="84", 0x1}], 0x1) tkill(r5, 0x14) 20:08:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340)='F', 0x1, 0xfffffffffffffffd) socket(0xf, 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) keyctl$read(0x4, r0, &(0x7f0000005340)=""/4096, 0x1000) 20:08:21 executing program 0: clone(0x1000202102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x8eb, 0x0, 0x0, 0x0, [0x2]}, 0x2c) 20:08:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x1c5d3a31ba8c0dff, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 20:08:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x2}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffff36}}}, 0xb8}}, 0x0) 20:08:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) socket(0x200000000000011, 0x8000a, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x200001a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x9}]) 20:08:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x998, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000000), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'irlan0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', 'vcan0\x00', @broadcast, [], @link_local, [], 0x8b8, 0x8b8, 0x908, [@among={'among\x00', 0x820, {{0x0, 0x200000}}}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0xa10) 20:08:21 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x20000, 0x210) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x180000000) 20:08:21 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x3) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0'], 0xa) close(r2) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0xfffffffffffffffd) getpeername$netlink(r0, &(0x7f0000000140), 0x0) socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(0x0, 0x40, 0x1) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) setns(0xffffffffffffffff, 0x0) getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000003c0)) r3 = gettid() getpgrp(r3) getegid() fcntl$getownex(r1, 0x10, &(0x7f0000000e00)) sendmsg$netlink(r2, &(0x7f0000000f80)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000cc0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="100007003f0004002abd7000fcdbdf2516571d9043f8fed5112b5ea8d411934f0457f8933078e82b4f89f4642738ce799ca372d3e1ddf3fa7204bc42b98cf7e3f985a6e4ea9fe97410cebfaf9e7a9c7422c97b026a0000000009000000"], 0x1}], 0x1, 0x0, 0x0, 0x4008045}, 0x8000) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') preadv(r4, &(0x7f00000017c0), 0x199, 0xf0ff7f) 20:08:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340)='F', 0x1, 0xfffffffffffffffd) socket(0xf, 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) keyctl$read(0x4, r0, &(0x7f0000005340)=""/4096, 0x1000) 20:08:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000001c0)=""/101) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/96) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) [ 661.420293] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:08:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x111, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]}, 0x189) 20:08:24 executing program 1: timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x10103, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000180)={@my=0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000002c0)={{0xa, 0x7, 0x1, 0xffffffff, '\x00', 0x8}, 0x6, 0x38, 0x5, r3, 0xa, 0x8, 'syz1\x00', &(0x7f0000000240)=['vmnet0posix_acl_access[vmnet1\x00', 'vboxnet1+\x00', 'R\trust\xe3cusgrVex:De', 'eth1!+\x00', 'tls\x00', '/dev/sequencer\x00', '\x00', ',procem1ppp1[\x00', '(!vmnet0\x00', 'user-@\x00'], 0x73, [], [0x4, 0xfb9, 0x9, 0x40]}) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$dmmidi(0x0, 0x0, 0x200) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000480)='tls\x00', 0xaf72) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xc005002000003fd6, 0x0, 0x0, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="84", 0x1}], 0x1) tkill(r5, 0x14) 20:08:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@del={0x118, 0x11, 0x8, 0x70bd2d, 0x25dfdbfe, {{'sha256-generic\x00'}}, [{0x8, 0x1, 0x10001}, {0x8}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3f}]}, 0x118}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) fcntl$setsig(r0, 0xa, 0x2) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="010000000000"], 0x6}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000440)) r3 = semget$private(0x0, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) semtimedop(r3, &(0x7f0000001940)=[{0x2, 0x9, 0x1800}, {0x7, 0xeb6, 0x1000}, {0x2, 0x10000, 0x1800}], 0x3, &(0x7f00000019c0)={r4, r5+10000000}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x9}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000000c0), 0x5b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x44000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={[], 0x1, 0x0, 0x3f, 0x0, 0x3, r7}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x40000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000017c0)={&(0x7f0000000680), 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x40, r9, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) 20:08:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340)='F', 0x1, 0xfffffffffffffffd) socket(0xf, 0x0, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) keyctl$read(0x4, r0, &(0x7f0000005340)=""/4096, 0x1000) 20:08:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000700)={0x2, 0x4e22, @empty}, 0x10) 20:08:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000001c0)=""/101) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/96) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 20:08:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f6fd3"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 664.476006] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:08:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffefe, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) sendto$inet(r0, &(0x7f0000000380)="8d", 0x1, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x1) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x58d) close(r1) [ 664.559038] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:08:24 executing program 3: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:08:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000001c0)=""/101) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/96) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 20:08:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@del={0x118, 0x11, 0x8, 0x70bd2d, 0x25dfdbfe, {{'sha256-generic\x00'}}, [{0x8, 0x1, 0x10001}, {0x8}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3f}]}, 0x118}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) fcntl$setsig(r0, 0xa, 0x2) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="010000000000"], 0x6}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000440)) r3 = semget$private(0x0, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) semtimedop(r3, &(0x7f0000001940)=[{0x2, 0x9, 0x1800}, {0x7, 0xeb6, 0x1000}, {0x2, 0x10000, 0x1800}], 0x3, &(0x7f00000019c0)={r4, r5+10000000}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x9}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000000c0), 0x5b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x44000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={[], 0x1, 0x0, 0x3f, 0x0, 0x3, r7}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x40000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000017c0)={&(0x7f0000000680), 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x40, r9, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) 20:08:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@del={0x118, 0x11, 0x8, 0x70bd2d, 0x25dfdbfe, {{'sha256-generic\x00'}}, [{0x8, 0x1, 0x10001}, {0x8}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3f}]}, 0x118}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) fcntl$setsig(r0, 0xa, 0x2) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="010000000000"], 0x6}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000440)) r3 = semget$private(0x0, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) semtimedop(r3, &(0x7f0000001940)=[{0x2, 0x9, 0x1800}, {0x7, 0xeb6, 0x1000}, {0x2, 0x10000, 0x1800}], 0x3, &(0x7f00000019c0)={r4, r5+10000000}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x9}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000000c0), 0x5b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x44000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={[], 0x1, 0x0, 0x3f, 0x0, 0x3, r7}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x40000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000017c0)={&(0x7f0000000680), 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x40, r9, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) 20:08:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@del={0x118, 0x11, 0x8, 0x70bd2d, 0x25dfdbfe, {{'sha256-generic\x00'}}, [{0x8, 0x1, 0x10001}, {0x8}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3f}]}, 0x118}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) fcntl$setsig(r0, 0xa, 0x2) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="010000000000"], 0x6}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000440)) r3 = semget$private(0x0, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) semtimedop(r3, &(0x7f0000001940)=[{0x2, 0x9, 0x1800}, {0x7, 0xeb6, 0x1000}, {0x2, 0x10000, 0x1800}], 0x3, &(0x7f00000019c0)={r4, r5+10000000}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x9}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000000c0), 0x5b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x44000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={[], 0x1, 0x0, 0x3f, 0x0, 0x3, r7}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x40000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000017c0)={&(0x7f0000000680), 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x40, r9, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) [ 665.061131] *** Guest State *** [ 665.073679] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 665.103344] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 665.123664] CR3 = 0x0000000000000000 [ 665.128294] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 665.145400] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 665.156100] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 665.167607] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 665.220012] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 665.229035] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 665.270788] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 665.308073] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 20:08:25 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x200000004122, 0x0) 20:08:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@del={0x118, 0x11, 0x8, 0x70bd2d, 0x25dfdbfe, {{'sha256-generic\x00'}}, [{0x8, 0x1, 0x10001}, {0x8}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3f}]}, 0x118}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) fcntl$setsig(r0, 0xa, 0x2) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="010000000000"], 0x6}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000440)) r3 = semget$private(0x0, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) semtimedop(r3, &(0x7f0000001940)=[{0x2, 0x9, 0x1800}, {0x7, 0xeb6, 0x1000}, {0x2, 0x10000, 0x1800}], 0x3, &(0x7f00000019c0)={r4, r5+10000000}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x9}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000000c0), 0x5b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x44000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={[], 0x1, 0x0, 0x3f, 0x0, 0x3, r7}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x40000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000017c0)={&(0x7f0000000680), 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x40, r9, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) 20:08:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@del={0x118, 0x11, 0x8, 0x70bd2d, 0x25dfdbfe, {{'sha256-generic\x00'}}, [{0x8, 0x1, 0x10001}, {0x8}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3f}]}, 0x118}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) fcntl$setsig(r0, 0xa, 0x2) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="010000000000"], 0x6}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000440)) r3 = semget$private(0x0, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) semtimedop(r3, &(0x7f0000001940)=[{0x2, 0x9, 0x1800}, {0x7, 0xeb6, 0x1000}, {0x2, 0x10000, 0x1800}], 0x3, &(0x7f00000019c0)={r4, r5+10000000}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x9}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000000c0), 0x5b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x44000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={[], 0x1, 0x0, 0x3f, 0x0, 0x3, r7}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x40000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000017c0)={&(0x7f0000000680), 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x40, r9, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) [ 665.342412] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 665.382059] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 665.413428] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 665.439595] IDTR: limit=0x0000ffff, base=0x0000000000000000 20:08:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0xdd8}, 0xe) [ 665.458860] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 665.473597] EFER = 0x0000000000000000 PAT = 0x0007040600070406 20:08:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_sa2={0x2, 0x13, 0x8}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) [ 665.507973] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 665.558629] Interruptibility = 00000000 ActivityState = 00000000 [ 665.598889] *** Host State *** 20:08:25 executing program 3: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 665.613830] RIP = 0xffffffff811b3710 RSP = 0xffff8880513cf8b8 20:08:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@del={0x118, 0x11, 0x8, 0x70bd2d, 0x25dfdbfe, {{'sha256-generic\x00'}}, [{0x8, 0x1, 0x10001}, {0x8}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x3f}]}, 0x118}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0xffffffffffffffff, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) fcntl$setsig(r0, 0xa, 0x2) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="010000000000"], 0x6}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000440)) r3 = semget$private(0x0, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) semtimedop(r3, &(0x7f0000001940)=[{0x2, 0x9, 0x1800}, {0x7, 0xeb6, 0x1000}, {0x2, 0x10000, 0x1800}], 0x3, &(0x7f00000019c0)={r4, r5+10000000}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x9}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000000c0), 0x5b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x44000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000005c0)={[], 0x1, 0x0, 0x3f, 0x0, 0x3, r7}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x40000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/null\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000017c0)={&(0x7f0000000680), 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x40, r9, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) 20:08:25 executing program 1: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 665.680619] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 665.711029] FSBase=00007f90dfd88700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 665.735387] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 665.746584] CR0=0000000080050033 CR3=00000000900c3000 CR4=00000000001426f0 [ 665.769989] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 665.793272] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 665.815584] *** Control State *** [ 665.827959] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 665.851957] EntryControls=0000d1ff ExitControls=002fefff [ 665.860352] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 665.869057] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 665.901506] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 665.927439] reason=80000021 qualification=0000000000000000 [ 665.960111] IDTVectoring: info=00000000 errcode=00000000 [ 665.979344] TSC Offset = 0xfffffe96087c529e [ 665.998783] EPT pointer = 0x00000000574ad01e 20:08:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000001c0)=""/101) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl(r3, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000240)=""/96) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 20:08:26 executing program 0: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:08:26 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000280)={0x7a, 0x0, 0x5, 0xb, 0x0, 0x20000}) 20:08:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() r1 = syz_open_procfs(0x0, 0x0) fstat(r1, 0x0) stat(0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00\x00\x00\x02', {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) pkey_alloc(0x0, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) msgget$private(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 20:08:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000001e0007101dfffd946f6105000a0000001f00000000000800080008000d000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 20:08:26 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x0, 0x0, 0xc}) [ 666.491721] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:08:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x4, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0x10}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 20:08:26 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) getgroups(0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(r0, 0x0, 0x0) 20:08:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000900)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x100, 0x3ff, 0x40, 0x4000020000, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800030025000000480001014e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x2, 0x400000, 0xffd4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="524d508bdfe2d0113d35fab25162fc581bf555250b1f2077eab1ae8d50faa6040b8b376a65970ddb19cbd99e254682073d27e534438e06e7ed5a54c0d773ee0c19192a1e3662d6459477c422bc9bf3e4e85f39c0f9c177c791e8891e39270a134d1fc4cb789b3168779c76529b1b9ab8bf1585440e6cfd12e89f39c439650afa4d3a456e143b260bdaf82256f2a57ef0f813c61e96a831b17129bac94ab715ff11adf2938c442eb9d7e5dc8cb24227acfc350043b161467bb6f9125e3e4a58ff031055a2000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) r9 = dup2(r8, r4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r9, 0x28, 0x6, &(0x7f0000000240)={0x0, 0x7530}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0xc83, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000740)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) 20:08:26 executing program 3: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:08:27 executing program 1: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:08:27 executing program 0: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:08:27 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 667.328179] bond0: Releasing backup interface bond_slave_1 [ 667.489985] overlayfs: upper fs does not support tmpfile. [ 667.561988] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. 20:08:27 executing program 5: r0 = socket(0x11, 0x80003, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) setresuid(0x0, 0x0, 0x0) 20:08:27 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 20:08:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000900)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x100, 0x3ff, 0x40, 0x4000020000, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800030025000000480001014e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x2, 0x400000, 0xffd4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="524d508bdfe2d0113d35fab25162fc581bf555250b1f2077eab1ae8d50faa6040b8b376a65970ddb19cbd99e254682073d27e534438e06e7ed5a54c0d773ee0c19192a1e3662d6459477c422bc9bf3e4e85f39c0f9c177c791e8891e39270a134d1fc4cb789b3168779c76529b1b9ab8bf1585440e6cfd12e89f39c439650afa4d3a456e143b260bdaf82256f2a57ef0f813c61e96a831b17129bac94ab715ff11adf2938c442eb9d7e5dc8cb24227acfc350043b161467bb6f9125e3e4a58ff031055a2000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) r9 = dup2(r8, r4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r9, 0x28, 0x6, &(0x7f0000000240)={0x0, 0x7530}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0xc83, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000740)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) 20:08:28 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000900)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x100, 0x3ff, 0x40, 0x4000020000, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800030025000000480001014e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x2, 0x400000, 0xffd4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="524d508bdfe2d0113d35fab25162fc581bf555250b1f2077eab1ae8d50faa6040b8b376a65970ddb19cbd99e254682073d27e534438e06e7ed5a54c0d773ee0c19192a1e3662d6459477c422bc9bf3e4e85f39c0f9c177c791e8891e39270a134d1fc4cb789b3168779c76529b1b9ab8bf1585440e6cfd12e89f39c439650afa4d3a456e143b260bdaf82256f2a57ef0f813c61e96a831b17129bac94ab715ff11adf2938c442eb9d7e5dc8cb24227acfc350043b161467bb6f9125e3e4a58ff031055a2000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) r9 = dup2(r8, r4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r9, 0x28, 0x6, &(0x7f0000000240)={0x0, 0x7530}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0xc83, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000740)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) [ 667.992231] overlayfs: upper fs does not support tmpfile. [ 668.023091] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. 20:08:28 executing program 3: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:08:28 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 20:08:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000900)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x100, 0x3ff, 0x40, 0x4000020000, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800030025000000480001014e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x2, 0x400000, 0xffd4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="524d508bdfe2d0113d35fab25162fc581bf555250b1f2077eab1ae8d50faa6040b8b376a65970ddb19cbd99e254682073d27e534438e06e7ed5a54c0d773ee0c19192a1e3662d6459477c422bc9bf3e4e85f39c0f9c177c791e8891e39270a134d1fc4cb789b3168779c76529b1b9ab8bf1585440e6cfd12e89f39c439650afa4d3a456e143b260bdaf82256f2a57ef0f813c61e96a831b17129bac94ab715ff11adf2938c442eb9d7e5dc8cb24227acfc350043b161467bb6f9125e3e4a58ff031055a2000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) r9 = dup2(r8, r4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r9, 0x28, 0x6, &(0x7f0000000240)={0x0, 0x7530}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0xc83, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000740)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) 20:08:28 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000900)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x100, 0x3ff, 0x40, 0x4000020000, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800030025000000480001014e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x2, 0x400000, 0xffd4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="524d508bdfe2d0113d35fab25162fc581bf555250b1f2077eab1ae8d50faa6040b8b376a65970ddb19cbd99e254682073d27e534438e06e7ed5a54c0d773ee0c19192a1e3662d6459477c422bc9bf3e4e85f39c0f9c177c791e8891e39270a134d1fc4cb789b3168779c76529b1b9ab8bf1585440e6cfd12e89f39c439650afa4d3a456e143b260bdaf82256f2a57ef0f813c61e96a831b17129bac94ab715ff11adf2938c442eb9d7e5dc8cb24227acfc350043b161467bb6f9125e3e4a58ff031055a2000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) r9 = dup2(r8, r4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r9, 0x28, 0x6, &(0x7f0000000240)={0x0, 0x7530}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0xc83, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000740)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) 20:08:28 executing program 1: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 668.421467] overlayfs: upper fs does not support tmpfile. [ 668.450341] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. 20:08:28 executing program 0: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ic\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x17\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xc6%@\x99'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:08:28 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 20:08:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000900)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x100, 0x3ff, 0x40, 0x4000020000, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800030025000000480001014e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x2, 0x400000, 0xffd4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="524d508bdfe2d0113d35fab25162fc581bf555250b1f2077eab1ae8d50faa6040b8b376a65970ddb19cbd99e254682073d27e534438e06e7ed5a54c0d773ee0c19192a1e3662d6459477c422bc9bf3e4e85f39c0f9c177c791e8891e39270a134d1fc4cb789b3168779c76529b1b9ab8bf1585440e6cfd12e89f39c439650afa4d3a456e143b260bdaf82256f2a57ef0f813c61e96a831b17129bac94ab715ff11adf2938c442eb9d7e5dc8cb24227acfc350043b161467bb6f9125e3e4a58ff031055a2000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) r9 = dup2(r8, r4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r9, 0x28, 0x6, &(0x7f0000000240)={0x0, 0x7530}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0xc83, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000740)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) [ 668.803573] overlayfs: upper fs does not support tmpfile. [ 668.824895] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. 20:08:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6, 0x7fffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000900)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x100, 0x3ff, 0x40, 0x4000020000, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000640)={&(0x7f00000006c0), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000800030025000000480001014e230000"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x2, 0x400000, 0xffd4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="524d508bdfe2d0113d35fab25162fc581bf555250b1f2077eab1ae8d50faa6040b8b376a65970ddb19cbd99e254682073d27e534438e06e7ed5a54c0d773ee0c19192a1e3662d6459477c422bc9bf3e4e85f39c0f9c177c791e8891e39270a134d1fc4cb789b3168779c76529b1b9ab8bf1585440e6cfd12e89f39c439650afa4d3a456e143b260bdaf82256f2a57ef0f813c61e96a831b17129bac94ab715ff11adf2938c442eb9d7e5dc8cb24227acfc350043b161467bb6f9125e3e4a58ff031055a2000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) r9 = dup2(r8, r4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r9, 0x28, 0x6, &(0x7f0000000240)={0x0, 0x7530}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0xc83, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000740)='/dev/midi#\x00', 0x0, 0x40100) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) 20:08:29 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) 20:08:29 executing program 2: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9}, {0x6}]}) 20:08:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setgroups(0x400000000000033d, &(0x7f0000000100)=[0x0]) socket$inet(0x2, 0x2, 0x1) 20:08:29 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000005c0)=0x1fc, 0x4) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207", 0x2c, 0x0, 0x0, 0x0) 20:08:29 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) getgroups(0x2, &(0x7f0000000440)=[0xffffffffffffffff, 0xee00]) setresgid(0x0, r1, 0x0) close(r0) clone(0x902100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 669.643767] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 669.709694] CPU: 0 PID: 26538 Comm: syz-executor.4 Not tainted 5.0.0+ #7 [ 669.716620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.725989] Call Trace: [ 669.728604] dump_stack+0x172/0x1f0 [ 669.732273] dump_header+0x10f/0xb6c [ 669.736014] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 669.741137] ? ___ratelimit+0x60/0x595 [ 669.745044] ? do_raw_spin_unlock+0x57/0x270 [ 669.749491] oom_kill_process.cold+0x10/0x6f5 [ 669.754017] ? out_of_memory+0x5e6/0x1280 [ 669.758189] out_of_memory+0x79a/0x1280 [ 669.762250] ? pci_mmcfg_check_reserved+0x170/0x170 [ 669.767404] ? oom_killer_disable+0x280/0x280 [ 669.771946] mem_cgroup_out_of_memory+0x99/0xe0 [ 669.776791] ? memcg_memory_event+0x40/0x40 [ 669.781257] ? cgroup_file_notify+0x140/0x1b0 [ 669.785781] memory_max_write+0x169/0x300 [ 669.789961] ? mem_cgroup_write+0x360/0x360 [ 669.794319] cgroup_file_write+0x245/0x7a0 [ 669.798591] ? mem_cgroup_write+0x360/0x360 [ 669.802945] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 669.807904] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 669.812943] kernfs_fop_write+0x2ba/0x480 [ 669.817112] ? lockdep_hardirqs_on+0x415/0x5d0 [ 669.821720] __vfs_write+0x116/0x8e0 [ 669.825485] ? kernfs_fop_open+0xd90/0xd90 [ 669.829779] ? kernel_read+0x120/0x120 [ 669.833691] ? __lock_is_held+0xb6/0x140 [ 669.837771] ? check_preemption_disabled+0x48/0x290 [ 669.842823] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 669.848294] ? rcu_read_lock_sched_held+0x110/0x130 [ 669.853336] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 669.858223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.863790] ? __sb_start_write+0x1ac/0x360 [ 669.868137] vfs_write+0x20c/0x580 [ 669.871718] ksys_write+0xea/0x1f0 [ 669.875283] ? __ia32_sys_read+0xb0/0xb0 [ 669.879370] ? do_syscall_64+0x26/0x610 [ 669.883367] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.888750] ? do_syscall_64+0x26/0x610 [ 669.892755] __x64_sys_write+0x73/0xb0 [ 669.896667] do_syscall_64+0x103/0x610 [ 669.900587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.905794] RIP: 0033:0x457f29 [ 669.909006] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 669.927926] RSP: 002b:00007f6488c13c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 669.935659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 669.942946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 669.950252] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 669.957643] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6488c146d4 [ 669.964928] R13: 00000000004c73a5 R14: 00000000004dcf48 R15: 00000000ffffffff 20:08:30 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000000), 0x4) 20:08:30 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/177, 0xb1}], 0x1) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000240)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) [ 670.034409] memory: usage 7816kB, limit 0kB, failcnt 7 [ 670.040707] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 670.048294] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 670.055229] Memory cgroup stats for /syz4: cache:24KB rss:2080KB rss_huge:2048KB shmem:80KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2192KB inactive_file:4KB active_file:4KB unevictable:0KB 20:08:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0xa, {0x9aa}}) [ 670.078704] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26535,uid=0 [ 670.097852] Memory cgroup out of memory: Kill process 26535 (syz-executor.4) score 9275000 or sacrifice child [ 670.116907] Killed process 26535 (syz-executor.4) total-vm:72576kB, anon-rss:2152kB, file-rss:34816kB, shmem-rss:0kB [ 670.144635] oom_reaper: reaped process 26535 (syz-executor.4), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 20:08:30 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000600)='trusted\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='-:/vboxnet1\x00', r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0x5e, 0x1}, &(0x7f00000005c0)=0xc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000340)={0x0, 0x0, 0x0}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x1f, 0x0, 0x4, 0x5, 0x0, 0x8, 0x80000, 0x1, 0x5, 0x0, 0x20, 0x3, 0x800, 0x6, 0x7, 0x0, 0x9, 0x101, 0x3f, 0x7, 0xe9, 0xfffffffffffff801, 0x5fc1, 0x9, 0x5, 0x2, 0x10001, 0xfffffffffffffffa, 0x8000000, 0x7, 0x3, 0x4, 0x1, 0x2c, 0x100, 0xffffffffffff0001, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x1048, 0x1ff, 0x6, 0x4, 0x6, 0x200, 0x401}, r5, 0xf, 0xffffffffffffffff, 0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000300)={0x0, 0x89, 0x3, 0x0, 0x6, 0x0, 0x8, 0x3ff}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000002c0)=0x80000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c8d5}, 0x1) 20:08:30 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000005c0)=0x1fc, 0x4) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207", 0x2c, 0x0, 0x0, 0x0) 20:08:30 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000000000450000000000f5f0"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0x1000000008ffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x149, &(0x7f0000000000)=[{}]}, 0x10) 20:08:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af14, &(0x7f0000000100)) 20:08:30 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) 20:08:30 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000600)='trusted\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='-:/vboxnet1\x00', r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0x5e, 0x1}, &(0x7f00000005c0)=0xc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000340)={0x0, 0x0, 0x0}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x1f, 0x0, 0x4, 0x5, 0x0, 0x8, 0x80000, 0x1, 0x5, 0x0, 0x20, 0x3, 0x800, 0x6, 0x7, 0x0, 0x9, 0x101, 0x3f, 0x7, 0xe9, 0xfffffffffffff801, 0x5fc1, 0x9, 0x5, 0x2, 0x10001, 0xfffffffffffffffa, 0x8000000, 0x7, 0x3, 0x4, 0x1, 0x2c, 0x100, 0xffffffffffff0001, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x1048, 0x1ff, 0x6, 0x4, 0x6, 0x200, 0x401}, r5, 0xf, 0xffffffffffffffff, 0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000300)={0x0, 0x89, 0x3, 0x0, 0x6, 0x0, 0x8, 0x3ff}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000002c0)=0x80000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c8d5}, 0x1) 20:08:30 executing program 5: timer_create(0x3, 0x0, &(0x7f00000000c0)) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) exit(0x0) timer_delete(0x0) [ 670.523487] protocol 88fb is buggy, dev hsr_slave_0 [ 670.528877] protocol 88fb is buggy, dev hsr_slave_1 20:08:30 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000600)='trusted\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='-:/vboxnet1\x00', r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0x5e, 0x1}, &(0x7f00000005c0)=0xc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000340)={0x0, 0x0, 0x0}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x1f, 0x0, 0x4, 0x5, 0x0, 0x8, 0x80000, 0x1, 0x5, 0x0, 0x20, 0x3, 0x800, 0x6, 0x7, 0x0, 0x9, 0x101, 0x3f, 0x7, 0xe9, 0xfffffffffffff801, 0x5fc1, 0x9, 0x5, 0x2, 0x10001, 0xfffffffffffffffa, 0x8000000, 0x7, 0x3, 0x4, 0x1, 0x2c, 0x100, 0xffffffffffff0001, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x1048, 0x1ff, 0x6, 0x4, 0x6, 0x200, 0x401}, r5, 0xf, 0xffffffffffffffff, 0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000300)={0x0, 0x89, 0x3, 0x0, 0x6, 0x0, 0x8, 0x3ff}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000002c0)=0x80000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c8d5}, 0x1) [ 670.604177] protocol 88fb is buggy, dev hsr_slave_0 [ 670.609329] protocol 88fb is buggy, dev hsr_slave_1 20:08:30 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000005c0)=0x1fc, 0x4) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207", 0x2c, 0x0, 0x0, 0x0) [ 670.694426] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 670.734732] CPU: 0 PID: 24933 Comm: syz-executor.4 Not tainted 5.0.0+ #7 20:08:30 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 670.741604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.750967] Call Trace: [ 670.753575] dump_stack+0x172/0x1f0 [ 670.757259] dump_header+0x10f/0xb6c [ 670.760995] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 670.766406] ? ___ratelimit+0x60/0x595 [ 670.770314] ? do_raw_spin_unlock+0x57/0x270 [ 670.774880] oom_kill_process.cold+0x10/0x6f5 [ 670.779386] ? task_will_free_mem+0x139/0x6e0 [ 670.783884] out_of_memory+0x79a/0x1280 [ 670.787873] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 670.793003] ? oom_killer_disable+0x280/0x280 [ 670.797646] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 670.802775] mem_cgroup_out_of_memory+0x99/0xe0 [ 670.807468] ? memcg_memory_event+0x40/0x40 [ 670.811826] ? _raw_spin_unlock+0x2d/0x50 [ 670.815995] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 670.821116] try_charge+0xfec/0x1570 [ 670.824869] ? find_held_lock+0x35/0x130 [ 670.828958] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 670.833822] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 670.838686] ? find_held_lock+0x35/0x130 [ 670.842768] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 670.847653] memcg_kmem_charge_memcg+0x7c/0x130 [ 670.852341] ? memcg_kmem_put_cache+0xb0/0xb0 [ 670.856864] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 670.861729] memcg_kmem_charge+0x13b/0x340 [ 670.866228] __alloc_pages_nodemask+0x437/0x710 [ 670.870927] ? __alloc_pages_slowpath+0x2900/0x2900 [ 670.875968] ? lockdep_hardirqs_on+0x415/0x5d0 [ 670.880635] ? trace_hardirqs_on+0x67/0x230 [ 670.884975] ? kasan_check_read+0x11/0x20 [ 670.889150] copy_process.part.0+0x3e0/0x79a0 [ 670.893671] ? mark_held_locks+0x100/0x100 [ 670.897933] ? _raw_spin_unlock+0x2d/0x50 [ 670.902109] ? __might_fault+0x12b/0x1e0 [ 670.906194] ? __cleanup_sighand+0x70/0x70 [ 670.910473] ? lock_downgrade+0x810/0x810 [ 670.914673] _do_fork+0x257/0xfe0 [ 670.918150] ? fork_idle+0x1d0/0x1d0 [ 670.921909] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.926680] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.931458] ? do_syscall_64+0x26/0x610 [ 670.935456] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.940971] ? do_syscall_64+0x26/0x610 [ 670.944963] __x64_sys_clone+0xbf/0x150 [ 670.948956] do_syscall_64+0x103/0x610 [ 670.952865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.958068] RIP: 0033:0x4564fa [ 670.961280] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 670.980192] RSP: 002b:00007ffc543b1f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 670.987942] RAX: ffffffffffffffda RBX: 00007ffc543b1f40 RCX: 00000000004564fa 20:08:31 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000600)='trusted\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='-:/vboxnet1\x00', r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x4}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r4, 0x5e, 0x1}, &(0x7f00000005c0)=0xc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000340)={0x0, 0x0, 0x0}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x1f, 0x0, 0x4, 0x5, 0x0, 0x8, 0x80000, 0x1, 0x5, 0x0, 0x20, 0x3, 0x800, 0x6, 0x7, 0x0, 0x9, 0x101, 0x3f, 0x7, 0xe9, 0xfffffffffffff801, 0x5fc1, 0x9, 0x5, 0x2, 0x10001, 0xfffffffffffffffa, 0x8000000, 0x7, 0x3, 0x4, 0x1, 0x2c, 0x100, 0xffffffffffff0001, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x1048, 0x1ff, 0x6, 0x4, 0x6, 0x200, 0x401}, r5, 0xf, 0xffffffffffffffff, 0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000300)={0x0, 0x89, 0x3, 0x0, 0x6, 0x0, 0x8, 0x3ff}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000002c0)=0x80000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c8d5}, 0x1) [ 670.995240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 671.002538] RBP: 00007ffc543b1f80 R08: 0000000000000001 R09: 0000000001814940 [ 671.009823] R10: 0000000001814c10 R11: 0000000000000246 R12: 0000000000000001 [ 671.017107] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc543b1fd0 [ 671.040794] memory: usage 5484kB, limit 0kB, failcnt 40 [ 671.059020] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 671.087785] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 671.115846] Memory cgroup stats for /syz4: cache:24KB rss:16KB rss_huge:0KB shmem:80KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:56KB inactive_file:0KB active_file:12KB unevictable:0KB [ 671.165433] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24933,uid=0 20:08:31 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000005c0)=0x1fc, 0x4) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207", 0x2c, 0x0, 0x0, 0x0) [ 671.228755] Memory cgroup out of memory: Kill process 24933 (syz-executor.4) score 8985000 or sacrifice child [ 671.281468] Killed process 24933 (syz-executor.4) total-vm:72312kB, anon-rss:104kB, file-rss:35712kB, shmem-rss:0kB [ 671.316140] oom_reaper: reaped process 24933 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 671.328658] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 671.360643] CPU: 1 PID: 26709 Comm: syz-executor.0 Not tainted 5.0.0+ #7 [ 671.367523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.376889] Call Trace: [ 671.379563] dump_stack+0x172/0x1f0 [ 671.383246] dump_header+0x10f/0xb6c [ 671.387006] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 671.392137] ? ___ratelimit+0x60/0x595 [ 671.396584] ? do_raw_spin_unlock+0x57/0x270 [ 671.401027] oom_kill_process.cold+0x10/0x6f5 [ 671.405545] ? out_of_memory+0x5e6/0x1280 [ 671.409713] ? mem_cgroup_get_max+0x2a/0x240 [ 671.414145] out_of_memory+0x79a/0x1280 [ 671.418145] ? oom_killer_disable+0x280/0x280 [ 671.422673] mem_cgroup_out_of_memory+0x99/0xe0 [ 671.427362] ? memcg_memory_event+0x40/0x40 20:08:31 executing program 5: timer_create(0x3, 0x0, &(0x7f00000000c0)) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) exit(0x0) timer_delete(0x0) [ 671.431712] ? cgroup_file_notify+0x140/0x1b0 [ 671.436255] memory_max_write+0x169/0x300 [ 671.440431] ? mem_cgroup_write+0x360/0x360 [ 671.444776] ? lock_acquire+0x16f/0x3f0 [ 671.448769] ? kernfs_fop_write+0x227/0x480 [ 671.453121] cgroup_file_write+0x245/0x7a0 [ 671.457399] ? mem_cgroup_write+0x360/0x360 [ 671.461749] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 671.466713] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 671.471664] kernfs_fop_write+0x2ba/0x480 [ 671.475818] __vfs_write+0x116/0x8e0 [ 671.479531] ? kernfs_fop_open+0xd90/0xd90 [ 671.483773] ? kernel_read+0x120/0x120 [ 671.487685] ? __lock_is_held+0xb6/0x140 [ 671.491768] ? check_preemption_disabled+0x48/0x290 [ 671.496859] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 671.502333] ? rcu_read_lock_sched_held+0x110/0x130 [ 671.507370] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 671.512146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 671.517708] ? __sb_start_write+0x1ac/0x360 [ 671.522050] vfs_write+0x20c/0x580 [ 671.525612] ksys_write+0xea/0x1f0 [ 671.529180] ? __ia32_sys_read+0xb0/0xb0 20:08:31 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000000000450000000000f5f0"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0x1000000008ffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x149, &(0x7f0000000000)=[{}]}, 0x10) [ 671.533295] ? do_syscall_64+0x26/0x610 [ 671.537396] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.542899] ? do_syscall_64+0x26/0x610 [ 671.547000] __x64_sys_write+0x73/0xb0 [ 671.550896] do_syscall_64+0x103/0x610 [ 671.554951] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.560154] RIP: 0033:0x457f29 [ 671.563353] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 671.582397] RSP: 002b:00007f680b089c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 671.590179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 671.597482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 671.604764] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 671.612081] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f680b08a6d4 [ 671.619402] R13: 00000000004c73a5 R14: 00000000004dcf48 R15: 00000000ffffffff 20:08:31 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 671.631834] memory: usage 20972kB, limit 0kB, failcnt 0 [ 671.646621] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 671.655030] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 671.665871] Memory cgroup stats for /syz0: cache:68KB rss:14856KB rss_huge:14336KB shmem:132KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:14824KB inactive_file:4KB active_file:4KB unevictable:0KB [ 671.706945] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26325,uid=0 20:08:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 671.756022] Memory cgroup out of memory: Kill process 26325 (syz-executor.0) score 11080000 or sacrifice child [ 671.830800] Killed process 26325 (syz-executor.0) total-vm:72576kB, anon-rss:8344kB, file-rss:35832kB, shmem-rss:0kB [ 672.041955] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 672.102100] CPU: 0 PID: 26709 Comm: syz-executor.0 Not tainted 5.0.0+ #7 [ 672.108970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.118333] Call Trace: [ 672.120945] dump_stack+0x172/0x1f0 [ 672.124606] dump_header+0x10f/0xb6c [ 672.128458] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 672.133588] ? ___ratelimit+0x60/0x595 [ 672.137510] oom_kill_process.cold+0x10/0x6f5 [ 672.142030] ? task_will_free_mem+0x139/0x6e0 [ 672.146551] out_of_memory+0x79a/0x1280 [ 672.150558] ? retint_kernel+0x2d/0x2d [ 672.154483] ? oom_killer_disable+0x280/0x280 [ 672.159008] mem_cgroup_out_of_memory+0x99/0xe0 [ 672.163702] ? memcg_memory_event+0x40/0x40 [ 672.168051] ? cgroup_file_notify+0x140/0x1b0 [ 672.172574] memory_max_write+0x169/0x300 [ 672.176750] ? mem_cgroup_write+0x360/0x360 [ 672.181088] ? lock_acquire+0x16f/0x3f0 [ 672.185083] ? kernfs_fop_write+0x227/0x480 [ 672.189430] cgroup_file_write+0x245/0x7a0 [ 672.193700] ? mem_cgroup_write+0x360/0x360 [ 672.198050] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 672.203009] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 672.207960] kernfs_fop_write+0x2ba/0x480 [ 672.212132] __vfs_write+0x116/0x8e0 [ 672.215865] ? kernfs_fop_open+0xd90/0xd90 [ 672.220116] ? kernel_read+0x120/0x120 [ 672.224025] ? __lock_is_held+0xb6/0x140 [ 672.228103] ? check_preemption_disabled+0x48/0x290 [ 672.233144] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 672.238615] ? rcu_read_lock_sched_held+0x110/0x130 [ 672.243648] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 672.248420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 672.253999] ? __sb_start_write+0x1ac/0x360 [ 672.258342] vfs_write+0x20c/0x580 [ 672.261910] ksys_write+0xea/0x1f0 [ 672.265468] ? __ia32_sys_read+0xb0/0xb0 [ 672.269566] ? do_syscall_64+0x26/0x610 [ 672.273565] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.278946] ? do_syscall_64+0x26/0x610 [ 672.282947] __x64_sys_write+0x73/0xb0 [ 672.287058] do_syscall_64+0x103/0x610 [ 672.291081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.296370] RIP: 0033:0x457f29 [ 672.299580] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.318503] RSP: 002b:00007f680b089c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.326334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 672.333749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 672.341029] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 672.348306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f680b08a6d4 [ 672.355574] R13: 00000000004c73a5 R14: 00000000004dcf48 R15: 00000000ffffffff [ 672.364990] memory: usage 12372kB, limit 0kB, failcnt 0 [ 672.370598] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 672.377563] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 672.384028] Memory cgroup stats for /syz0: cache:68KB rss:6624KB rss_huge:6144KB shmem:132KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6508KB inactive_file:8KB active_file:0KB unevictable:0KB [ 672.404874] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=23662,uid=0 [ 672.420964] Memory cgroup out of memory: Kill process 23662 (syz-executor.0) score 9535000 or sacrifice child [ 672.440279] Killed process 23662 (syz-executor.0) total-vm:72444kB, anon-rss:2188kB, file-rss:35820kB, shmem-rss:0kB [ 672.470111] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 672.488830] CPU: 0 PID: 26730 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 672.495692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.495804] Call Trace: [ 672.508015] dump_stack+0x172/0x1f0 [ 672.511673] dump_header+0x10f/0xb6c [ 672.515419] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 672.520542] ? ___ratelimit+0x60/0x595 [ 672.520567] oom_kill_process.cold+0x10/0x6f5 [ 672.520588] ? task_will_free_mem+0x139/0x6e0 [ 672.520613] out_of_memory+0x79a/0x1280 [ 672.520637] ? oom_killer_disable+0x280/0x280 [ 672.520666] mem_cgroup_out_of_memory+0x99/0xe0 [ 672.529163] ? memcg_memory_event+0x40/0x40 [ 672.529189] ? cgroup_file_notify+0x140/0x1b0 [ 672.529238] memory_max_write+0x169/0x300 [ 672.546993] ? lockdep_hardirqs_on+0x415/0x5d0 [ 672.547018] ? mem_cgroup_write+0x360/0x360 [ 672.547032] ? lock_acquire+0x16f/0x3f0 [ 672.547048] ? kernfs_fop_write+0x227/0x480 [ 672.547073] cgroup_file_write+0x245/0x7a0 [ 672.547091] ? mem_cgroup_write+0x360/0x360 [ 672.547108] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 672.547126] ? kernfs_get_active+0x12/0x240 [ 672.564719] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 672.564737] kernfs_fop_write+0x2ba/0x480 [ 672.564760] __vfs_write+0x116/0x8e0 [ 672.564776] ? kernfs_fop_open+0xd90/0xd90 [ 672.573088] ? kernel_read+0x120/0x120 [ 672.573108] ? __lock_is_held+0xb6/0x140 [ 672.573124] ? check_preemption_disabled+0x48/0x290 [ 672.573148] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 672.573164] ? rcu_read_lock_sched_held+0x110/0x130 [ 672.573178] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 672.573192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 672.573236] ? __sb_start_write+0x1ac/0x360 [ 672.573258] vfs_write+0x20c/0x580 [ 672.581830] ksys_write+0xea/0x1f0 [ 672.581849] ? __ia32_sys_read+0xb0/0xb0 [ 672.581874] __x64_sys_write+0x73/0xb0 [ 672.581891] ? do_syscall_64+0x5b/0x610 [ 672.581908] do_syscall_64+0x103/0x610 [ 672.600773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.600787] RIP: 0033:0x457f29 [ 672.600803] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.600812] RSP: 002b:00007fe5f43f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.600826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 672.600839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 672.616993] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 672.617002] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5f43f56d4 [ 672.617011] R13: 00000000004c73a5 R14: 00000000004dcf48 R15: 00000000ffffffff [ 672.667674] memory: usage 65816kB, limit 0kB, failcnt 0 [ 672.754568] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 672.765017] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 672.771591] Memory cgroup stats for /syz3: cache:116KB rss:56816KB rss_huge:55296KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:56920KB [ 672.792417] inactive_file:0KB active_file:4KB unevictable:0KB [ 672.798870] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26293,uid=0 20:08:32 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) 20:08:32 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000000000450000000000f5f0"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0x1000000008ffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x149, &(0x7f0000000000)=[{}]}, 0x10) 20:08:32 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) 20:08:32 executing program 5: timer_create(0x3, 0x0, &(0x7f00000000c0)) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) exit(0x0) timer_delete(0x0) [ 672.821747] Memory cgroup out of memory: Kill process 26293 (syz-executor.3) score 13137000 or sacrifice child [ 672.834155] Killed process 26293 (syz-executor.3) total-vm:73236kB, anon-rss:16584kB, file-rss:35808kB, shmem-rss:0kB [ 672.912435] oom_reaper: reaped process 26735 (syz-executor.2), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 672.912963] syz-executor.0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 672.949036] CPU: 1 PID: 23621 Comm: syz-executor.0 Not tainted 5.0.0+ #7 20:08:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 672.955913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.965277] Call Trace: [ 672.967887] dump_stack+0x172/0x1f0 [ 672.971750] dump_header+0x10f/0xb6c [ 672.975494] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 672.980632] ? ___ratelimit+0x60/0x595 [ 672.984541] ? do_raw_spin_unlock+0x57/0x270 [ 672.988983] oom_kill_process.cold+0x10/0x6f5 [ 672.993517] ? task_will_free_mem+0x139/0x6e0 [ 672.998038] out_of_memory+0x79a/0x1280 [ 673.002039] ? oom_killer_disable+0x280/0x280 [ 673.006558] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 673.011694] mem_cgroup_out_of_memory+0x99/0xe0 [ 673.016382] ? memcg_memory_event+0x40/0x40 [ 673.020732] ? _raw_spin_unlock+0x2d/0x50 [ 673.025019] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 673.030137] try_charge+0xfec/0x1570 [ 673.033866] ? find_held_lock+0x35/0x130 [ 673.037953] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 673.042950] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 673.047825] ? find_held_lock+0x35/0x130 [ 673.051926] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 673.056812] memcg_kmem_charge_memcg+0x7c/0x130 [ 673.061500] ? memcg_kmem_put_cache+0xb0/0xb0 [ 673.066026] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 673.070889] memcg_kmem_charge+0x13b/0x340 [ 673.075611] __alloc_pages_nodemask+0x437/0x710 [ 673.080302] ? __alloc_pages_slowpath+0x2900/0x2900 [ 673.085342] ? lockdep_hardirqs_on+0x415/0x5d0 [ 673.089943] ? trace_hardirqs_on+0x67/0x230 [ 673.094288] ? kasan_check_read+0x11/0x20 [ 673.098462] copy_process.part.0+0x3e0/0x79a0 [ 673.103510] ? mark_held_locks+0x100/0x100 [ 673.107766] ? _raw_spin_unlock+0x2d/0x50 [ 673.111944] ? __might_fault+0x12b/0x1e0 [ 673.116038] ? __cleanup_sighand+0x70/0x70 [ 673.120594] ? lock_downgrade+0x810/0x810 [ 673.124917] _do_fork+0x257/0xfe0 [ 673.128397] ? fork_idle+0x1d0/0x1d0 [ 673.132143] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 673.136917] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 673.141693] ? do_syscall_64+0x26/0x610 [ 673.145707] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.151157] ? do_syscall_64+0x26/0x610 [ 673.155221] __x64_sys_clone+0xbf/0x150 [ 673.159258] do_syscall_64+0x103/0x610 [ 673.163181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.168576] RIP: 0033:0x4564fa [ 673.171908] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 673.190833] RSP: 002b:00007fff10bd3610 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 673.198578] RAX: ffffffffffffffda RBX: 00007fff10bd3610 RCX: 00000000004564fa [ 673.205871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 20:08:33 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 673.213180] RBP: 00007fff10bd3650 R08: 0000000000000001 R09: 00000000028a6940 [ 673.220489] R10: 00000000028a6c10 R11: 0000000000000246 R12: 0000000000000001 [ 673.227773] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff10bd36a0 20:08:33 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 673.282157] memory: usage 7632kB, limit 0kB, failcnt 20 [ 673.288093] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 673.302083] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 673.316345] Memory cgroup stats for /syz0: cache:68KB rss:2388KB rss_huge:2048KB shmem:132KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2212KB inactive_file:12KB active_file:0KB unevictable:0KB [ 673.340397] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=25992,uid=0 [ 673.356273] Memory cgroup out of memory: Kill process 25992 (syz-executor.0) score 9511000 or sacrifice child [ 673.386641] Killed process 25992 (syz-executor.0) total-vm:72444kB, anon-rss:2192kB, file-rss:35720kB, shmem-rss:0kB [ 673.404764] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 673.405320] oom_reaper: reaped process 25992 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 673.419109] CPU: 0 PID: 23624 Comm: syz-executor.2 Not tainted 5.0.0+ #7 [ 673.433256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.442616] Call Trace: [ 673.445943] dump_stack+0x172/0x1f0 [ 673.449584] dump_header+0x10f/0xb6c [ 673.453412] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 673.458525] ? ___ratelimit+0x60/0x595 [ 673.462428] ? do_raw_spin_unlock+0x57/0x270 [ 673.466851] oom_kill_process.cold+0x10/0x6f5 [ 673.471360] ? task_will_free_mem+0x139/0x6e0 [ 673.475879] out_of_memory+0x79a/0x1280 [ 673.479870] ? oom_killer_disable+0x280/0x280 [ 673.484374] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 673.489501] mem_cgroup_out_of_memory+0x99/0xe0 [ 673.494180] ? memcg_memory_event+0x40/0x40 [ 673.498529] ? _raw_spin_unlock+0x2d/0x50 [ 673.502691] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 673.507799] try_charge+0xfec/0x1570 [ 673.511517] ? find_held_lock+0x35/0x130 [ 673.515592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 673.520447] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 673.525302] ? find_held_lock+0x35/0x130 [ 673.529374] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 673.534243] memcg_kmem_charge_memcg+0x7c/0x130 [ 673.538919] ? memcg_kmem_put_cache+0xb0/0xb0 [ 673.543425] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 673.548275] memcg_kmem_charge+0x13b/0x340 [ 673.552527] __alloc_pages_nodemask+0x437/0x710 [ 673.557215] ? __alloc_pages_slowpath+0x2900/0x2900 [ 673.562249] ? lockdep_hardirqs_on+0x415/0x5d0 [ 673.566840] ? trace_hardirqs_on+0x67/0x230 [ 673.571165] ? kasan_check_read+0x11/0x20 [ 673.575342] copy_process.part.0+0x3e0/0x79a0 [ 673.579855] ? mark_held_locks+0x100/0x100 [ 673.584098] ? _raw_spin_unlock+0x2d/0x50 [ 673.588262] ? __might_fault+0x12b/0x1e0 [ 673.592340] ? __cleanup_sighand+0x70/0x70 [ 673.596584] ? lock_downgrade+0x810/0x810 [ 673.600753] _do_fork+0x257/0xfe0 [ 673.604228] ? fork_idle+0x1d0/0x1d0 [ 673.607961] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 673.612722] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 673.617489] ? do_syscall_64+0x26/0x610 [ 673.621474] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.626848] ? do_syscall_64+0x26/0x610 [ 673.630837] __x64_sys_clone+0xbf/0x150 [ 673.634824] do_syscall_64+0x103/0x610 [ 673.638728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.643925] RIP: 0033:0x4564fa [ 673.647125] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 673.666035] RSP: 002b:00007ffcc145bfd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 673.673749] RAX: ffffffffffffffda RBX: 00007ffcc145bfd0 RCX: 00000000004564fa [ 673.681021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 673.688294] RBP: 00007ffcc145c010 R08: 0000000000000001 R09: 0000000001a51940 [ 673.695564] R10: 0000000001a51c10 R11: 0000000000000246 R12: 0000000000000001 [ 673.702836] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcc145c060 20:08:33 executing program 5: timer_create(0x3, 0x0, &(0x7f00000000c0)) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) exit(0x0) timer_delete(0x0) 20:08:33 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a0000000000450000000000f5f0"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0x1000000008ffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x149, &(0x7f0000000000)=[{}]}, 0x10) [ 674.307902] memory: usage 10000kB, limit 0kB, failcnt 8 [ 674.321359] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 674.335177] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 674.348286] Memory cgroup stats for /syz2: cache:172KB rss:4352KB rss_huge:4096KB shmem:124KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4376KB inactive_file:4KB active_file:0KB unevictable:0KB [ 674.406523] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23661,uid=0 [ 674.451680] Memory cgroup out of memory: Kill process 23661 (syz-executor.2) score 9536000 or sacrifice child [ 674.484633] Killed process 23661 (syz-executor.2) total-vm:72576kB, anon-rss:2192kB, file-rss:35824kB, shmem-rss:0kB [ 674.546581] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 674.567055] CPU: 0 PID: 21034 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 674.573914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.583270] Call Trace: [ 674.585868] dump_stack+0x172/0x1f0 [ 674.589508] dump_header+0x10f/0xb6c [ 674.593239] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 674.598349] ? ___ratelimit+0x60/0x595 [ 674.602246] ? do_raw_spin_unlock+0x57/0x270 [ 674.606667] oom_kill_process.cold+0x10/0x6f5 [ 674.611182] ? task_will_free_mem+0x139/0x6e0 [ 674.615700] out_of_memory+0x79a/0x1280 [ 674.619692] ? oom_killer_disable+0x280/0x280 [ 674.624191] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 674.629320] mem_cgroup_out_of_memory+0x99/0xe0 [ 674.633995] ? memcg_memory_event+0x40/0x40 [ 674.638336] ? _raw_spin_unlock+0x2d/0x50 [ 674.642491] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 674.647595] try_charge+0xfec/0x1570 [ 674.651311] ? find_held_lock+0x35/0x130 [ 674.655393] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 674.660234] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 674.665057] ? find_held_lock+0x35/0x130 [ 674.669111] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 674.673965] memcg_kmem_charge_memcg+0x7c/0x130 [ 674.678636] ? memcg_kmem_put_cache+0xb0/0xb0 [ 674.683150] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 674.688010] memcg_kmem_charge+0x13b/0x340 [ 674.692256] __alloc_pages_nodemask+0x437/0x710 [ 674.696940] ? __alloc_pages_slowpath+0x2900/0x2900 [ 674.701988] ? lockdep_hardirqs_on+0x415/0x5d0 [ 674.706609] ? trace_hardirqs_on+0x67/0x230 [ 674.710931] ? kasan_check_read+0x11/0x20 [ 674.715120] copy_process.part.0+0x3e0/0x79a0 [ 674.719623] ? mark_held_locks+0x100/0x100 [ 674.723877] ? _raw_spin_unlock+0x2d/0x50 [ 674.728064] ? __might_fault+0x12b/0x1e0 [ 674.732151] ? __cleanup_sighand+0x70/0x70 [ 674.736397] ? lock_downgrade+0x810/0x810 [ 674.740568] _do_fork+0x257/0xfe0 [ 674.744046] ? fork_idle+0x1d0/0x1d0 [ 674.747786] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 674.752565] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 674.757331] ? do_syscall_64+0x26/0x610 [ 674.761319] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.766690] ? do_syscall_64+0x26/0x610 [ 674.770699] __x64_sys_clone+0xbf/0x150 [ 674.774685] do_syscall_64+0x103/0x610 [ 674.778582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.783776] RIP: 0033:0x4564fa [ 674.786986] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 674.805888] RSP: 002b:00007fff67681de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 674.813624] RAX: ffffffffffffffda RBX: 00007fff67681de0 RCX: 00000000004564fa [ 674.820921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 674.828202] RBP: 00007fff67681e20 R08: 0000000000000001 R09: 0000000001ce2940 [ 674.835469] R10: 0000000001ce2c10 R11: 0000000000000246 R12: 0000000000000001 20:08:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505331, &(0x7f0000000600)={{0xbf}}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 674.842749] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff67681e70 [ 674.867292] memory: usage 46660kB, limit 0kB, failcnt 24 [ 674.872864] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 674.881432] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 674.887599] Memory cgroup stats for /syz3: cache:116KB rss:38288KB rss_huge:36864KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:38252KB inactive_file:4KB active_file:8KB unevictable:0KB [ 674.908632] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26307,uid=0 [ 674.923291] Memory cgroup out of memory: Kill process 26307 (syz-executor.3) score 13132000 or sacrifice child [ 674.923352] Killed process 26307 (syz-executor.3) total-vm:72576kB, anon-rss:16540kB, file-rss:35832kB, shmem-rss:0kB 20:08:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) [ 674.974127] syz-executor.0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 675.000683] CPU: 1 PID: 23621 Comm: syz-executor.0 Not tainted 5.0.0+ #7 [ 675.007545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.016887] Call Trace: [ 675.019475] dump_stack+0x172/0x1f0 [ 675.023111] dump_header+0x10f/0xb6c [ 675.026835] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 675.031969] ? ___ratelimit+0x60/0x595 [ 675.035876] ? do_raw_spin_unlock+0x57/0x270 [ 675.040292] oom_kill_process.cold+0x10/0x6f5 [ 675.044795] ? task_will_free_mem+0x139/0x6e0 [ 675.049298] out_of_memory+0x79a/0x1280 [ 675.053293] ? oom_killer_disable+0x280/0x280 [ 675.057791] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 675.062946] mem_cgroup_out_of_memory+0x99/0xe0 [ 675.067667] ? memcg_memory_event+0x40/0x40 [ 675.072005] ? _raw_spin_unlock+0x2d/0x50 [ 675.076164] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 675.081267] try_charge+0xfec/0x1570 [ 675.084986] ? find_held_lock+0x35/0x130 [ 675.089059] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 675.093901] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 675.098741] ? find_held_lock+0x35/0x130 [ 675.102801] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 675.107646] memcg_kmem_charge_memcg+0x7c/0x130 [ 675.112308] ? memcg_kmem_put_cache+0xb0/0xb0 [ 675.116802] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 675.121644] memcg_kmem_charge+0x13b/0x340 [ 675.125874] __alloc_pages_nodemask+0x437/0x710 [ 675.130534] ? __alloc_pages_slowpath+0x2900/0x2900 [ 675.135544] ? lockdep_hardirqs_on+0x415/0x5d0 [ 675.140115] ? trace_hardirqs_on+0x67/0x230 [ 675.144418] ? kasan_check_read+0x11/0x20 [ 675.148550] copy_process.part.0+0x3e0/0x79a0 [ 675.153038] ? mark_held_locks+0x100/0x100 [ 675.157312] ? _raw_spin_unlock+0x2d/0x50 [ 675.161446] ? __might_fault+0x12b/0x1e0 [ 675.165501] ? __cleanup_sighand+0x70/0x70 [ 675.169717] ? lock_downgrade+0x810/0x810 [ 675.173866] _do_fork+0x257/0xfe0 [ 675.177321] ? fork_idle+0x1d0/0x1d0 [ 675.181017] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 675.185751] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 675.190500] ? do_syscall_64+0x26/0x610 [ 675.194475] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.199847] ? do_syscall_64+0x26/0x610 [ 675.203808] __x64_sys_clone+0xbf/0x150 [ 675.207766] do_syscall_64+0x103/0x610 [ 675.211640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.216830] RIP: 0033:0x4564fa [ 675.220043] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 675.238928] RSP: 002b:00007fff10bd3610 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 675.246638] RAX: ffffffffffffffda RBX: 00007fff10bd3610 RCX: 00000000004564fa [ 675.253904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 675.261166] RBP: 00007fff10bd3650 R08: 0000000000000001 R09: 00000000028a6940 [ 675.268418] R10: 00000000028a6c10 R11: 0000000000000246 R12: 0000000000000001 [ 675.275682] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff10bd36a0 [ 675.283130] memory: usage 5276kB, limit 0kB, failcnt 27 [ 675.288773] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 675.297509] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 675.303721] Memory cgroup stats for /syz0: cache:68KB rss:160KB rss_huge:0KB shmem:132KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52KB inactive_file:0KB active_file:0KB unevictable:0KB [ 675.331557] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=23621,uid=0 [ 675.347108] Memory cgroup out of memory: Kill process 23621 (syz-executor.0) score 8984000 or sacrifice child [ 675.371434] Killed process 23621 (syz-executor.0) total-vm:72312kB, anon-rss:100kB, file-rss:35712kB, shmem-rss:0kB 20:08:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505331, &(0x7f0000000600)={{0xbf}}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 675.383293] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 675.384125] oom_reaper: reaped process 23621 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 675.395825] CPU: 0 PID: 23624 Comm: syz-executor.2 Not tainted 5.0.0+ #7 [ 675.411876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.421235] Call Trace: [ 675.423846] dump_stack+0x172/0x1f0 [ 675.427501] dump_header+0x10f/0xb6c [ 675.431234] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 675.436349] ? ___ratelimit+0x60/0x595 [ 675.440285] ? do_raw_spin_unlock+0x57/0x270 [ 675.444742] oom_kill_process.cold+0x10/0x6f5 [ 675.449226] ? task_will_free_mem+0x139/0x6e0 [ 675.453713] out_of_memory+0x79a/0x1280 [ 675.457691] ? oom_killer_disable+0x280/0x280 [ 675.462186] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 675.467308] mem_cgroup_out_of_memory+0x99/0xe0 [ 675.471989] ? memcg_memory_event+0x40/0x40 [ 675.476333] ? _raw_spin_unlock+0x2d/0x50 [ 675.480495] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 675.485612] try_charge+0xfec/0x1570 [ 675.489332] ? find_held_lock+0x35/0x130 [ 675.493419] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 675.498266] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 675.503117] ? find_held_lock+0x35/0x130 [ 675.507197] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 675.512072] memcg_kmem_charge_memcg+0x7c/0x130 [ 675.516758] ? memcg_kmem_put_cache+0xb0/0xb0 [ 675.521273] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 675.526122] memcg_kmem_charge+0x13b/0x340 [ 675.530387] __alloc_pages_nodemask+0x437/0x710 [ 675.535067] ? __alloc_pages_slowpath+0x2900/0x2900 [ 675.540101] ? lockdep_hardirqs_on+0x415/0x5d0 [ 675.544687] ? trace_hardirqs_on+0x67/0x230 [ 675.549011] ? kasan_check_read+0x11/0x20 [ 675.553179] copy_process.part.0+0x3e0/0x79a0 [ 675.557719] ? mark_held_locks+0x100/0x100 [ 675.561966] ? _raw_spin_unlock+0x2d/0x50 [ 675.566121] ? __might_fault+0x12b/0x1e0 [ 675.570200] ? __cleanup_sighand+0x70/0x70 [ 675.574453] ? lock_downgrade+0x810/0x810 [ 675.578646] _do_fork+0x257/0xfe0 [ 675.582112] ? fork_idle+0x1d0/0x1d0 [ 675.585841] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 675.590606] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 675.595369] ? do_syscall_64+0x26/0x610 [ 675.599371] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.604741] ? do_syscall_64+0x26/0x610 [ 675.608727] __x64_sys_clone+0xbf/0x150 [ 675.612712] do_syscall_64+0x103/0x610 [ 675.616612] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.621807] RIP: 0033:0x4564fa [ 675.625002] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 675.643904] RSP: 002b:00007ffcc145bfd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 675.651638] RAX: ffffffffffffffda RBX: 00007ffcc145bfd0 RCX: 00000000004564fa [ 675.658920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 675.666188] RBP: 00007ffcc145c010 R08: 0000000000000001 R09: 0000000001a51940 [ 675.673463] R10: 0000000001a51c10 R11: 0000000000000246 R12: 0000000000000001 [ 675.680739] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcc145c060 [ 675.710712] memory: usage 7660kB, limit 0kB, failcnt 15 [ 675.716088] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 675.730325] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 675.739262] Memory cgroup stats for /syz2: cache:172KB rss:2208KB rss_huge:2048KB shmem:124KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2204KB inactive_file:0KB active_file:0KB unevictable:0KB [ 675.776192] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23642,uid=0 [ 675.792251] Memory cgroup out of memory: Kill process 23642 (syz-executor.2) score 9532000 or sacrifice child [ 675.802834] Killed process 23642 (syz-executor.2) total-vm:72448kB, anon-rss:2176kB, file-rss:35824kB, shmem-rss:0kB [ 675.871638] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 675.889164] CPU: 0 PID: 21034 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 675.896064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.905427] Call Trace: [ 675.908025] dump_stack+0x172/0x1f0 [ 675.911669] dump_header+0x10f/0xb6c [ 675.915394] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 675.920511] ? ___ratelimit+0x60/0x595 [ 675.924402] ? do_raw_spin_unlock+0x57/0x270 [ 675.928829] oom_kill_process.cold+0x10/0x6f5 [ 675.933338] ? task_will_free_mem+0x139/0x6e0 [ 675.937866] out_of_memory+0x79a/0x1280 [ 675.941847] ? oom_killer_disable+0x280/0x280 [ 675.946358] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 675.951516] mem_cgroup_out_of_memory+0x99/0xe0 [ 675.956195] ? memcg_memory_event+0x40/0x40 [ 675.960541] ? _raw_spin_unlock+0x2d/0x50 [ 675.964694] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 675.969859] try_charge+0xfec/0x1570 [ 675.973581] ? find_held_lock+0x35/0x130 [ 675.977629] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 675.982454] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 675.987281] ? find_held_lock+0x35/0x130 [ 675.991343] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 675.996220] memcg_kmem_charge_memcg+0x7c/0x130 [ 676.000888] ? memcg_kmem_put_cache+0xb0/0xb0 [ 676.005375] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 676.010205] memcg_kmem_charge+0x13b/0x340 [ 676.014449] __alloc_pages_nodemask+0x437/0x710 [ 676.019107] ? __alloc_pages_slowpath+0x2900/0x2900 [ 676.024139] ? lockdep_hardirqs_on+0x415/0x5d0 [ 676.028712] ? trace_hardirqs_on+0x67/0x230 [ 676.033023] ? kasan_check_read+0x11/0x20 [ 676.037182] copy_process.part.0+0x3e0/0x79a0 [ 676.041691] ? mark_held_locks+0x100/0x100 [ 676.045936] ? _raw_spin_unlock+0x2d/0x50 [ 676.050075] ? __might_fault+0x12b/0x1e0 [ 676.054138] ? __cleanup_sighand+0x70/0x70 [ 676.058360] ? lock_downgrade+0x810/0x810 [ 676.062506] _do_fork+0x257/0xfe0 [ 676.065947] ? fork_idle+0x1d0/0x1d0 [ 676.069655] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.074409] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.079153] ? do_syscall_64+0x26/0x610 [ 676.083127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.088474] ? do_syscall_64+0x26/0x610 [ 676.092469] __x64_sys_clone+0xbf/0x150 [ 676.096467] do_syscall_64+0x103/0x610 [ 676.100359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.105588] RIP: 0033:0x4564fa [ 676.108771] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 676.127683] RSP: 002b:00007fff67681de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 676.135377] RAX: ffffffffffffffda RBX: 00007fff67681de0 RCX: 00000000004564fa [ 676.142632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 676.149895] RBP: 00007fff67681e20 R08: 0000000000000001 R09: 0000000001ce2940 [ 676.157164] R10: 0000000001ce2c10 R11: 0000000000000246 R12: 0000000000000001 [ 676.164430] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff67681e70 [ 676.173516] memory: usage 29960kB, limit 0kB, failcnt 31 [ 676.178978] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 676.185797] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 676.185805] Memory cgroup stats for /syz3: cache:116KB rss:21736KB rss_huge:20480KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21760KB inactive_file:4KB active_file:0KB unevictable:0KB [ 676.185889] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26703,uid=0 [ 676.185953] Memory cgroup out of memory: Kill process 26703 (syz-executor.3) score 9546000 or sacrifice child [ 676.186178] Killed process 26704 (syz-executor.3) total-vm:72708kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 676.198449] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 676.240961] CPU: 0 PID: 23624 Comm: syz-executor.2 Not tainted 5.0.0+ #7 [ 676.259809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.259815] Call Trace: [ 676.259836] dump_stack+0x172/0x1f0 [ 676.259859] dump_header+0x10f/0xb6c [ 676.259877] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 676.259892] ? ___ratelimit+0x60/0x595 [ 676.259907] ? do_raw_spin_unlock+0x57/0x270 [ 676.259925] oom_kill_process.cold+0x10/0x6f5 [ 676.276107] ? task_will_free_mem+0x139/0x6e0 [ 676.276129] out_of_memory+0x79a/0x1280 [ 676.276151] ? oom_killer_disable+0x280/0x280 [ 676.276167] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 676.276192] mem_cgroup_out_of_memory+0x99/0xe0 [ 676.276207] ? memcg_memory_event+0x40/0x40 [ 676.276229] ? _raw_spin_unlock+0x2d/0x50 [ 676.276244] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 676.276258] try_charge+0xfec/0x1570 [ 676.276270] ? find_held_lock+0x35/0x130 [ 676.276291] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 676.276307] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 676.276324] ? find_held_lock+0x35/0x130 [ 676.282755] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 676.282782] memcg_kmem_charge_memcg+0x7c/0x130 [ 676.282796] ? memcg_kmem_put_cache+0xb0/0xb0 [ 676.282820] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 676.291793] memcg_kmem_charge+0x13b/0x340 [ 676.291814] __alloc_pages_nodemask+0x437/0x710 [ 676.291834] ? __alloc_pages_slowpath+0x2900/0x2900 [ 676.291856] ? lockdep_hardirqs_on+0x415/0x5d0 [ 676.300146] ? trace_hardirqs_on+0x67/0x230 [ 676.300160] ? kasan_check_read+0x11/0x20 [ 676.300188] copy_process.part.0+0x3e0/0x79a0 [ 676.309870] ? mark_held_locks+0x100/0x100 [ 676.309894] ? _raw_spin_unlock+0x2d/0x50 [ 676.309916] ? __might_fault+0x12b/0x1e0 [ 676.309940] ? __cleanup_sighand+0x70/0x70 [ 676.309961] ? lock_downgrade+0x810/0x810 [ 676.309988] _do_fork+0x257/0xfe0 [ 676.318482] ? fork_idle+0x1d0/0x1d0 [ 676.318509] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.328255] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.328270] ? do_syscall_64+0x26/0x610 [ 676.328287] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.328316] ? do_syscall_64+0x26/0x610 [ 676.336797] __x64_sys_clone+0xbf/0x150 [ 676.336817] do_syscall_64+0x103/0x610 [ 676.336836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.345719] RIP: 0033:0x4564fa [ 676.345735] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 676.345743] RSP: 002b:00007ffcc145bfd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 676.354630] RAX: ffffffffffffffda RBX: 00007ffcc145bfd0 RCX: 00000000004564fa [ 676.354639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 676.354648] RBP: 00007ffcc145c010 R08: 0000000000000001 R09: 0000000001a51940 [ 676.354656] R10: 0000000001a51c10 R11: 0000000000000246 R12: 0000000000000001 [ 676.354665] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcc145c060 [ 676.355919] memory: usage 5360kB, limit 0kB, failcnt 21 [ 676.363846] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 676.363855] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 676.363861] Memory cgroup stats for /syz2: cache:172KB rss:48KB rss_huge:0KB shmem:124KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:64KB inactive_file:0KB active_file:0KB unevictable:0KB [ 676.363934] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23624,uid=0 [ 676.363979] Memory cgroup out of memory: Kill process 23624 (syz-executor.2) score 8983000 or sacrifice child [ 676.364039] Killed process 23624 (syz-executor.2) total-vm:72312kB, anon-rss:100kB, file-rss:35712kB, shmem-rss:0kB [ 676.364282] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 676.375139] oom_reaper: reaped process 23624 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 676.378988] CPU: 0 PID: 21034 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 676.387223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.396882] Call Trace: [ 676.405807] dump_stack+0x172/0x1f0 [ 676.405828] dump_header+0x10f/0xb6c [ 676.405846] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 676.414473] ? ___ratelimit+0x60/0x595 [ 676.414509] ? do_raw_spin_unlock+0x57/0x270 [ 676.414527] oom_kill_process.cold+0x10/0x6f5 [ 676.422911] ? task_will_free_mem+0x139/0x6e0 [ 676.422934] out_of_memory+0x79a/0x1280 [ 676.422956] ? oom_killer_disable+0x280/0x280 [ 676.695898] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 676.700996] mem_cgroup_out_of_memory+0x99/0xe0 [ 676.705651] ? memcg_memory_event+0x40/0x40 [ 676.709964] ? _raw_spin_unlock+0x2d/0x50 [ 676.714097] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 676.719204] try_charge+0xfec/0x1570 [ 676.722909] ? find_held_lock+0x35/0x130 [ 676.726957] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 676.731787] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 676.736614] ? find_held_lock+0x35/0x130 [ 676.740673] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 676.745552] memcg_kmem_charge_memcg+0x7c/0x130 [ 676.750206] ? memcg_kmem_put_cache+0xb0/0xb0 [ 676.754688] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 676.759545] memcg_kmem_charge+0x13b/0x340 [ 676.763787] __alloc_pages_nodemask+0x437/0x710 [ 676.768443] ? __alloc_pages_slowpath+0x2900/0x2900 [ 676.773461] ? lockdep_hardirqs_on+0x415/0x5d0 [ 676.778029] ? trace_hardirqs_on+0x67/0x230 [ 676.782335] ? kasan_check_read+0x11/0x20 [ 676.786508] copy_process.part.0+0x3e0/0x79a0 [ 676.790990] ? mark_held_locks+0x100/0x100 [ 676.795212] ? _raw_spin_unlock+0x2d/0x50 [ 676.799355] ? __might_fault+0x12b/0x1e0 [ 676.803424] ? __cleanup_sighand+0x70/0x70 [ 676.807646] ? lock_downgrade+0x810/0x810 [ 676.811785] _do_fork+0x257/0xfe0 [ 676.815226] ? fork_idle+0x1d0/0x1d0 [ 676.818932] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.823676] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.828419] ? do_syscall_64+0x26/0x610 [ 676.832379] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.837740] ? do_syscall_64+0x26/0x610 [ 676.841705] __x64_sys_clone+0xbf/0x150 [ 676.845672] do_syscall_64+0x103/0x610 [ 676.849549] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.854721] RIP: 0033:0x4564fa [ 676.857898] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 676.876784] RSP: 002b:00007fff67681de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 676.884495] RAX: ffffffffffffffda RBX: 00007fff67681de0 RCX: 00000000004564fa [ 676.891747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 676.899000] RBP: 00007fff67681e20 R08: 0000000000000001 R09: 0000000001ce2940 [ 676.906260] R10: 0000000001ce2c10 R11: 0000000000000246 R12: 0000000000000001 [ 676.913519] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff67681e70 [ 676.936151] memory: usage 29640kB, limit 0kB, failcnt 37 [ 676.941902] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 676.955913] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 676.962480] Memory cgroup stats for /syz3: cache:116KB rss:21736KB rss_huge:20480KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21748KB inactive_file:4KB active_file:0KB unevictable:0KB [ 676.990251] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26703,uid=0 [ 677.012079] Memory cgroup out of memory: Kill process 26703 (syz-executor.3) score 9546000 or sacrifice child [ 677.023956] Killed process 26703 (syz-executor.3) total-vm:72708kB, anon-rss:2212kB, file-rss:35844kB, shmem-rss:0kB [ 677.042894] oom_reaper: reaped process 26703 (syz-executor.3), now anon-rss:0kB, file-rss:34884kB, shmem-rss:0kB [ 677.064513] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 677.082104] CPU: 1 PID: 21034 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 677.088956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.098309] Call Trace: [ 677.100906] dump_stack+0x172/0x1f0 [ 677.104548] dump_header+0x10f/0xb6c [ 677.108272] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 677.113378] ? ___ratelimit+0x60/0x595 [ 677.117282] ? do_raw_spin_unlock+0x57/0x270 [ 677.121699] oom_kill_process.cold+0x10/0x6f5 [ 677.126215] ? task_will_free_mem+0x139/0x6e0 [ 677.130729] out_of_memory+0x79a/0x1280 [ 677.134712] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.139821] ? oom_killer_disable+0x280/0x280 [ 677.144325] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.149444] mem_cgroup_out_of_memory+0x99/0xe0 [ 677.154120] ? memcg_memory_event+0x40/0x40 [ 677.158455] ? _raw_spin_unlock+0x2d/0x50 [ 677.162621] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.167728] try_charge+0xfec/0x1570 [ 677.171441] ? find_held_lock+0x35/0x130 [ 677.175512] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 677.180371] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 677.185222] ? find_held_lock+0x35/0x130 [ 677.189296] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 677.194157] memcg_kmem_charge_memcg+0x7c/0x130 [ 677.198832] ? memcg_kmem_put_cache+0xb0/0xb0 [ 677.203338] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 677.208178] memcg_kmem_charge+0x13b/0x340 [ 677.212404] __alloc_pages_nodemask+0x437/0x710 [ 677.217074] ? __alloc_pages_slowpath+0x2900/0x2900 [ 677.222092] ? lockdep_hardirqs_on+0x415/0x5d0 [ 677.226673] ? trace_hardirqs_on+0x67/0x230 [ 677.230987] ? kasan_check_read+0x11/0x20 [ 677.235123] copy_process.part.0+0x3e0/0x79a0 [ 677.239603] ? mark_held_locks+0x100/0x100 [ 677.243827] ? _raw_spin_unlock+0x2d/0x50 [ 677.247974] ? __might_fault+0x12b/0x1e0 [ 677.252030] ? __cleanup_sighand+0x70/0x70 [ 677.256270] ? lock_downgrade+0x810/0x810 [ 677.260429] _do_fork+0x257/0xfe0 [ 677.263884] ? fork_idle+0x1d0/0x1d0 [ 677.267591] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.272329] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.277080] ? do_syscall_64+0x26/0x610 [ 677.281038] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.286383] ? do_syscall_64+0x26/0x610 [ 677.290344] __x64_sys_clone+0xbf/0x150 [ 677.294305] do_syscall_64+0x103/0x610 [ 677.298180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.303363] RIP: 0033:0x4564fa [ 677.306550] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 677.325447] RSP: 002b:00007fff67681de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 677.333168] RAX: ffffffffffffffda RBX: 00007fff67681de0 RCX: 00000000004564fa [ 677.340440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 677.347692] RBP: 00007fff67681e20 R08: 0000000000000001 R09: 0000000001ce2940 [ 677.354960] R10: 0000000001ce2c10 R11: 0000000000000246 R12: 0000000000000001 [ 677.362218] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff67681e70 [ 677.373437] memory: usage 27300kB, limit 0kB, failcnt 49 [ 677.378777] IPVS: ftp: loaded support on port[0] = 21 [ 677.378987] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 677.391127] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 677.397553] Memory cgroup stats for /syz3: cache:116KB rss:19652KB rss_huge:18432KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19584KB inactive_file:4KB active_file:0KB unevictable:0KB [ 677.420867] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26692,uid=0 [ 677.435671] Memory cgroup out of memory: Kill process 26692 (syz-executor.3) score 9537000 or sacrifice child [ 677.446781] Killed process 26692 (syz-executor.3) total-vm:72444kB, anon-rss:2196kB, file-rss:35824kB, shmem-rss:0kB [ 677.458986] oom_reaper: reaped process 26692 (syz-executor.3), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 677.476905] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 677.488223] CPU: 0 PID: 21034 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 677.495070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.504418] Call Trace: [ 677.507012] dump_stack+0x172/0x1f0 [ 677.510661] dump_header+0x10f/0xb6c [ 677.514395] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 677.519518] ? ___ratelimit+0x60/0x595 [ 677.523415] ? do_raw_spin_unlock+0x57/0x270 [ 677.527836] oom_kill_process.cold+0x10/0x6f5 [ 677.532354] ? task_will_free_mem+0x139/0x6e0 [ 677.536860] out_of_memory+0x79a/0x1280 [ 677.540841] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.545953] ? oom_killer_disable+0x280/0x280 [ 677.550451] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.555583] mem_cgroup_out_of_memory+0x99/0xe0 [ 677.560284] ? memcg_memory_event+0x40/0x40 [ 677.564630] ? _raw_spin_unlock+0x2d/0x50 [ 677.568817] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.573925] try_charge+0xfec/0x1570 [ 677.577643] ? find_held_lock+0x35/0x130 [ 677.581714] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 677.586577] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 677.591425] ? find_held_lock+0x35/0x130 [ 677.595497] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 677.600374] memcg_kmem_charge_memcg+0x7c/0x130 [ 677.605053] ? memcg_kmem_put_cache+0xb0/0xb0 [ 677.609559] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 677.614407] memcg_kmem_charge+0x13b/0x340 [ 677.618650] __alloc_pages_nodemask+0x437/0x710 [ 677.623340] ? __alloc_pages_slowpath+0x2900/0x2900 [ 677.628364] ? lockdep_hardirqs_on+0x415/0x5d0 [ 677.632960] ? trace_hardirqs_on+0x67/0x230 [ 677.637298] ? kasan_check_read+0x11/0x20 [ 677.641461] copy_process.part.0+0x3e0/0x79a0 [ 677.645983] ? mark_held_locks+0x100/0x100 [ 677.650229] ? _raw_spin_unlock+0x2d/0x50 [ 677.654403] ? __might_fault+0x12b/0x1e0 [ 677.658499] ? __cleanup_sighand+0x70/0x70 [ 677.662746] ? lock_downgrade+0x810/0x810 [ 677.666958] _do_fork+0x257/0xfe0 [ 677.670434] ? fork_idle+0x1d0/0x1d0 [ 677.674158] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.678924] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.683680] ? do_syscall_64+0x26/0x610 [ 677.687669] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.693031] ? do_syscall_64+0x26/0x610 [ 677.697001] __x64_sys_clone+0xbf/0x150 [ 677.700958] do_syscall_64+0x103/0x610 [ 677.704849] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.710034] RIP: 0033:0x4564fa [ 677.713213] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 677.732108] RSP: 002b:00007fff67681de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 677.739798] RAX: ffffffffffffffda RBX: 00007fff67681de0 RCX: 00000000004564fa [ 677.747050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 677.754328] RBP: 00007fff67681e20 R08: 0000000000000001 R09: 0000000001ce2940 [ 677.761580] R10: 0000000001ce2c10 R11: 0000000000000246 R12: 0000000000000001 [ 677.768833] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff67681e70 [ 677.777035] memory: usage 24996kB, limit 0kB, failcnt 67 [ 677.782491] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 677.789408] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 677.795613] Memory cgroup stats for /syz3: cache:116KB rss:17488KB rss_huge:16384KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17440KB inactive_file:4KB active_file:0KB unevictable:0KB [ 677.816565] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26557,uid=0 [ 677.831259] Memory cgroup out of memory: Kill process 26557 (syz-executor.3) score 9535000 or sacrifice child [ 677.831322] Killed process 26557 (syz-executor.3) total-vm:72576kB, anon-rss:2208kB, file-rss:35804kB, shmem-rss:0kB [ 677.832620] oom_reaper: reaped process 26557 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 677.854461] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 677.873706] CPU: 0 PID: 21034 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 677.880547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.889892] Call Trace: [ 677.889911] dump_stack+0x172/0x1f0 [ 677.889930] dump_header+0x10f/0xb6c [ 677.896115] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 677.896139] ? ___ratelimit+0x60/0x595 [ 677.896152] ? do_raw_spin_unlock+0x57/0x270 [ 677.896169] oom_kill_process.cold+0x10/0x6f5 [ 677.896187] ? task_will_free_mem+0x139/0x6e0 [ 677.896206] out_of_memory+0x79a/0x1280 [ 677.896224] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.896238] ? oom_killer_disable+0x280/0x280 [ 677.896251] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.896271] mem_cgroup_out_of_memory+0x99/0xe0 [ 677.905097] ? memcg_memory_event+0x40/0x40 [ 677.905117] ? _raw_spin_unlock+0x2d/0x50 [ 677.905130] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.905145] try_charge+0xfec/0x1570 [ 677.913424] ? find_held_lock+0x35/0x130 [ 677.913444] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 677.913459] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 677.922454] ? find_held_lock+0x35/0x130 [ 677.922468] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 677.922498] memcg_kmem_charge_memcg+0x7c/0x130 [ 677.931539] ? memcg_kmem_put_cache+0xb0/0xb0 [ 677.931557] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 677.931572] memcg_kmem_charge+0x13b/0x340 [ 677.941145] __alloc_pages_nodemask+0x437/0x710 [ 677.941163] ? __alloc_pages_slowpath+0x2900/0x2900 [ 677.941179] ? lockdep_hardirqs_on+0x415/0x5d0 [ 677.950157] ? trace_hardirqs_on+0x67/0x230 [ 677.950181] ? kasan_check_read+0x11/0x20 [ 677.959416] copy_process.part.0+0x3e0/0x79a0 [ 677.959436] ? mark_held_locks+0x100/0x100 [ 677.959452] ? _raw_spin_unlock+0x2d/0x50 [ 677.959471] ? __might_fault+0x12b/0x1e0 [ 677.967243] ? __cleanup_sighand+0x70/0x70 [ 677.967259] ? lock_downgrade+0x810/0x810 [ 677.967284] _do_fork+0x257/0xfe0 [ 677.976975] ? fork_idle+0x1d0/0x1d0 [ 677.976998] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.977011] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.977025] ? do_syscall_64+0x26/0x610 [ 677.977051] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.977063] ? do_syscall_64+0x26/0x610 [ 677.977080] __x64_sys_clone+0xbf/0x150 [ 677.977096] do_syscall_64+0x103/0x610 [ 677.977115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.977127] RIP: 0033:0x4564fa [ 677.986015] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 677.986023] RSP: 002b:00007fff67681de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 677.986037] RAX: ffffffffffffffda RBX: 00007fff67681de0 RCX: 00000000004564fa [ 677.986045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 677.986054] RBP: 00007fff67681e20 R08: 0000000000000001 R09: 0000000001ce2940 [ 677.986075] R10: 0000000001ce2c10 R11: 0000000000000246 R12: 0000000000000001 [ 677.986094] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff67681e70 [ 677.987866] memory: usage 22676kB, limit 0kB, failcnt 73 [ 677.995435] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 678.009287] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 678.018850] Memory cgroup stats for /syz3: cache:116KB rss:15344KB rss_huge:14336KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15280KB inactive_file:4KB active_file:0KB unevictable:0KB [ 678.032056] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23457,uid=0 [ 678.044559] Memory cgroup out of memory: Kill process 23457 (syz-executor.3) score 9533000 or sacrifice child [ 678.226247] Killed process 23462 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 678.252831] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 678.264171] CPU: 0 PID: 21034 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 678.271022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.280376] Call Trace: [ 678.282977] dump_stack+0x172/0x1f0 [ 678.287140] dump_header+0x10f/0xb6c [ 678.290867] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 678.295976] ? ___ratelimit+0x60/0x595 [ 678.299872] ? do_raw_spin_unlock+0x57/0x270 [ 678.304315] oom_kill_process.cold+0x10/0x6f5 [ 678.308822] ? task_will_free_mem+0x139/0x6e0 [ 678.313417] out_of_memory+0x79a/0x1280 [ 678.317400] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 678.322506] ? oom_killer_disable+0x280/0x280 [ 678.326989] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 678.332082] mem_cgroup_out_of_memory+0x99/0xe0 [ 678.336737] ? memcg_memory_event+0x40/0x40 [ 678.341050] ? _raw_spin_unlock+0x2d/0x50 [ 678.345193] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 678.350302] try_charge+0xfec/0x1570 [ 678.354021] ? find_held_lock+0x35/0x130 [ 678.358096] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 678.362940] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 678.367768] ? find_held_lock+0x35/0x130 [ 678.371816] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 678.376670] memcg_kmem_charge_memcg+0x7c/0x130 [ 678.381363] ? memcg_kmem_put_cache+0xb0/0xb0 [ 678.385875] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 678.390724] memcg_kmem_charge+0x13b/0x340 [ 678.394966] __alloc_pages_nodemask+0x437/0x710 [ 678.399640] ? __alloc_pages_slowpath+0x2900/0x2900 [ 678.404667] ? lockdep_hardirqs_on+0x415/0x5d0 [ 678.409264] ? trace_hardirqs_on+0x67/0x230 [ 678.413596] ? kasan_check_read+0x11/0x20 [ 678.417753] copy_process.part.0+0x3e0/0x79a0 [ 678.422256] ? mark_held_locks+0x100/0x100 [ 678.426513] ? _raw_spin_unlock+0x2d/0x50 [ 678.430684] ? __might_fault+0x12b/0x1e0 [ 678.434755] ? __cleanup_sighand+0x70/0x70 [ 678.438997] ? lock_downgrade+0x810/0x810 [ 678.443156] _do_fork+0x257/0xfe0 [ 678.446617] ? fork_idle+0x1d0/0x1d0 [ 678.450337] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 678.455098] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 678.459862] ? do_syscall_64+0x26/0x610 [ 678.463860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.469222] ? do_syscall_64+0x26/0x610 [ 678.473203] __x64_sys_clone+0xbf/0x150 [ 678.477178] do_syscall_64+0x103/0x610 [ 678.481070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.486256] RIP: 0033:0x4564fa [ 678.489450] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 678.508359] RSP: 002b:00007fff67681de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 678.516067] RAX: ffffffffffffffda RBX: 00007fff67681de0 RCX: 00000000004564fa [ 678.523346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 678.530622] RBP: 00007fff67681e20 R08: 0000000000000001 R09: 0000000001ce2940 [ 678.537884] R10: 0000000001ce2c10 R11: 0000000000000246 R12: 0000000000000001 [ 678.545175] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff67681e70 20:08:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x7}]}, 0x0, 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0xa}, 0x48) [ 678.554431] memory: usage 22456kB, limit 0kB, failcnt 79 [ 678.559918] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 678.566744] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 678.573341] Memory cgroup stats for /syz3: cache:116KB rss:15344KB rss_huge:14336KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15212KB inactive_file:4KB active_file:0KB unevictable:0KB [ 678.594853] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23457,uid=0 [ 678.610061] Memory cgroup out of memory: Kill process 23457 (syz-executor.3) score 9533000 or sacrifice child [ 678.621161] Killed process 23457 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35808kB, shmem-rss:0kB [ 678.702142] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 678.725712] CPU: 0 PID: 21034 Comm: syz-executor.3 Not tainted 5.0.0+ #7 [ 678.732568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.741921] Call Trace: [ 678.744524] dump_stack+0x172/0x1f0 [ 678.748164] dump_header+0x10f/0xb6c [ 678.751888] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 678.756993] ? ___ratelimit+0x60/0x595 [ 678.760884] ? do_raw_spin_unlock+0x57/0x270 [ 678.765303] oom_kill_process.cold+0x10/0x6f5 [ 678.769895] ? task_will_free_mem+0x139/0x6e0 [ 678.774411] out_of_memory+0x79a/0x1280 [ 678.778397] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 678.783509] ? oom_killer_disable+0x280/0x280 [ 678.788031] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 678.793149] mem_cgroup_out_of_memory+0x99/0xe0 [ 678.797825] ? memcg_memory_event+0x40/0x40 [ 678.802157] ? _raw_spin_unlock+0x2d/0x50 [ 678.806303] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 678.811421] try_charge+0xfec/0x1570 [ 678.815135] ? find_held_lock+0x35/0x130 [ 678.819213] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 678.824065] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 678.828915] ? find_held_lock+0x35/0x130 [ 678.832985] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 678.837842] memcg_kmem_charge_memcg+0x7c/0x130 [ 678.842535] ? memcg_kmem_put_cache+0xb0/0xb0 [ 678.847040] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 678.851890] memcg_kmem_charge+0x13b/0x340 [ 678.856152] __alloc_pages_nodemask+0x437/0x710 [ 678.860840] ? __alloc_pages_slowpath+0x2900/0x2900 [ 678.865863] ? lockdep_hardirqs_on+0x415/0x5d0 [ 678.870452] ? trace_hardirqs_on+0x67/0x230 [ 678.874791] ? kasan_check_read+0x11/0x20 [ 678.878959] copy_process.part.0+0x3e0/0x79a0 [ 678.883467] ? mark_held_locks+0x100/0x100 [ 678.887720] ? _raw_spin_unlock+0x2d/0x50 [ 678.891876] ? __might_fault+0x12b/0x1e0 [ 678.895947] ? __cleanup_sighand+0x70/0x70 [ 678.900189] ? lock_downgrade+0x810/0x810 [ 678.904359] _do_fork+0x257/0xfe0 [ 678.907851] ? fork_idle+0x1d0/0x1d0 [ 678.911589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 678.916353] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 678.921123] ? do_syscall_64+0x26/0x610 [ 678.925113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.930492] ? do_syscall_64+0x26/0x610 [ 678.934497] __x64_sys_clone+0xbf/0x150 [ 678.938487] do_syscall_64+0x103/0x610 [ 678.942391] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.947581] RIP: 0033:0x4564fa [ 678.950773] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 678.969672] RSP: 002b:00007fff67681de0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 678.977380] RAX: ffffffffffffffda RBX: 00007fff67681de0 RCX: 00000000004564fa [ 678.984652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 678.991926] RBP: 00007fff67681e20 R08: 0000000000000001 R09: 0000000001ce2940 20:08:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000640)="005035511200", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) [ 678.999194] R10: 0000000001ce2c10 R11: 0000000000000246 R12: 0000000000000001 [ 679.006494] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff67681e70 [ 679.016045] memory: usage 20120kB, limit 0kB, failcnt 85 [ 679.021544] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 679.028615] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 679.035018] Memory cgroup stats for /syz3: cache:116KB rss:13100KB rss_huge:12288KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13044KB inactive_file:4KB active_file:0KB unevictable:0KB [ 679.055883] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26674,uid=0 [ 679.055934] Memory cgroup out of memory: Kill process 26674 (syz-executor.3) score 9531000 or sacrifice child [ 679.055994] Killed process 26674 (syz-executor.3) total-vm:72444kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB [ 679.092750] oom_reaper: reaped process 26674 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 679.109733] Memory cgroup out of memory: Kill process 25269 (syz-executor.3) score 9291000 or sacrifice child [ 679.121071] Killed process 25269 (syz-executor.3) total-vm:72840kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB [ 679.193812] Memory cgroup out of memory: Kill process 25197 (syz-executor.3) score 9289000 or sacrifice child [ 679.231357] Killed process 25197 (syz-executor.3) total-vm:72708kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB [ 679.333613] Memory cgroup out of memory: Kill process 23473 (syz-executor.3) score 9281000 or sacrifice child [ 679.344275] Killed process 23473 (syz-executor.3) total-vm:72444kB, anon-rss:2188kB, file-rss:34816kB, shmem-rss:0kB [ 679.373037] Memory cgroup out of memory: Kill process 23496 (syz-executor.3) score 9281000 or sacrifice child [ 679.385310] Killed process 23496 (syz-executor.3) total-vm:72444kB, anon-rss:2188kB, file-rss:34816kB, shmem-rss:0kB [ 679.415183] Memory cgroup out of memory: Kill process 23617 (syz-executor.3) score 9281000 or sacrifice child [ 679.425732] Killed process 23617 (syz-executor.3) total-vm:72444kB, anon-rss:2188kB, file-rss:34816kB, shmem-rss:0kB [ 679.457746] Memory cgroup out of memory: Kill process 21034 (syz-executor.3) score 8984000 or sacrifice child [ 679.469466] Killed process 21034 (syz-executor.3) total-vm:72312kB, anon-rss:104kB, file-rss:35712kB, shmem-rss:0kB [ 679.482548] oom_reaper: reaped process 21034 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 20:08:39 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) 20:08:39 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000340)={0xdaf8b6bdd96ce356, 0x70, 0x8, 0xc44, 0x4a, 0x3ff, 0x0, 0x7, 0x0, 0xd, 0x20, 0x0, 0x2, 0x3, 0x0, 0x7fff, 0xffff, 0x4, 0x6, 0xe4, 0x200, 0xfffffffffffffffe, 0x3, 0x8af, 0x0, 0x2, 0x8000, 0x5, 0x80000001, 0x0, 0xfffffffffffffffb, 0x9, 0x4, 0x200, 0x7, 0xc4a, 0x7ff, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0x1, 0x8001}, 0x10, 0x4, 0x0, 0x8, 0x8001, 0x7, 0x5}, 0xffffffffffffff9c, 0xc, 0xffffffffffffff9c, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0xd9cf) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) openat$cgroup_ro(r4, &(0x7f0000000d00)='cpuacct.usage_sys\x00\xaf\xf0\x7f\x06\xc9\x85\xa8\xc2\xee%\x04f\xb8\ffC\xa3Q\xd0L}\xaaR\x05\x96^\rI\xa3\x96Ew!\xce\x99\xf8]\xd8\x8e\xd6\xae$<4&\xbb\x8a;E\x8fnq\xb7UZ\x163\x16\x99\xad\xd1\xd4\xc1\xba\x8aH\xdf\x89\xa4\x90\xbbi\x00\xe5\x1d\xde\xd3\f\xc0\xc2\xf5Fs\x13\xc4\x9ab\x88\xd2\xcd\xe5\xa3\xb7_\xbe6\xc8\x00\x84#C\x82x9Y6\xe6\xa0\xc3\xbe{\x9e>(G\xacM\x89W\x88R\xc10\xb5\xd3\xb8\xcd\xc72iP\x16-5q0r=\x8b\xb1V\xaf\x7f\xf9W\x00\x94}`\x0f\x90\xfetl\x9f!\xcf\xe5nW\x13\xa2>XBwA\xa3^y\x04\x97\x94\xc1\x17m<>\xab\xd6\x11\xd1v\xd4Dw6\xc2\xe9\x83\xf8\xd5Z\x01\x8e\xeb\xfe\xa6\n\xfd\x86\x98\xb3x\x17\xa2-{\xf8\xea\x19\x05\\\x05\x98\x11W@\x9a\xd9\x03/!\xc2x\xcf]S\xb5|\x06\x18\xebg\xe3v\xcc[\x10\xf9+\x1a\x18\xba\xdc\x13\xd3\x0f6\xdbu\xc9\x80\x92U\x9a\x87\b\xccCw\xb6Ev\xf2\x9a\xcb\x1c\x8d\x80\x81\xf1\x8e*\xf3-\xf3`\x95\x0f\xce|:,+}\x86\x979\x11\xefv\xe3\xef', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB]}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x1) perf_event_open(&(0x7f0000000680)={0x4, 0x70, 0xffffffffffffff81, 0x0, 0x7, 0xfffffffffffffffb, 0x0, 0x8, 0x80, 0x2, 0xfffffffffffffffb, 0x373cf82a, 0x6, 0x5, 0x18, 0x800, 0x0, 0x1, 0x0, 0x800, 0x3ff, 0xf3c, 0x1608, 0x3, 0x5822, 0x6, 0x0, 0x415a, 0x1, 0x9, 0x8000, 0x0, 0x6, 0x5, 0x394000000, 0xfffffffffffff000, 0x8, 0x0, 0x0, 0x904e, 0x2, @perf_config_ext={0x72c}, 0x4, 0x7, 0x4, 0x7, 0x5, 0x5, 0x80}, r3, 0x0, r4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000000000000b35554859ee0bf037863707520"], 0x15) 20:08:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) 20:08:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x7fff, 0xa4f, 0xac6, 0x0, 0x81, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x97ba, 0x0, 0x0, 0x8000, 0x0, 0x200, 0x3, 0xffffffffffffffba, 0x5, 0xffffffffffffff7b, 0x0, 0x80000000, 0x8, 0x9, 0x9, 0x0, 0x80000000, 0x7b186aea, 0x61f8, 0x5, 0x0, 0xd48c, 0x9, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xffffffffffffffbd}, 0x1fffe, 0x40, 0x5, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 680.221262] chnl_net:caif_netlink_parms(): no params data found [ 680.252853] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.259814] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.267145] device bridge_slave_0 entered promiscuous mode [ 680.274076] device bridge_slave_1 left promiscuous mode [ 680.282330] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.325659] device bridge_slave_0 left promiscuous mode [ 680.331127] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.636656] device hsr_slave_1 left promiscuous mode [ 682.690048] device hsr_slave_0 left promiscuous mode [ 682.739812] team0 (unregistering): Port device team_slave_1 removed [ 682.750711] team0 (unregistering): Port device team_slave_0 removed [ 682.762654] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 682.803339] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 682.872623] bond0 (unregistering): Released all slaves [ 682.982272] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.988839] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.995744] device bridge_slave_1 entered promiscuous mode [ 683.008317] IPVS: ftp: loaded support on port[0] = 21 [ 683.025451] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 683.039018] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 683.072600] team0: Port device team_slave_0 added [ 683.078994] team0: Port device team_slave_1 added [ 683.150917] device hsr_slave_0 entered promiscuous mode [ 683.188741] device hsr_slave_1 entered promiscuous mode [ 683.340716] chnl_net:caif_netlink_parms(): no params data found [ 683.385043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.426461] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 683.444454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 683.457881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.467644] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.477419] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.487255] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.497754] device bridge_slave_0 entered promiscuous mode [ 683.509824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.517771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.525697] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.532098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.539817] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.550228] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.564618] device bridge_slave_1 entered promiscuous mode [ 683.583323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 683.590518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 683.598792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.606590] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.612996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.620954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 683.650906] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 683.660870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 683.698594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 683.714269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.721992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 683.737065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 683.762795] team0: Port device team_slave_0 added [ 683.770064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 683.781739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 683.792405] team0: Port device team_slave_1 added [ 683.844560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.882401] device hsr_slave_0 entered promiscuous mode [ 683.920884] device hsr_slave_1 entered promiscuous mode [ 683.984117] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.990539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.997258] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.003618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.030170] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.046380] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.098682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.142087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.154189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.164516] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.176046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.184173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 684.194667] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.201093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.223490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 684.248573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 684.256280] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.262859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.317008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 684.335838] oom_kill_process: 6 callbacks suppressed [ 684.335895] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 684.353967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 684.374442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 684.384887] CPU: 0 PID: 26801 Comm: syz-executor.4 Not tainted 5.0.0+ #7 [ 684.391732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.401084] Call Trace: [ 684.403704] dump_stack+0x172/0x1f0 [ 684.407366] dump_header+0x10f/0xb6c [ 684.411103] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 684.416221] ? ___ratelimit+0x60/0x595 [ 684.420122] oom_kill_process.cold+0x10/0x6f5 [ 684.424656] ? task_will_free_mem+0x139/0x6e0 [ 684.429188] out_of_memory+0x79a/0x1280 [ 684.433273] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 684.438033] ? oom_killer_disable+0x280/0x280 [ 684.442568] mem_cgroup_out_of_memory+0x99/0xe0 [ 684.447246] ? memcg_memory_event+0x40/0x40 [ 684.451580] ? cgroup_file_notify+0x140/0x1b0 [ 684.456091] memory_max_write+0x169/0x300 [ 684.460267] ? mem_cgroup_write+0x360/0x360 [ 684.464610] ? lock_acquire+0x16f/0x3f0 [ 684.468587] ? kernfs_fop_write+0x227/0x480 [ 684.472923] cgroup_file_write+0x245/0x7a0 [ 684.477164] ? mem_cgroup_write+0x360/0x360 [ 684.478000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.481511] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 684.481547] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 684.481565] kernfs_fop_write+0x2ba/0x480 [ 684.505121] __vfs_write+0x116/0x8e0 [ 684.508828] ? kernfs_fop_open+0xd90/0xd90 [ 684.513057] ? kernel_read+0x120/0x120 [ 684.516929] ? __lock_is_held+0xb6/0x140 [ 684.520974] ? check_preemption_disabled+0x48/0x290 [ 684.526042] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 684.531515] ? rcu_read_lock_sched_held+0x110/0x130 [ 684.536515] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 684.541254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 684.546774] ? __sb_start_write+0x1ac/0x360 [ 684.551081] vfs_write+0x20c/0x580 [ 684.554608] ksys_write+0xea/0x1f0 [ 684.558128] ? __ia32_sys_read+0xb0/0xb0 [ 684.562179] ? do_syscall_64+0x26/0x610 [ 684.566146] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 684.571505] ? do_syscall_64+0x26/0x610 [ 684.575464] __x64_sys_write+0x73/0xb0 [ 684.579339] do_syscall_64+0x103/0x610 [ 684.583217] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 684.588392] RIP: 0033:0x457f29 [ 684.591569] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 684.610454] RSP: 002b:00007fde489b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 684.618149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 684.625400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 684.632656] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 684.639908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fde489b86d4 [ 684.647161] R13: 00000000004c73a5 R14: 00000000004dcf48 R15: 00000000ffffffff [ 684.669436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 684.678035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 684.685688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 684.693956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 684.701959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 684.709608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 684.717321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 684.721457] memory: usage 7072kB, limit 0kB, failcnt 43 [ 684.726148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 684.730289] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 684.738277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 684.751089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 684.757858] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 684.777474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.790999] Memory cgroup stats for /syz4: cache:24KB rss:2088KB rss_huge:2048KB shmem:80KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2164KB inactive_file:4KB active_file:4KB unevictable:0KB [ 684.827353] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26800,uid=0 [ 684.843385] Memory cgroup out of memory: Kill process 26800 (syz-executor.4) score 9269000 or sacrifice child [ 684.857069] Killed process 26800 (syz-executor.4) total-vm:72448kB, anon-rss:2132kB, file-rss:34816kB, shmem-rss:0kB [ 684.871784] oom_reaper: reaped process 26800 (syz-executor.4), now anon-rss:0kB, file-rss:34728kB, shmem-rss:0kB 20:08:45 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "8b2cd1a2645b90bd81e9bdba300c22445cef32960ae251dafc4a9e180170c57b", "e0089bd9b00a85a870f32dc107378360c7637bf94e50a1a5c60ed6d24f7be6db", "58f235ec623e18203b6679396de43106d16546703bcc8f5677dea8879715b4d0", "a2415cc5aa9fd6d97591f98d61bb3afb200b2fdfb80a3b3848113d800d464e6d", "41310bfcaf30672136b21d22c1bbba3567117d6a2e28d365c81fce42c56c5c2b", "706b2fca5a1214da06aae821"}}) 20:08:45 executing program 0: symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/7, 0x7) 20:08:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0f20d86635200000000f22d80f220067260fed1636f30f2aab00402ef6c6000f21eaf00faba50048baf80c66b8d7513e8b66efbafc0cb002ee0f2370f30f001f"}], 0x0, 0x0, 0x0, 0x121) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:08:45 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000340)={0xdaf8b6bdd96ce356, 0x70, 0x8, 0xc44, 0x4a, 0x3ff, 0x0, 0x7, 0x0, 0xd, 0x20, 0x0, 0x2, 0x3, 0x0, 0x7fff, 0xffff, 0x4, 0x6, 0xe4, 0x200, 0xfffffffffffffffe, 0x3, 0x8af, 0x0, 0x2, 0x8000, 0x5, 0x80000001, 0x0, 0xfffffffffffffffb, 0x9, 0x4, 0x200, 0x7, 0xc4a, 0x7ff, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0x1, 0x8001}, 0x10, 0x4, 0x0, 0x8, 0x8001, 0x7, 0x5}, 0xffffffffffffff9c, 0xc, 0xffffffffffffff9c, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0xd9cf) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) openat$cgroup_ro(r4, &(0x7f0000000d00)='cpuacct.usage_sys\x00\xaf\xf0\x7f\x06\xc9\x85\xa8\xc2\xee%\x04f\xb8\ffC\xa3Q\xd0L}\xaaR\x05\x96^\rI\xa3\x96Ew!\xce\x99\xf8]\xd8\x8e\xd6\xae$<4&\xbb\x8a;E\x8fnq\xb7UZ\x163\x16\x99\xad\xd1\xd4\xc1\xba\x8aH\xdf\x89\xa4\x90\xbbi\x00\xe5\x1d\xde\xd3\f\xc0\xc2\xf5Fs\x13\xc4\x9ab\x88\xd2\xcd\xe5\xa3\xb7_\xbe6\xc8\x00\x84#C\x82x9Y6\xe6\xa0\xc3\xbe{\x9e>(G\xacM\x89W\x88R\xc10\xb5\xd3\xb8\xcd\xc72iP\x16-5q0r=\x8b\xb1V\xaf\x7f\xf9W\x00\x94}`\x0f\x90\xfetl\x9f!\xcf\xe5nW\x13\xa2>XBwA\xa3^y\x04\x97\x94\xc1\x17m<>\xab\xd6\x11\xd1v\xd4Dw6\xc2\xe9\x83\xf8\xd5Z\x01\x8e\xeb\xfe\xa6\n\xfd\x86\x98\xb3x\x17\xa2-{\xf8\xea\x19\x05\\\x05\x98\x11W@\x9a\xd9\x03/!\xc2x\xcf]S\xb5|\x06\x18\xebg\xe3v\xcc[\x10\xf9+\x1a\x18\xba\xdc\x13\xd3\x0f6\xdbu\xc9\x80\x92U\x9a\x87\b\xccCw\xb6Ev\xf2\x9a\xcb\x1c\x8d\x80\x81\xf1\x8e*\xf3-\xf3`\x95\x0f\xce|:,+}\x86\x979\x11\xefv\xe3\xef', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB]}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x1) perf_event_open(&(0x7f0000000680)={0x4, 0x70, 0xffffffffffffff81, 0x0, 0x7, 0xfffffffffffffffb, 0x0, 0x8, 0x80, 0x2, 0xfffffffffffffffb, 0x373cf82a, 0x6, 0x5, 0x18, 0x800, 0x0, 0x1, 0x0, 0x800, 0x3ff, 0xf3c, 0x1608, 0x3, 0x5822, 0x6, 0x0, 0x415a, 0x1, 0x9, 0x8000, 0x0, 0x6, 0x5, 0x394000000, 0xfffffffffffff000, 0x8, 0x0, 0x0, 0x904e, 0x2, @perf_config_ext={0x72c}, 0x4, 0x7, 0x4, 0x7, 0x5, 0x5, 0x80}, r3, 0x0, r4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000000000000b35554859ee0bf037863707520"], 0x15) 20:08:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505331, &(0x7f0000000600)={{0xbf}}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 20:08:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x110000000002, &(0x7f00000005c0)="c8d63f23", 0x4) bind$can_raw(r1, &(0x7f0000000080), 0x10) [ 685.251644] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 685.266853] CPU: 0 PID: 26771 Comm: syz-executor.4 Not tainted 5.0.0+ #7 [ 685.273709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.283062] Call Trace: [ 685.285657] dump_stack+0x172/0x1f0 [ 685.289297] dump_header+0x10f/0xb6c [ 685.293020] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 685.298140] ? ___ratelimit+0x60/0x595 [ 685.302022] ? do_raw_spin_unlock+0x57/0x270 [ 685.306440] oom_kill_process.cold+0x10/0x6f5 [ 685.310954] ? task_will_free_mem+0x139/0x6e0 [ 685.315456] out_of_memory+0x79a/0x1280 [ 685.319455] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 685.324567] ? oom_killer_disable+0x280/0x280 [ 685.329062] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 685.334192] mem_cgroup_out_of_memory+0x99/0xe0 [ 685.338871] ? memcg_memory_event+0x40/0x40 [ 685.343218] ? _raw_spin_unlock+0x2d/0x50 [ 685.347378] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 685.352484] try_charge+0xfec/0x1570 [ 685.356222] ? find_held_lock+0x35/0x130 [ 685.360344] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 685.365227] ? kasan_check_read+0x11/0x20 [ 685.369400] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 685.374253] mem_cgroup_try_charge+0x24d/0x5e0 [ 685.378864] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 685.383800] wp_page_copy+0x408/0x1740 [ 685.387731] ? find_held_lock+0x35/0x130 [ 685.391815] ? pmd_pfn+0x1d0/0x1d0 [ 685.395485] ? lock_downgrade+0x810/0x810 [ 685.399643] ? swp_swapcount+0x540/0x540 [ 685.403715] ? kasan_check_read+0x11/0x20 [ 685.407866] ? do_raw_spin_unlock+0x57/0x270 [ 685.412273] do_wp_page+0x2ed/0x1520 [ 685.415992] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 685.420683] __handle_mm_fault+0x22db/0x3f20 [ 685.425101] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 685.429958] ? find_held_lock+0x35/0x130 [ 685.434029] ? handle_mm_fault+0x322/0xb30 [ 685.438283] ? kasan_check_read+0x11/0x20 [ 685.442440] handle_mm_fault+0x43f/0xb30 [ 685.446517] __do_page_fault+0x5da/0xd60 [ 685.450592] do_page_fault+0x71/0x581 [ 685.455099] ? page_fault+0x8/0x30 [ 685.458632] page_fault+0x1e/0x30 [ 685.462079] RIP: 0033:0x42f0b6 [ 685.465274] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 ac 5e 62 00 85 c0 0f 84 [ 685.484182] RSP: 002b:00007ffd8d4b15b0 EFLAGS: 00010206 [ 685.489561] RAX: 0000000000019691 RBX: 0000000000711640 RCX: 0000000000008041 [ 685.496834] RDX: 0000000001867930 RSI: 000000000186f970 RDI: 0000000000000003 [ 685.504112] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001866940 [ 685.511376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 685.518647] R13: 0000000000711698 R14: 0000000000000000 R15: 0000000000002710 [ 685.531753] memory: usage 4744kB, limit 0kB, failcnt 52 [ 685.537279] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 685.544634] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 20:08:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505331, &(0x7f0000000600)={{0xbf}}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 685.551184] Memory cgroup stats for /syz4: cache:24KB rss:28KB rss_huge:0KB shmem:80KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:4KB active_file:0KB unevictable:0KB [ 685.572436] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26771,uid=0 [ 685.601281] Memory cgroup out of memory: Kill process 26771 (syz-executor.4) score 8751000 or sacrifice child [ 685.615588] Killed process 26771 (syz-executor.4) total-vm:72316kB, anon-rss:68kB, file-rss:34816kB, shmem-rss:0kB [ 685.666096] oom_reaper: reaped process 26771 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 20:08:45 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x140, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 20:08:46 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000340)={0xdaf8b6bdd96ce356, 0x70, 0x8, 0xc44, 0x4a, 0x3ff, 0x0, 0x7, 0x0, 0xd, 0x20, 0x0, 0x2, 0x3, 0x0, 0x7fff, 0xffff, 0x4, 0x6, 0xe4, 0x200, 0xfffffffffffffffe, 0x3, 0x8af, 0x0, 0x2, 0x8000, 0x5, 0x80000001, 0x0, 0xfffffffffffffffb, 0x9, 0x4, 0x200, 0x7, 0xc4a, 0x7ff, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0x1, 0x8001}, 0x10, 0x4, 0x0, 0x8, 0x8001, 0x7, 0x5}, 0xffffffffffffff9c, 0xc, 0xffffffffffffff9c, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0xd9cf) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) openat$cgroup_ro(r4, &(0x7f0000000d00)='cpuacct.usage_sys\x00\xaf\xf0\x7f\x06\xc9\x85\xa8\xc2\xee%\x04f\xb8\ffC\xa3Q\xd0L}\xaaR\x05\x96^\rI\xa3\x96Ew!\xce\x99\xf8]\xd8\x8e\xd6\xae$<4&\xbb\x8a;E\x8fnq\xb7UZ\x163\x16\x99\xad\xd1\xd4\xc1\xba\x8aH\xdf\x89\xa4\x90\xbbi\x00\xe5\x1d\xde\xd3\f\xc0\xc2\xf5Fs\x13\xc4\x9ab\x88\xd2\xcd\xe5\xa3\xb7_\xbe6\xc8\x00\x84#C\x82x9Y6\xe6\xa0\xc3\xbe{\x9e>(G\xacM\x89W\x88R\xc10\xb5\xd3\xb8\xcd\xc72iP\x16-5q0r=\x8b\xb1V\xaf\x7f\xf9W\x00\x94}`\x0f\x90\xfetl\x9f!\xcf\xe5nW\x13\xa2>XBwA\xa3^y\x04\x97\x94\xc1\x17m<>\xab\xd6\x11\xd1v\xd4Dw6\xc2\xe9\x83\xf8\xd5Z\x01\x8e\xeb\xfe\xa6\n\xfd\x86\x98\xb3x\x17\xa2-{\xf8\xea\x19\x05\\\x05\x98\x11W@\x9a\xd9\x03/!\xc2x\xcf]S\xb5|\x06\x18\xebg\xe3v\xcc[\x10\xf9+\x1a\x18\xba\xdc\x13\xd3\x0f6\xdbu\xc9\x80\x92U\x9a\x87\b\xccCw\xb6Ev\xf2\x9a\xcb\x1c\x8d\x80\x81\xf1\x8e*\xf3-\xf3`\x95\x0f\xce|:,+}\x86\x979\x11\xefv\xe3\xef', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB]}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x1) perf_event_open(&(0x7f0000000680)={0x4, 0x70, 0xffffffffffffff81, 0x0, 0x7, 0xfffffffffffffffb, 0x0, 0x8, 0x80, 0x2, 0xfffffffffffffffb, 0x373cf82a, 0x6, 0x5, 0x18, 0x800, 0x0, 0x1, 0x0, 0x800, 0x3ff, 0xf3c, 0x1608, 0x3, 0x5822, 0x6, 0x0, 0x415a, 0x1, 0x9, 0x8000, 0x0, 0x6, 0x5, 0x394000000, 0xfffffffffffff000, 0x8, 0x0, 0x0, 0x904e, 0x2, @perf_config_ext={0x72c}, 0x4, 0x7, 0x4, 0x7, 0x5, 0x5, 0x80}, r3, 0x0, r4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000000000000b35554859ee0bf037863707520"], 0x15) 20:08:46 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x4, &(0x7f0000000540)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x28}]}, &(0x7f0000000200)='\xab\xe5N\xfc\xd4\x15\x7f\x1e\xda\x02\xbf\xa3\x1eO\t\xdaT\xa8w\xd0+\xeb\xe5\x01\xa6O#\x02\x11\xa9\xdd\xc0u^/\xae\xef\x18\xfcT\xaam\xba\xb2#bj\x01\xe8\x7f\x19\xdd\xefj\tA)\x8a\x1e5u:\xd5\x88*\xbb\x19J~\x04N\xb3d\xb4\xad\xa8mBc5\x87S\xfdNh\xd8d\xb9\x80\x14\x1aU\x04\xbaB\x01\xe1\x9a\xe9\x1e\xcf\x03\xa6\x96|\x83.\a\xc7 J\x1d\x8b35\xffi,W\xf3\x8a}Y\xcf\x03\x8e\xc3\xca+\xac\xfb\xd1\xb4\xd4\bm\xe6\xae\x1d\xb85\xcf\xb8\xd9\xab\xb9\b\xa9^\xd6N\xc4)\x8b[\xb3\xa3\xbe\xbc\x04L>\xf5\xf4uv\x1b2\xfc9\xa4\xd8\xf4\xad\x01\a\xe2;\x1e\x8a`\r%\xde\xde\xf46\xbdxF\xd7\xbfI\xdf\xee\x95kc\xad\x87\\\xa4\xc4)8G\x91\x9e\x15u\x0e\xb7h\xc4\xa0\xcae\x97<8\xcdK\xa8R\xad\xf1\xcf$\xa1\x1dN\xfd\xae\x054\x84U\xb6\xdb9\xf2\xa0<\xa2\xb6\x16\t\xe4', 0x1, 0xfb, &(0x7f0000000000)=""/251}, 0x24) 20:08:46 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005440)="2e000000120081aee4050cecdb4cb9040a485e510befccd77f3e9cf0758ef9000600b0eba06ac400040000000000", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2}, 0x0) [ 686.604298] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. [ 686.639439] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. 20:08:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000180007141dffdd946f610500020081001f00000503000800080015001200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 20:08:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 688.288708] IPVS: ftp: loaded support on port[0] = 21 [ 688.717741] IPVS: ftp: loaded support on port[0] = 21 [ 689.090990] IPVS: ftp: loaded support on port[0] = 21 [ 689.139097] IPVS: ftp: loaded support on port[0] = 21 [ 689.582744] chnl_net:caif_netlink_parms(): no params data found [ 690.347137] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.353742] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.361171] device bridge_slave_0 entered promiscuous mode [ 690.383126] chnl_net:caif_netlink_parms(): no params data found [ 690.392088] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.400058] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.406885] device bridge_slave_1 entered promiscuous mode [ 690.466370] chnl_net:caif_netlink_parms(): no params data found [ 690.818605] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 690.857899] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 690.875408] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.882283] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.889871] device bridge_slave_0 entered promiscuous mode [ 690.921951] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.929276] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.936849] device bridge_slave_1 entered promiscuous mode [ 690.970946] team0: Port device team_slave_0 added [ 690.980301] team0: Port device team_slave_1 added [ 690.989278] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 691.004236] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 691.371760] chnl_net:caif_netlink_parms(): no params data found [ 691.398704] team0: Port device team_slave_0 added [ 691.412761] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.419460] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.428003] device bridge_slave_0 entered promiscuous mode [ 691.797768] team0: Port device team_slave_1 added [ 691.808911] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.816452] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.824536] device bridge_slave_1 entered promiscuous mode [ 691.872664] device hsr_slave_0 entered promiscuous mode [ 691.921332] device hsr_slave_1 entered promiscuous mode [ 692.002914] IPVS: stopping backup sync thread 25206 ... [ 692.009816] IPVS: stopping master sync thread 15940 ... [ 692.016186] IPVS: stopping backup sync thread 25031 ... [ 692.033899] device hsr_slave_0 entered promiscuous mode [ 692.062737] device hsr_slave_1 entered promiscuous mode [ 692.135331] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 692.147649] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 692.162411] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.169583] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.177236] device bridge_slave_0 entered promiscuous mode [ 692.251652] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.258431] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.265713] device bridge_slave_1 entered promiscuous mode [ 692.291511] team0: Port device team_slave_0 added [ 692.297914] team0: Port device team_slave_1 added [ 692.357470] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 692.380237] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 692.401504] team0: Port device team_slave_0 added [ 692.413090] team0: Port device team_slave_1 added [ 692.529362] device hsr_slave_0 entered promiscuous mode [ 692.566873] device hsr_slave_1 entered promiscuous mode [ 692.649894] device hsr_slave_0 entered promiscuous mode [ 692.688911] device hsr_slave_1 entered promiscuous mode [ 692.833832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.846581] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.852993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.859692] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.866037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.886284] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.940452] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.948259] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.963027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 692.970141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.026731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 693.038561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 693.046405] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.052817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.060037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 693.068054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 693.075686] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.082095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.088994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 693.096784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 693.104781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 693.112761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 693.122364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 693.129539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 693.157795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.168076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.225809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 693.236979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 693.244874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 693.252912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 693.260391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 693.268420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 693.298519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.314024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.321132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 693.389829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.414371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 693.421351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.432828] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.455245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.471423] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.514878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 693.521745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.529123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 693.537301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 693.545620] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.551996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.559317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 693.567429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 693.575258] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.581617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.595434] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.610627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 693.618282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.626303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 693.634191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 693.642678] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.649103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.657317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 693.727286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 693.735734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 693.743741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 693.754769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 693.763195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 693.771558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 693.779760] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.786109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.793191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 693.802066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 693.810274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 693.818137] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.824489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.831839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 693.840228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 693.848030] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.854390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.861678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 693.877664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 693.885014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 693.892754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 693.901073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 693.910675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 693.919193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 693.927039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 694.013823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 694.021170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.029413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 694.037277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 694.045251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 694.054697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 694.062873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 694.070719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 694.078108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 694.086288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 694.094003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.102129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 694.110750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 694.118390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 694.125962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 694.133864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 694.142608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 694.153442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.169304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 694.177460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 694.178499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 694.192779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 694.211627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.232229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 694.240053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 694.305213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.324573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.346585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.497289] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 694.509035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 20:08:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 20:08:54 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000300)={0x1}) 20:08:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 20:08:54 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000340)={0xdaf8b6bdd96ce356, 0x70, 0x8, 0xc44, 0x4a, 0x3ff, 0x0, 0x7, 0x0, 0xd, 0x20, 0x0, 0x2, 0x3, 0x0, 0x7fff, 0xffff, 0x4, 0x6, 0xe4, 0x200, 0xfffffffffffffffe, 0x3, 0x8af, 0x0, 0x2, 0x8000, 0x5, 0x80000001, 0x0, 0xfffffffffffffffb, 0x9, 0x4, 0x200, 0x7, 0xc4a, 0x7ff, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0x1, 0x8001}, 0x10, 0x4, 0x0, 0x8, 0x8001, 0x7, 0x5}, 0xffffffffffffff9c, 0xc, 0xffffffffffffff9c, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0xd9cf) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) openat$cgroup_ro(r4, &(0x7f0000000d00)='cpuacct.usage_sys\x00\xaf\xf0\x7f\x06\xc9\x85\xa8\xc2\xee%\x04f\xb8\ffC\xa3Q\xd0L}\xaaR\x05\x96^\rI\xa3\x96Ew!\xce\x99\xf8]\xd8\x8e\xd6\xae$<4&\xbb\x8a;E\x8fnq\xb7UZ\x163\x16\x99\xad\xd1\xd4\xc1\xba\x8aH\xdf\x89\xa4\x90\xbbi\x00\xe5\x1d\xde\xd3\f\xc0\xc2\xf5Fs\x13\xc4\x9ab\x88\xd2\xcd\xe5\xa3\xb7_\xbe6\xc8\x00\x84#C\x82x9Y6\xe6\xa0\xc3\xbe{\x9e>(G\xacM\x89W\x88R\xc10\xb5\xd3\xb8\xcd\xc72iP\x16-5q0r=\x8b\xb1V\xaf\x7f\xf9W\x00\x94}`\x0f\x90\xfetl\x9f!\xcf\xe5nW\x13\xa2>XBwA\xa3^y\x04\x97\x94\xc1\x17m<>\xab\xd6\x11\xd1v\xd4Dw6\xc2\xe9\x83\xf8\xd5Z\x01\x8e\xeb\xfe\xa6\n\xfd\x86\x98\xb3x\x17\xa2-{\xf8\xea\x19\x05\\\x05\x98\x11W@\x9a\xd9\x03/!\xc2x\xcf]S\xb5|\x06\x18\xebg\xe3v\xcc[\x10\xf9+\x1a\x18\xba\xdc\x13\xd3\x0f6\xdbu\xc9\x80\x92U\x9a\x87\b\xccCw\xb6Ev\xf2\x9a\xcb\x1c\x8d\x80\x81\xf1\x8e*\xf3-\xf3`\x95\x0f\xce|:,+}\x86\x979\x11\xefv\xe3\xef', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB]}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0x1) perf_event_open(&(0x7f0000000680)={0x4, 0x70, 0xffffffffffffff81, 0x0, 0x7, 0xfffffffffffffffb, 0x0, 0x8, 0x80, 0x2, 0xfffffffffffffffb, 0x373cf82a, 0x6, 0x5, 0x18, 0x800, 0x0, 0x1, 0x0, 0x800, 0x3ff, 0xf3c, 0x1608, 0x3, 0x5822, 0x6, 0x0, 0x415a, 0x1, 0x9, 0x8000, 0x0, 0x6, 0x5, 0x394000000, 0xfffffffffffff000, 0x8, 0x0, 0x0, 0x904e, 0x2, @perf_config_ext={0x72c}, 0x4, 0x7, 0x4, 0x7, 0x5, 0x5, 0x80}, r3, 0x0, r4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000000000000b35554859ee0bf037863707520"], 0x15) [ 696.470272] device bridge_slave_1 left promiscuous mode [ 696.475860] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.519970] device bridge_slave_0 left promiscuous mode [ 696.525611] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.571643] device bridge_slave_1 left promiscuous mode [ 696.577153] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.621333] device bridge_slave_0 left promiscuous mode [ 696.626907] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.681796] device bridge_slave_1 left promiscuous mode [ 696.687292] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.732193] device bridge_slave_0 left promiscuous mode [ 696.737664] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.803541] device bridge_slave_1 left promiscuous mode [ 696.809093] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.863276] device bridge_slave_0 left promiscuous mode [ 696.868891] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.924883] device bridge_slave_1 left promiscuous mode [ 696.930501] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.984563] device bridge_slave_0 left promiscuous mode [ 696.990033] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.475234] device hsr_slave_1 left promiscuous mode [ 706.515440] device hsr_slave_0 left promiscuous mode [ 706.568892] team0 (unregistering): Port device team_slave_1 removed [ 706.579323] team0 (unregistering): Port device team_slave_0 removed [ 706.591754] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 706.638870] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 706.710153] bond0 (unregistering): Released all slaves [ 706.937464] device hsr_slave_1 left promiscuous mode [ 706.999274] device hsr_slave_0 left promiscuous mode [ 707.051530] team0 (unregistering): Port device team_slave_1 removed [ 707.062385] team0 (unregistering): Port device team_slave_0 removed [ 707.072678] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 707.130866] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 707.226465] bond0 (unregistering): Released all slaves [ 707.362827] device hsr_slave_1 left promiscuous mode [ 707.405019] device hsr_slave_0 left promiscuous mode [ 707.487346] team0 (unregistering): Port device team_slave_1 removed [ 707.498572] team0 (unregistering): Port device team_slave_0 removed [ 707.515034] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 707.586468] bond0 (unregistering): Released all slaves [ 707.786658] device hsr_slave_1 left promiscuous mode [ 707.829653] device hsr_slave_0 left promiscuous mode [ 707.879178] team0 (unregistering): Port device team_slave_1 removed [ 707.889198] team0 (unregistering): Port device team_slave_0 removed [ 707.901832] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 707.978142] bond0 (unregistering): Released all slaves [ 708.139428] device hsr_slave_1 left promiscuous mode [ 708.200340] device hsr_slave_0 left promiscuous mode [ 708.252157] team0 (unregistering): Port device team_slave_1 removed [ 708.262361] team0 (unregistering): Port device team_slave_0 removed [ 708.276532] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 708.311183] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 708.417949] bond0 (unregistering): Released all slaves [ 711.548982] ================================================================== [ 711.557815] BUG: KASAN: use-after-free in icmp_sk_exit+0x1ce/0x1f0 [ 711.564160] Read of size 8 at addr ffff888098adeedc by task kworker/u4:7/23885 [ 711.571686] [ 711.573892] CPU: 0 PID: 23885 Comm: kworker/u4:7 Not tainted 5.0.0+ #7 [ 711.580548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.589994] Workqueue: netns cleanup_net [ 711.594047] Call Trace: [ 711.596635] dump_stack+0x172/0x1f0 [ 711.600255] ? icmp_sk_exit+0x1ce/0x1f0 [ 711.604221] print_address_description.cold+0x7c/0x20d [ 711.609590] ? icmp_sk_exit+0x1ce/0x1f0 [ 711.613578] ? icmp_sk_exit+0x1ce/0x1f0 [ 711.617546] kasan_report.cold+0x1b/0x40 [ 711.621612] ? icmp_sk_exit+0x1ce/0x1f0 [ 711.625598] __asan_report_load8_noabort+0x14/0x20 [ 711.630621] icmp_sk_exit+0x1ce/0x1f0 [ 711.634421] ? icmp_glue_bits+0x1e0/0x1e0 [ 711.638560] ops_exit_list.isra.0+0xb0/0x160 [ 711.642989] cleanup_net+0x3fb/0x960 [ 711.648023] ? netns_install+0x1d0/0x1d0 [ 711.652088] ? __lock_is_held+0xb6/0x140 [ 711.656157] ? check_preemption_disabled+0x48/0x290 [ 711.661169] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 711.667005] process_one_work+0x98e/0x1790 [ 711.671253] ? pwq_dec_nr_in_flight+0x320/0x320 [ 711.675939] ? lock_acquire+0x16f/0x3f0 [ 711.679948] worker_thread+0x98/0xe40 [ 711.683742] ? trace_hardirqs_on+0x67/0x230 [ 711.688059] kthread+0x357/0x430 [ 711.691537] ? process_one_work+0x1790/0x1790 [ 711.696046] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 711.701593] ret_from_fork+0x3a/0x50 [ 711.705303] [ 711.706938] Allocated by task 23621: [ 711.710673] save_stack+0x45/0xd0 [ 711.714135] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 711.719069] kasan_slab_alloc+0xf/0x20 [ 711.722955] kmem_cache_alloc+0x11a/0x6f0 [ 711.727116] sk_prot_alloc+0x67/0x2e0 [ 711.730922] sk_alloc+0x39/0xf70 [ 711.734290] inet_create+0x36a/0xe10 [ 711.738025] __sock_create+0x3e6/0x750 [ 711.742620] sock_create_kern+0x3b/0x50 [ 711.746665] inet_ctl_sock_create+0x9d/0x1f0 [ 711.751068] icmp_sk_init+0x11c/0x4c0 [ 711.754854] ops_init+0xb6/0x410 [ 711.758229] setup_net+0x2c5/0x730 [ 711.761765] copy_net_ns+0x1d9/0x340 [ 711.765460] create_new_namespaces+0x400/0x7b0 [ 711.770028] unshare_nsproxy_namespaces+0xc2/0x200 [ 711.774945] ksys_unshare+0x440/0x980 [ 711.778729] __x64_sys_unshare+0x31/0x40 [ 711.782774] do_syscall_64+0x103/0x610 [ 711.786644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 711.791847] [ 711.793465] Freed by task 23885: [ 711.796832] save_stack+0x45/0xd0 [ 711.800297] __kasan_slab_free+0x102/0x150 [ 711.804529] kasan_slab_free+0xe/0x10 [ 711.808324] kmem_cache_free+0x86/0x260 [ 711.812306] __sk_destruct+0x4b6/0x6d0 [ 711.816184] sk_destruct+0x7b/0x90 [ 711.821764] __sk_free+0xce/0x300 [ 711.825234] sk_free+0x42/0x50 [ 711.828438] sk_common_release+0x224/0x330 [ 711.832726] raw_close+0x22/0x30 [ 711.836347] inet_release+0x105/0x1f0 [ 711.840163] __sock_release+0x1fe/0x2b0 [ 711.844145] sock_release+0x18/0x20 [ 711.847762] icmp_sk_exit+0x11f/0x1f0 [ 711.851554] ops_exit_list.isra.0+0xb0/0x160 [ 711.856053] cleanup_net+0x3fb/0x960 [ 711.859781] process_one_work+0x98e/0x1790 [ 711.864026] worker_thread+0x98/0xe40 [ 711.867821] kthread+0x357/0x430 [ 711.871203] ret_from_fork+0x3a/0x50 [ 711.874908] [ 711.876546] The buggy address belongs to the object at ffff888098adedc0 [ 711.876546] which belongs to the cache RAW of size 1328 [ 711.888583] The buggy address is located 284 bytes inside of [ 711.888583] 1328-byte region [ffff888098adedc0, ffff888098adf2f0) [ 711.900528] The buggy address belongs to the page: [ 711.905448] page:ffffea000262b780 count:1 mapcount:0 mapping:ffff8880a6ae1a80 index:0x0 compound_mapcount: 0 [ 711.915405] flags: 0x1fffc0000010200(slab|head) [ 711.920086] raw: 01fffc0000010200 ffff8880a6ae2f48 ffffea000232a608 ffff8880a6ae1a80 [ 711.927958] raw: 0000000000000000 ffff888098ade240 0000000100000005 0000000000000000 [ 711.935844] page dumped because: kasan: bad access detected [ 711.941540] [ 711.943149] Memory state around the buggy address: [ 711.948089] ffff888098aded80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 711.955450] ffff888098adee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 711.962853] >ffff888098adee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 711.970223] ^ [ 711.976445] ffff888098adef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 711.983801] ffff888098adef80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 711.991178] ================================================================== [ 711.998526] Disabling lock debugging due to kernel taint [ 712.004530] Kernel panic - not syncing: panic_on_warn set ... [ 712.012451] CPU: 0 PID: 23885 Comm: kworker/u4:7 Tainted: G B 5.0.0+ #7 [ 712.020800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.030597] Workqueue: netns cleanup_net [ 712.034659] Call Trace: [ 712.037341] dump_stack+0x172/0x1f0 [ 712.040959] panic+0x2cb/0x65c [ 712.044150] ? __warn_printk+0xf3/0xf3 [ 712.048035] ? icmp_sk_exit+0x1ce/0x1f0 [ 712.052266] ? preempt_schedule+0x4b/0x60 [ 712.056419] ? ___preempt_schedule+0x16/0x18 [ 712.060837] ? trace_hardirqs_on+0x5e/0x230 [ 712.065155] ? icmp_sk_exit+0x1ce/0x1f0 [ 712.072468] end_report+0x47/0x4f [ 712.075916] ? icmp_sk_exit+0x1ce/0x1f0 [ 712.079905] kasan_report.cold+0xe/0x40 [ 712.084246] ? icmp_sk_exit+0x1ce/0x1f0 [ 712.088682] __asan_report_load8_noabort+0x14/0x20 [ 712.094471] icmp_sk_exit+0x1ce/0x1f0 [ 712.100879] ? icmp_glue_bits+0x1e0/0x1e0 [ 712.105741] ops_exit_list.isra.0+0xb0/0x160 [ 712.110152] cleanup_net+0x3fb/0x960 [ 712.113876] ? netns_install+0x1d0/0x1d0 [ 712.117926] ? __lock_is_held+0xb6/0x140 [ 712.122004] ? check_preemption_disabled+0x48/0x290 [ 712.127025] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 712.132491] process_one_work+0x98e/0x1790 [ 712.136730] ? pwq_dec_nr_in_flight+0x320/0x320 [ 712.142268] ? lock_acquire+0x16f/0x3f0 [ 712.146234] worker_thread+0x98/0xe40 [ 712.150027] ? trace_hardirqs_on+0x67/0x230 [ 712.154339] kthread+0x357/0x430 [ 712.157692] ? process_one_work+0x1790/0x1790 [ 712.162173] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 712.167716] ret_from_fork+0x3a/0x50 [ 712.172217] Kernel Offset: disabled [ 712.176381] Rebooting in 86400 seconds..