[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.887458][ T26] audit: type=1800 audit(1574626481.150:25): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.927213][ T26] audit: type=1800 audit(1574626481.150:26): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.961358][ T26] audit: type=1800 audit(1574626481.150:27): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. 2019/11/24 20:14:52 fuzzer started 2019/11/24 20:14:53 dialing manager at 10.128.0.26:32963 2019/11/24 20:14:54 syscalls: 2566 2019/11/24 20:14:54 code coverage: enabled 2019/11/24 20:14:54 comparison tracing: enabled 2019/11/24 20:14:54 extra coverage: extra coverage is not supported by the kernel 2019/11/24 20:14:54 setuid sandbox: enabled 2019/11/24 20:14:54 namespace sandbox: enabled 2019/11/24 20:14:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/24 20:14:54 fault injection: enabled 2019/11/24 20:14:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/24 20:14:54 net packet injection: enabled 2019/11/24 20:14:54 net device setup: enabled 2019/11/24 20:14:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/24 20:14:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 20:17:26 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) 20:17:27 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) madvise(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x100000002) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) dup2(r2, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) pipe(&(0x7f0000000580)) syzkaller login: [ 209.879789][ T8023] IPVS: ftp: loaded support on port[0] = 21 [ 209.935149][ T8025] IPVS: ftp: loaded support on port[0] = 21 [ 210.040304][ T8023] chnl_net:caif_netlink_parms(): no params data found 20:17:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 210.152750][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.168441][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.187917][ T8023] device bridge_slave_0 entered promiscuous mode [ 210.234291][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.257286][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.266239][ T8023] device bridge_slave_1 entered promiscuous mode 20:17:27 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x2, 0x0, 0x0, 0x4}}, 0xe) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = open(0x0, 0x418000, 0x9) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e21, 0x6, @loopback, 0x7}, {0xa, 0x4e24, 0x0, @empty}, 0x62d3, [0x1f, 0x0, 0xfff, 0x2, 0x4, 0xfff, 0x0, 0x6]}, 0x5c) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b24, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b24, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) tkill(0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) dup(0xffffffffffffffff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) fcntl$dupfd(r7, 0x0, r8) utimensat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 210.290816][ T8025] chnl_net:caif_netlink_parms(): no params data found [ 210.319919][ T8029] IPVS: ftp: loaded support on port[0] = 21 [ 210.362170][ T8023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.410043][ T8023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.422355][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.437274][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.445779][ T8025] device bridge_slave_0 entered promiscuous mode [ 210.487372][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.494519][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.517570][ T8025] device bridge_slave_1 entered promiscuous mode [ 210.544007][ T8023] team0: Port device team_slave_0 added [ 210.581432][ T8031] IPVS: ftp: loaded support on port[0] = 21 20:17:27 executing program 4: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/86, 0x56}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 210.593295][ T8023] team0: Port device team_slave_1 added [ 210.602147][ T8025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.616536][ T8025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.712577][ T8023] device hsr_slave_0 entered promiscuous mode [ 210.787547][ T8023] device hsr_slave_1 entered promiscuous mode 20:17:28 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x2, 0x0, 0x0, 0x4}}, 0xe) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) open(0x0, 0x418000, 0x9) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e21, 0x6, @loopback, 0x7}, {0xa, 0x4e24, 0x7f, @empty}, 0x0, [0x1f, 0x0, 0xfff, 0x2, 0x4, 0xfff, 0x0, 0x6]}, 0x5c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b24, 0x0) dup(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) [ 210.866975][ T8025] team0: Port device team_slave_0 added [ 210.896493][ T8025] team0: Port device team_slave_1 added [ 210.913652][ T8033] IPVS: ftp: loaded support on port[0] = 21 [ 211.171521][ T8025] device hsr_slave_0 entered promiscuous mode [ 211.249430][ T8025] device hsr_slave_1 entered promiscuous mode [ 211.269387][ T8025] debugfs: Directory 'hsr0' with parent '/' already present! [ 211.316922][ T8029] chnl_net:caif_netlink_parms(): no params data found [ 211.421124][ T8056] IPVS: ftp: loaded support on port[0] = 21 [ 211.628661][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.635770][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.705318][ T8029] device bridge_slave_0 entered promiscuous mode [ 211.742388][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.809442][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.848305][ T8029] device bridge_slave_1 entered promiscuous mode [ 211.914954][ T8031] chnl_net:caif_netlink_parms(): no params data found [ 212.129825][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.161005][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.254637][ T8029] team0: Port device team_slave_0 added [ 212.279785][ T8029] team0: Port device team_slave_1 added [ 212.337809][ T8023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.354173][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.377326][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.397631][ T8031] device bridge_slave_0 entered promiscuous mode [ 212.474034][ T8029] device hsr_slave_0 entered promiscuous mode [ 212.540055][ T8029] device hsr_slave_1 entered promiscuous mode [ 212.557501][ T8029] debugfs: Directory 'hsr0' with parent '/' already present! [ 212.583549][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.590844][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.599313][ T8031] device bridge_slave_1 entered promiscuous mode [ 212.695183][ T8033] chnl_net:caif_netlink_parms(): no params data found [ 212.726790][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.758520][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.824129][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.873345][ T8023] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.940936][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.984153][ T8025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.071880][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 213.154294][ T8025] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.194134][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.233060][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.258070][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.265380][ T8055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.331327][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.359584][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.405917][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.413110][ T8055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.427578][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.436893][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.479963][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.490025][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.500543][ T8033] device bridge_slave_0 entered promiscuous mode [ 213.511800][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.518977][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.526789][ T8033] device bridge_slave_1 entered promiscuous mode [ 213.536776][ T8031] team0: Port device team_slave_0 added [ 213.544253][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.552537][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.561589][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.570573][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.580900][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.589678][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.598631][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.606916][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.614023][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.622637][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.633752][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.652196][ T8031] team0: Port device team_slave_1 added [ 213.729168][ T8031] device hsr_slave_0 entered promiscuous mode [ 213.777640][ T8031] device hsr_slave_1 entered promiscuous mode [ 213.837352][ T8031] debugfs: Directory 'hsr0' with parent '/' already present! [ 213.860423][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.880236][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.906076][ T8056] device bridge_slave_0 entered promiscuous mode [ 213.940679][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.953920][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.965616][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.981619][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.010465][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.017721][ T8055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.039773][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.059804][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.091219][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.118579][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.127393][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.160302][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.188602][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.218435][ T8023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.226490][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.247608][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.255698][ T8056] device bridge_slave_1 entered promiscuous mode [ 214.305440][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.320999][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.334214][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.358158][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.372392][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.381690][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.431727][ T8033] team0: Port device team_slave_0 added [ 214.478969][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.509563][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.552997][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.564968][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.578815][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.596175][ T8033] team0: Port device team_slave_1 added [ 214.629364][ T8023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.638550][ T8025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.651878][ T8025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.670748][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.688779][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.711203][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.728863][ T8029] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.769338][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.787847][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.798226][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.870664][ T8033] device hsr_slave_0 entered promiscuous mode [ 214.928582][ T8033] device hsr_slave_1 entered promiscuous mode [ 214.967658][ T8033] debugfs: Directory 'hsr0' with parent '/' already present! [ 214.975397][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.984333][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.993138][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.000344][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.013842][ T8056] team0: Port device team_slave_0 added [ 215.021996][ T8056] team0: Port device team_slave_1 added [ 215.043597][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.056820][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.066735][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.080066][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.087833][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.154175][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.179548][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.195554][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.205348][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.221453][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.236132][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.245539][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.254987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.266281][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.274558][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.290627][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.300904][ T8025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.350012][ T8056] device hsr_slave_0 entered promiscuous mode [ 215.390661][ T8056] device hsr_slave_1 entered promiscuous mode [ 215.427442][ T8056] debugfs: Directory 'hsr0' with parent '/' already present! [ 215.453396][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.462033][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.478279][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.547975][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.572406][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.650309][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.674568][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:17:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = getpid() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1c5402, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000040)=0x9) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 215.769461][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.838013][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.846515][ T3218] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.853673][ T3218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.987696][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.018733][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.055057][ T3218] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.062247][ T3218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.088420][ T8219] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 216.143438][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.267543][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.275648][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.335856][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.403371][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.424609][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.495160][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.543470][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.570576][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.614902][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.649996][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.690062][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.746561][ T8031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.823249][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.892765][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.915996][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.962246][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.974628][ C1] hrtimer: interrupt took 46250 ns 20:17:34 executing program 0: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) [ 217.025813][ T8033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.090475][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.122453][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 20:17:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x1}) io_setup(0xffffffff, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)="18", 0x1}]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 217.149001][ T8033] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.155920][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.168583][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.176145][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.217857][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.263831][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.333001][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.345867][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.354123][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.368326][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 20:17:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) sendto$inet(r2, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_OPERSTATE={0x8, 0x28}, @IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x3c}}, 0x0) [ 217.377032][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.384428][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.393054][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 20:17:34 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r1 = eventfd(0x7) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x1, r1}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 217.451133][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.472471][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.505759][ T3218] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.512947][ T3218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.532412][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.548239][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 20:17:34 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) setxattr$security_evm(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000180)=@ng={0x4, 0x8, "38cfcb5bcb52"}, 0x8, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) getpid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendto$inet(r1, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x1, 0x0, "4ada24feafa969169e33d711e01f2f9af62305f248bb26f3cb22ec8b67ed07dc7c2719b1577a7cf4e64b3a9cccef88553f6688c3eb28c41810c2c975a342b7620305c58d9da54c3fdab9031d1e370cd5"}, 0xd8) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x2) pkey_free(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') r3 = syz_open_procfs(0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$TCSETS2(r3, 0x402c542b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000400)='TRUE', 0x4, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000008000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8, 0x15]}, 0x73}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) 20:17:34 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000000)={{0x0, @addr=0x10001}, 0x8, 0x5, 0x7f}) write$binfmt_elf64(r1, &(0x7f0000001380)=ANY=[@ANYRES16, @ANYRESHEX=0x0], 0x14) [ 217.569745][ T3218] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.576921][ T3218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.614068][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.624687][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.694761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.703701][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.720757][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.727996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state 20:17:35 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x80003, 0x0) r3 = semget(0x2, 0x2, 0x20) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) sendto$inet(r5, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$netlink(r5, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000c0004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) [ 217.739557][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.748799][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.761305][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.771759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.820326][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.829102][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.843802][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.853704][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.862797][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.871422][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.880400][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.888995][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.899647][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.032265][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.124220][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.137481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 218.139604][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.143502][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 218.163693][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 20:17:35 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$NBD_DO_IT(r0, 0xab03) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') [ 218.173947][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.204686][ T8056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.218814][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.239099][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.252487][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.265907][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.289783][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.300924][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.329697][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.338356][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.345896][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.375956][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 20:17:35 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x2, 0x0, 0x0, 0x4}}, 0xe) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = open(0x0, 0x418000, 0x9) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e21, 0x6, @loopback, 0x7}, {0xa, 0x4e24, 0x0, @empty}, 0x62d3, [0x1f, 0x0, 0xfff, 0x2, 0x4, 0xfff, 0x0, 0x6]}, 0x5c) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b24, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b24, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) tkill(0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) dup(0xffffffffffffffff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) fcntl$dupfd(r7, 0x0, r8) utimensat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 218.398276][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.420789][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.439806][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.447796][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 20:17:36 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x144c0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) clock_getres(0x3, &(0x7f0000000200)) connect$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000080)) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000001c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000280)=0x6, 0x4) 20:17:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000010000507000000000000000000000000f985bb0705f8931f11de113adf9da53062f99ca062fbfc779a77187e54551e0bff8814ed70e2d6658cd33abacb93076fa58a528a52d4e939e6651587b5b33d5e2f4eb8bee71514eaa5851e327a79a753cdd8d9a314613c95ec60d02c1bd3bd922df355c931d0b68d9ddd59e47a0e35195654982b01cc19d49a6a41e474d2a4c89523c86bc08fe996e03c480c1f124164732e359f8bc3d83fc990773ab41101b3b215", @ANYRES32=r4, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) 20:17:36 executing program 0: r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x8080) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) open(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getresuid(0x0, 0x0, &(0x7f0000000d80)) getegid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0x0, 0x0, 0xee01}, 0xa99, 0x6}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(0x0, 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x0, 0x1}) socket(0x200000000000011, 0x4000000000080002, 0x0) socket(0x1e, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) socket(0x80000000000000a, 0x0, 0x0) r4 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) socket(0x1e, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141242, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) syz_open_dev$sndpcmc(0x0, 0x101, 0x400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) 20:17:36 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="00bc100000000000000fa00000000000009500000000000000"], &(0x7f0000003ff6)='OPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 20:17:36 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x2, 0x0, 0x0, 0x4}}, 0xe) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = open(0x0, 0x418000, 0x9) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e21, 0x6, @loopback, 0x7}, {0xa, 0x4e24, 0x0, @empty}, 0x62d3, [0x1f, 0x0, 0xfff, 0x2, 0x4, 0xfff, 0x0, 0x6]}, 0x5c) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b24, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b24, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) tkill(0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) dup(0xffffffffffffffff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0) fcntl$dupfd(r7, 0x0, r8) utimensat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20:17:36 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xb8b080, 0x0) write$capi20_data(r1, &(0x7f0000000100)=ANY=[], 0x0) fadvise64(r0, 0x9, 0xffff, 0x3) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="019be5811ceef04be61f7faa4167875b90f54837051ea89f2aaf9d0474b98db7935182f6b3c93226a73a1cc86d743cbbab47443da1289b8915909fb1a9b06e8241a90d6b31d4cb31758fda8ff1e6f4dc8142bc77b4658a68192d27d1b0418b0a4d102aa87a309056170277f7e8520d714e4b647971d8f7e178f13892e8a6c1768713c3905dbe9c24039e5b703cea2720e15828c4c904", 0x96, 0x4000010, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @local, 0x4939}, 0x1c) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="fdc7630594c8", 'hsr0\x00'}}, 0x1e) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x1000009}, 0x1c, &(0x7f00000002c0)}}, {{&(0x7f0000001b40)={0xa, 0x0, 0x0, @rand_addr="c0fa339af2fc5c4073b87b8c7fa5c61c"}, 0x1c, &(0x7f00000021c0)}}], 0x2, 0x200000c2) [ 218.995022][ T8361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:17:36 executing program 1: socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0xa23eb1885f34d60b, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x80006) r2 = open(&(0x7f0000862000)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xf, 0x6, 0x1f, 0x800, 0x3, r1, 0x40, [], 0x0, r3, 0x4, 0x2}, 0x3c) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)={0x0, 0x2, 0x40, &(0x7f0000000000)=0x7}) get_mempolicy(0x0, &(0x7f0000000540), 0x1, &(0x7f0000ffc000/0x2000)=nil, 0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) 20:17:36 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x9, "0000010000000000080044944eeb921a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x2f6) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000100)={0x53, 0x7f, 0x6}) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x406000) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000001c0)=""/90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 219.212675][ T8375] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 219.237712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 219.243571][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 219.317220][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 219.323226][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:17:36 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000eaffffff00ec2b0012000c000100626f7d01000000001c0502f3000800b85363f47b01f0eb375160d943128842015c", @ANYRES32=0x0], 0x4c}}, 0x0) 20:17:36 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x880) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[]], 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'syzkaller0\x00'}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x8}, @in={0x2, 0x4e23, @broadcast}], 0x3c) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 219.382450][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:17:36 executing program 5: set_tid_address(&(0x7f0000000080)) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0x6000, 0x81, 0xfffffffb, 0xb5}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x480, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x500200) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='9p\x00', 0x200002, &(0x7f0000000040)=ANY=[]) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) sendto$inet(r5, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\b'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x13c, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x6c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe57}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x925}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc2}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb48}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1a3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @rand_addr="cd09957d52ef0865942b24d0d1f40083", 0xfffff000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000001}, 0x22010041) [ 219.628068][ T8396] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.646373][ T8398] tipc: Started in network mode [ 219.652934][ T8398] tipc: Own node identity , cluster identity 4711 [ 219.668007][ T8398] tipc: Failed to set node id, please configure manually 20:17:37 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f00000005c0)='/dev#\x00\x00\x00\a\x00', 0x0, 0x10182) r1 = gettid() kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000780)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\x01\x83Z\xc4\x06S$\ah\x93\xff\xf7Z\xcb\v1\xf2\xc4\x85\x85\xa6\xfa\x15\x10\xa8\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xd5\x12\xc7\x1ee\x86\xcc\xdb/\xc5\x97\xea\x93\xa7\xde\xc9u\xb1\x9f\xce\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|h$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3We\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xfb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xfc\xe1\t]\x84J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17\x85\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?2,\x89\xb1%p\x8a\r\f\xe0,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa[\xa7\x02\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\xd1`\x88\xf4K\xe7\x80\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\t\x91\xa3\"\x85H@\xb9\x97\bZ\xa5(S\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\xbc\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6\xaa`\x88\x8a\xf4u$\x17\xff\xdbR\x02\xe8V\xdc\xb8]F\xdap\xf7\xdf~G\xe1\xe8\xd2\xe6\x1d\x9b/\xd8\x93F\xcf\xae]\xbb\xa6\x85\x1d/\xef\xf8\xfb>\x9e{\\\x1e\xf1i~\xee\xbb\x1e\x93SN\nA\x99\xd8\xa1y\x185\x86\xbe\x1eU\x9b4\xeem\xaa\xae\x1b\xb09\x9f.\xa3\xc0\xe6C\xc8~\xd8\x95f\xfbF\x05\xb9\xbde\n\x82\x91\r\xf0\x16\xbe[\x00H\x96\x7f8\x7fx\x06\xe9\x0fa\xfa\x1eg)\xc1vaG=a\xf10\x04rw\x0f\xbb%\xc6f\x81\xbaEO\x80\xc3Tc\xc4\xc0\x14\t#2\xd8\xe8\xecX4H\xf0\xc3\'\xba[\xd3}\x16\xa3\xf3\n\x00\xdd\xf3\x81\xaa\x99\xcb(\xb2\x19C\xe4\xc9\x87\x9a\x8c\xbd\xa0\x9cW\a\xb6\xc2R\xabn\xf2', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x1, 0xd1, 0xff, 0x0, 0x5, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x636c}, 0x12002, 0x6, 0x8, 0x7, 0x8a, 0x0, 0x8001}, 0x0, 0x0, r2, 0xb) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000000000000000000000100"/32]) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0xda4fff08) r4 = socket$kcm(0xa, 0x2, 0x11) sendmsg$inet(r4, &(0x7f0000006500)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000006340)=ANY=[@ANYBLOB="11000000000000002900000032000000", @ANYRES32, @ANYBLOB="7f000001ac1414bb"], 0x1c}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r3}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000380)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x92, 0x2, 0x2, 0x0, 0x2000000c, 0x84000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4408, 0x10000000000, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x660c, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 219.689163][ T8398] tipc: Enabling of bearer rejected, failed to enable media 20:17:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x7a00, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {}, 0x593b9214c4d8fd8e}) 20:17:37 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="2c000000130035860000ff07000000", @ANYRES32, @ANYBLOB="02000005000023000c001a0007000000af000400f4b863fcf9b3a8acfba52fc7ca9bb09c55956e7f67914223735a2e6f0e27befafd976cd2149ded4e58ac6eb763d1d3d3747458ac867ba5e9fbe1883888060203f378b0544138c12f193767cdfc18a34ae738ac17393ab8b3005f9e7c63e8b2154cad45f8293b18a5cfbf1791a35b8a10a4544283a95cf6e1ca7c0259712f9a66c6fd854af4ce0a0973ac716f43e14b3de110a262bf06f9f7e61e772de361bb2f2475d935c55cd1008390b171"], 0x2c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x2, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) [ 219.935652][ T8408] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 219.950906][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.011876][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:17:37 executing program 0: syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x8}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xffff, @mcast2}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000180)="f58267b9b2519053e16b744bf77ea408faadf501c4bc4153fdcbb20eda284affe8756fbcecb484f17cb02928c8fc3ef5dfa187104a38c3c429b2fe328a8e1a963f3af21d53b643678f4aa3281c966b2ea9a8ac8f7c3b823fdb4e7d5a172cfc3ac596", 0x62}, {&(0x7f0000000200)="1bc02d2cda836a503359a3a675c97cff36041be67f51fd8a9c909aa261d4238bdc2e230cb55406cbd306da79584f36041bce783109c14d010a97c2d41a9d1414a5", 0x41}, {&(0x7f0000000540)="d1304cb2e7ab4928c57fc5886261c1ab00646e70fe399cee90ac67e7baa62cd0adb14d68fd34a686a711ac7e242ddd962dbbc25453dc0fa7d6d0b5a7aed98d19edce07218e17c3065a08e02fd5e471e5545f15c6d3be75f3241d9ccc3382024c8e2f78bbacbf1f667b58498a1b7d3dc448baceae688a9bf128d42f348d78891b6f72b81a50e8b60cac2fdc5f7c8d943ed4edbc50c82a33a8c77d736e71b6d770cc070f10c67ac286d959b5b3d0f8ba0ba560734d0c6f9baa2710ac7542d56e4006aefc53007c1272b330f1", 0xcb}, {&(0x7f0000000740)="32886fdd8c81fe259897bef4dcd46d04d5b0d729046c4af9d2cf76fa46594709b6296f45ed920c074424d9267ff058f2f2156948a029d568b795d23af21589259e006587e2701ca6a2f83f8dceee87df0e31ed96376cc77a07903cd449669c4234f1640f5aa591c9876193c1104ade3e2214763cac2601816415247a4c3bd7005c4f6743c218a788dc919ed4ccc708c52132a225facf1b95a3a55d174b4d3727e23343f4277602557ba94e88ea7dc8c8f2cc236b44552975", 0xb8}], 0x4, &(0x7f00000008c0)=[@rthdrdstopts={{0x1e0, 0x29, 0x37, {0x32, 0x38, [], [@pad1, @generic={0x1, 0x90, "cfdd3a5f85736e17b10df68ec9e56cb0d309097d1254f29a40c34ba4fc47a0397e7cd41c052abe15f3c9d590eb9d371c278481e922e04d9fc07d8e06911dcf5d62e141b142adab2fd90e540d11b7becf99333637147b8b3e500a42d9b414abdb3830de0009dc597663bdf6773d69105962c1416c38218498eaadbdbf9d4c589c4357d3552a29488ed77d6ec21a74b436"}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @empty}, @generic={0x81, 0x3b, "13e6a8c5f09129ff67924db79bcb323abafc59f116714a9234af9586cbbaf08a36febe8e317723f3b7bf29b3cdc5591bc2ca3019e75deed2d7d7ff"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xc5, "09ebb5726dcea93fa67b2ce3a9d2332b3335da60d0e4f06c923d8ab9d605cf90b5a0e2759f586208c018270804414a211b90dee28e17760cf3bf7e1d9e6605727b23f4543e62a11c71f3f9aa630363bd0b535b69bb8fa6da3deab4b21664e99b3636f1e18f13bd187a3ed30aa879e61838d0a062617d319992b5e46830f22b14e8e9901400e16bde215fa4ae08a7d9476323632c8d2d3c65d075179e869b68ec297a768b00170660c621c154d9290e4840b26e2cd8e2f5a48b915bd9a78c4705521b8fa576"}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x89, 0x2, 0x0, 0x8, 0x0, [@loopback]}}}], 0x208}}], 0x1, 0x80) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/233, 0xffbe) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) socket$inet6(0xa, 0x2, 0x0) open(0x0, 0x8001141042, 0x0) 20:17:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40800002c000107f1ff58980000000000000000", @ANYRES32=r3, @ANYBLOB="000005000000000006000008900001007533320088080200240105000cff080000058000a30ee30000000000000000010000003f0800000006000000ffffffff0000000308000000020000000000000200000004ff0700001f00000000000400000000018b0700008800000000000001000000020100000005000000000000020000080006000000ea00000000000060000000000002000000000000000000040000000300010000000100000000000600000006000509000000ffff00000000000700000001010000000700000026d9c9ac005c540208000000aaed000000000003fffffffd05000000010000000000000000000000dc000000000001000000ffff000000012a6a000001000000000000090000000140000000080000000000076600000005fcffffffe203000004040500028b070066520100050001000000000300000003000000040200000006000000fffffff7ffffffc0040000000300000000000020000001ffa80c000000000000000000020000000508000000d3000000000005f90000007f7d574e6d0700000000000009339e00007104000001f8ffff0000003f0000000000100000000000000000000000006b806200000014000000000046d9fffffff901040000070000000000000700000000ad000000010000000000000900000006000000004020000000000ea100006d430700000009000000000001870000003f070000000500000000000006ffff0000090000007f0000000000002000000001000000000600000000000400000000070000000050000000000000c600000007ffffffff030000000000000200000009faffffff0008000000000efc00000000010000000000010000000080000000066e00000004000000000000020000002200000000800000000000010000000006ff7f00000900000000000001fffffffd01000000030000000000003f0000000008000000150f0000000000be000006c7010400000100010000000003ffffffff0800000009000000000000600000000605000000080000000000000300000006010100000400000000008001000001010000000004000000ffff000000000003030000002e000000000007ff00000007ff0f0000ca00000000008001ffffffff0400000000000000000000010000c384050000006800000000000fff0000007f07000000030000000000000200000000010100000800000000000005000000030000000009000000ffffffff000007ff02000000010001000000f19000000065080000000300000000000000000002440400000000100000000005d10000000601010000050000000000008100007fff000200000800000000000000000000071901000028b100000000003f000002d200000000030000000000008000000004740c000001040000000000060000072103000000080000000000000700000008000200000800000000000065000000bf0500000022000000fffffffd000000037f0000000200000000000008000000090104000001000000000000000000000401000000080000000000000000000001070000000600000000000005000000070100000002100000000000070001000104000000b9000000000000040000000603000000030000000000000700000002030000007f0e000000000005000000090600000000000000ffffffff000000d1690000004d5700000000000800000001ffffffff0900000000000000000000a17f000000080000005485bb1a0000000581ffffff490700002800000000000008f7090000ffff000000000e910000003004000000e0ffffff00000001fffff0007f00000001000100a4010500100103000007030004005ec900000008000000070000000700000000e3a60000000000000000002004000000fffffffffffffff7000000200900000000000000000000010000000307000000380400000000000300000001070000000000000000000003000000070900000000000000000000ff0000010001000100070000000000000300000008dc320000030000008000000100001f1a060000000100008000000003ffffffff07000000ffffffff0000000100000005030000000800000000000000000000030100000000000000000000010000ffff000100000700000000000bb200000008070000000180000000000800000100010000000092000000000000da0000443307000000280d00000000000100000020020000000700000000008000000063e93b00000003000000000000040000077e0500000004000000fffffffd000080000101000000000100000080017fffffff1f000000010400000000000400000008fffbffff0008000000007750000000ff670000000200000000000008fffffffe0300000005000000000000cc0000007f0800000000000000140008006e6c6d6f6e3000000000000000000000a40105000d07010001ff0600001b000003ff80000001000002000200000001fcffff000032e50000010000000000020000000000001d00010000020000007f000000ffffe728000009c3080000009ae7ffff000000040000000400000100ffff00000000095900000001080000003b000000000000ff00000009ffffff7f0100000000000200000000000700000003000000800000008000000003000000b42200000000000500007fff0800000005000000000000ff000000000001000006fb8fce4635c5000000000000040000000701000000ff0f0000ffffffff00000004ff000000ff7f000080000000000000061a000000010100000000b53600000001e4000000030000000000ff270000001f200000003f000000fffffff90000000501000000000001000000000200000006fffeffff0100000000000003000000020300000003000000000000010000000201000100050000000000000500000006070000000002000000000004000000a0030000008e0d00000000000600000006010100007f00000000000005000007ff050000000700000000000401000000050100"/2204], 0x8b4}}, 0x0) 20:17:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) 20:17:37 executing program 4: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xffffffffffffffff, 0x0, 0x11b) 20:17:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000000)=@proc, 0x2) 20:17:37 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x41000) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x11, 0x2, 0x0) dup(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), 0x0) socket(0x1000000010, 0x400000400080803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) socket(0x5, 0x3, 0x0) r4 = socket(0x1000000010, 0x0, 0x0) dup(r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, &(0x7f0000000300)) r5 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) getsockname(0xffffffffffffffff, &(0x7f0000000540)=@hci, &(0x7f00000005c0)=0x80) socket(0x1000000010, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000004800)) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) r8 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000b34ff8), &(0x7f0000b34ffc)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008380)={&(0x7f0000000080), 0xc, &(0x7f0000008340)}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFINDEX(r9, 0x400454da, 0x0) r10 = socket(0x11, 0x800000003, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) [ 220.141605][ T8427] netlink: 2048 bytes leftover after parsing attributes in process `syz-executor.5'. 20:17:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:37 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 20:17:37 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfe90) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/86, 0x56}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) socketpair(0x11, 0x2, 0x0, 0x0) 20:17:37 executing program 3: pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfe90) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x2c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, @perf_config_ext={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/86, 0x56}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:17:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0x0, 0x0, 0x2}}, 0xa) 20:17:37 executing program 3: syz_open_procfs(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40008) 20:17:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904024865160b00010010000000000000140e0006001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) 20:17:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB='errors=remount-ro,gid=', @ANYRESHEX=r1]) 20:17:38 executing program 0: pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x2c, 0x68, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, @perf_config_ext={0x7, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/86, 0x56}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:17:38 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 221.265922][ T8485] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 20:17:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(r2, 0x0, 0x0, 0x1000) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14710223a0afdecb}, 0x2140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)=ANY=[]) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0300000000cca8558d"], 0x1}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:17:38 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000580)="33a7c14bfe6bc60270017a0ce9d27d0528d685e487818fd88c968276747eee50388e2e9e1b1f71be64ecc44a458ee21356d9ddec485c224ef5", 0x39) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x55aa40be, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000005c0)={0x0, 0x1, 0x6, @remote}, 0x10) arch_prctl$ARCH_SET_GS(0x1001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) 20:17:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xece) fcntl$setsig(r1, 0xa, 0x12) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x1c7f1fd, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x16) 20:17:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0x80}, 'port1\x00'}) 20:17:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xc00e, &(0x7f0000000000)=[{&(0x7f0000000140)="230000005e0081aee4050c00000f0000709110ecab372942b44ee4a0008bc609f6d8ff", 0x23}], 0x1}, 0x0) 20:17:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(r2, 0x0, 0x0, 0x1000) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14710223a0afdecb}, 0x2140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)=ANY=[]) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0300000000cca8558d"], 0x1}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:17:40 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/205, 0xcd}}], 0x1, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 20:17:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dk\x00/ptmx\x00', 0x0, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0) write$P9_RSTAT(r6, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) [ 223.422838][ T8541] input: syz1 as /devices/virtual/input/input5 20:17:40 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/86, 0x56}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) socketpair(0x11, 0x0, 0x0, &(0x7f0000000140)) 20:17:40 executing program 0: pipe(&(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r1, 0x40003) sendfile(r0, r1, 0x0, 0x9) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r3, 0x40003) sendfile(r2, r3, 0x0, 0x9) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r5, 0x40003) sendfile(r4, r5, 0x0, 0x9) ftruncate(r5, 0x8) r6 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r7, 0x40003) sendfile(r6, r7, 0x0, 0x9) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x80000) r8 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r9, 0x40003) sendfile(r8, r9, 0x0, 0x9) fstat(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r10, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) fstat(r11, &(0x7f0000000380)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r13, 0x40003) sendfile(r12, r13, 0x0, 0x9) fcntl$setstatus(r12, 0x4, 0x2000) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0xca80) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$PPPIOCSMAXCID(r14, 0x40047451, 0x0) preadv(r14, &(0x7f00000017c0), 0x375, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b80), 0x152, 0x0, &(0x7f0000004cc0)={0x0, r15+10000000}) r16 = socket(0x10, 0x0, 0x0) write(r16, &(0x7f00000000c0)="2400000052001f586a54c2f9002304250a04f51109000100020098090000", 0x1e) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0), 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0xfffffd25, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff82}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5a}}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 20:17:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0}) 20:17:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f00000000c0)='mem\x00\x01y7SwaS.\x06\x95r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x100000002) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) dup2(r6, r4) connect(0xffffffffffffffff, &(0x7f0000985ff8)=@pppoe={0x18, 0x0, {0x3, @local, 'eql\x00'}}, 0x80) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x28240, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x199, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r7, &(0x7f0000000b00)=ANY=[@ANYRESDEC], 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100500}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64, @ANYRESDEC=r0, @ANYRES64=r7, @ANYRESHEX=r8, @ANYBLOB="bca52d8238ab816f39f34fb9cf68e20e15880da919123a28bbc7271c2a7de9df7ddbb657720b2029d916d48baf83a4f8daed83d41e7eed1479355e596e16660ea221bc3f7df15dc90ff1a57e4f6f1ffd7464f8539965508c583009e59b544f6814d29f6f72b62d4958609d2a78315584a93a55ed9d94e62762441a", @ANYRES16=r3]]], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x200000000006, 0x0, 0x0, 0xfffffffb}]}) io_destroy(0x0) 20:17:43 executing program 0: pipe(&(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r1, 0x40003) sendfile(r0, r1, 0x0, 0x9) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r3, 0x40003) sendfile(r2, r3, 0x0, 0x9) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r5, 0x40003) sendfile(r4, r5, 0x0, 0x9) ftruncate(r5, 0x8) r6 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r7, 0x40003) sendfile(r6, r7, 0x0, 0x9) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x80000) r8 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r9, 0x40003) sendfile(r8, r9, 0x0, 0x9) fstat(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r10, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) fstat(r11, &(0x7f0000000380)) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r13, 0x40003) sendfile(r12, r13, 0x0, 0x9) fcntl$setstatus(r12, 0x4, 0x2000) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0xca80) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$PPPIOCSMAXCID(r14, 0x40047451, 0x0) preadv(r14, &(0x7f00000017c0), 0x375, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004b80), 0x152, 0x0, &(0x7f0000004cc0)={0x0, r15+10000000}) r16 = socket(0x10, 0x0, 0x0) write(r16, &(0x7f00000000c0)="2400000052001f586a54c2f9002304250a04f51109000100020098090000", 0x1e) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0), 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0xfffffd25, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff82}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5a}}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 20:17:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x4, 0x4, 0xd}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 20:17:43 executing program 5: unshare(0x8020000) clone(0x1006210b, 0x0, 0x0, 0x0, 0x0) 20:17:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0) 20:17:43 executing program 2: syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:43 executing program 5: 20:17:44 executing program 2: syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:44 executing program 5: [ 226.803593][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 226.803603][ T26] audit: type=1326 audit(1574626664.060:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8584 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d47a code=0xffff0000 20:17:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:46 executing program 5: 20:17:46 executing program 3: 20:17:46 executing program 2: syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6", 0x4e}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet6(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfe90) perf_event_open(&(0x7f0000000040)={0x0, 0x2c, 0x68, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, @perf_config_ext={0x7, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/86, 0x56}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') preadv(r3, &(0x7f0000000480), 0x10000000000001e2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:17:46 executing program 3: 20:17:46 executing program 5: 20:17:46 executing program 0: 20:17:46 executing program 2: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:47 executing program 3: 20:17:47 executing program 5: 20:17:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:49 executing program 0: 20:17:49 executing program 2: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:49 executing program 3: 20:17:49 executing program 5: 20:17:49 executing program 1: 20:17:49 executing program 5: 20:17:49 executing program 3: 20:17:49 executing program 1: 20:17:49 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="8000000000000000000040"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x20000000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={0x0, 0x0, 0x18}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0xb, 0x1}, 0x14) pipe(&(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cc, 0x1a0ffffffff) 20:17:50 executing program 2: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:50 executing program 5: 20:17:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:52 executing program 1: 20:17:52 executing program 3: 20:17:52 executing program 2: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:52 executing program 5: 20:17:52 executing program 0: 20:17:53 executing program 1: 20:17:53 executing program 5: 20:17:53 executing program 2: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:53 executing program 3: 20:17:53 executing program 0: 20:17:53 executing program 1: 20:17:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:56 executing program 2: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:56 executing program 0: 20:17:56 executing program 5: 20:17:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="3a258211f663a7724bde0e4346bc14b7b0f781659f8056d1d3abf9d1a54bfce1e77551a8bd678625f5083002000000fc5140847bc2fdffff01a1f62ac71e85445d8f244f6be479ffffffffff8756ea0400000000000000b90f1d7106f5776f7892ec94ee47382b88117e669c6e3203053a6a05995f5ed199fcf805000000a42c080601d48e7081161161a2793d1429196b4d9182f7c46359a074285b251aca195af3b2887cc79d0cedcc0b7e7f95c7d70472f7d3981e50048f804ef3f1a707d4ae614823e1f8066319e93802eda50f3fb22ab8d6dc3d2afd102b71b6c5c2f2c915b6c3fc45a5701635ae582f3746a6fc39740aac6f2282f8b15f099d7cf2a2d80f132077b478cebc5552e149a3fdf57dafe27793bb118027f8a841fa1bcdc67af8823cc16279c344d3d9158f99dc221feff389f5e8971dc6b291ec0a98d98a3c1ea12b02b98eb883e16e1324f8fea4778898f5687c14f050c057009bdd9b66116963ef6da5a867d93ef1b4d88ac5586f89fe03de797c18ba0d995835fbbea7ed14e303e8f742d419e30e3820de1cb74806de59ff39998c3cba419f7725a000000000009b09c72bdb996455acf33b8f3527190858a73f7427e1170a85f3fe32f861004aba17d5ab4c6bd06fb04f6a35975b488cf426437051ba32da82dfc31a039f6df022a0ddba8182aefaa7678f0f4803002c0da51cba59dd1f6bfa0dfd817b5d16624d92c94bec90335a3493c479a39f29d39598f474121bb98d1c093a88348cb040cd4bfa125d18fa89710b"], 0x22d) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = creat(&(0x7f0000000580)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0x76656f) 20:17:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f", 0x9f}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:56 executing program 0: clone(0x1100, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:17:56 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000000)="b156d417452c8f6d46edb3b1077f2abaa85e3489c66107abcc617d9aeb42aa515f23c9150bfdba5fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ee34c73eeeec9d3ac39746ff9a4f7bd46183354728d9caa2528", 0x5a) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') 20:17:56 executing program 2: syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000140)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) sendto$inet(r4, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f00000001c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000180)=0x80000000) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd37}}, {{0x0, 0xfffffffffffffd8a, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x1}}], 0x5c}}], 0xee, 0x8004) 20:17:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 238.993754][ T8742] vhci_hcd: vhci_device speed not set 20:17:56 executing program 2: syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:56 executing program 1: write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x80}, @ext={0x42, &(0x7f0000000180)="afc2c8737f78ac2ee943f0dc025de86049cb835b66fd92c9d8d4161819ba183844bf7e29867db41358e7173ef6b29170f51b24b1da50128d58a55470989b757f583d"}}], 0x30) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x2}, {0x4}}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x1, 0x1}}], 0x38) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 20:17:56 executing program 0: clone(0x1100, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:17:56 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r0, 0xd}, 0x10) syz_mount_image$jfs(&(0x7f0000000200)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000013c0)=[{0x0, 0x0, 0xffffffffffffffc0}], 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0xee}}], [{@fowner_eq={'fowner'}}]}) 20:17:56 executing program 2: syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) [ 239.328792][ T8767] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 239.361242][ T8767] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 239.361439][ T8777] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #0 [ 239.382461][ T8767] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 239.462450][ T8767] EXT4-fs (loop1): orphan cleanup on readonly fs [ 239.488703][ T8767] EXT4-fs error (device loop1): ext4_orphan_get:1252: comm syz-executor.1: bad orphan inode 1041753944 [ 239.502833][ T26] audit: type=1804 audit(1574626676.760:32): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir173602193/syzkaller.MTYyIy/21/file0/file0" dev="sda1" ino=16641 res=1 [ 239.556209][ T8767] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 239.573369][ T26] audit: type=1800 audit(1574626676.790:33): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16641 res=0 20:17:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4da72aca94d883e2ff29e1f446b573d4d53cf93079a48da1a1c5567b7ada", 0x65, 0x10000}], 0xa0, 0x0) 20:17:56 executing program 0: clone(0x1100, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:17:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1d, 0x80) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000400)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0000000010000507000000000000000000008a778a0000f15fbd82ec59ab9201be33d226adfc01f33107f58d7cfa36dbc084097c6d9f81b1eea19bb998c7", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x5}, 0x1, 0x0, 0x0, 0x44065}, 0x4000000) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r10, @ANYBLOB="00080080000000000300000008000100753332005800020014000500000000000000000045f12b3b524b5a7ffc969a343144e10000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf0970f1461cb1046e00000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x6000000, &(0x7f00000000c0)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', r10}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400dc2a3be6dbe60b0100000000006fa95e959771ba2b295c2935673f2b20e00428d2e2c5cbba44b98db644d7fb6afe68fe70385040d7763de82e07b6c3776dd61164af0dea169e38e5806aebaf6103179a5e41a4a640b3fd38c8af7d2a840f3f67214cc32dad3048086fd3ae67176e7b8ed1ce670e66df6fcccc03bf01636d18ed7b9d8b8a8b49be3d01185d527f", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r12 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x60, r12, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @local}}, @FOU_ATTR_LOCAL_V6={0x14}, @FOU_ATTR_PEER_PORT={0xfffffffffffffdb5, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x0, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x2040084}, 0x40100) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000000098a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r13 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r14 = gettid() kcmp(r14, 0x0, 0x0, 0xffffffffffffffff, r13) r15 = syz_open_procfs(r14, &(0x7f0000000340)='net/mcfilter\x00') ioctl$BLKALIGNOFF(r15, 0x127a, &(0x7f0000000840)) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000007c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 20:17:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) [ 239.709656][ T8797] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #0 20:17:57 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x210000, &(0x7f00000001c0)=ANY=[@ANYBLOB="78696e6f3da43c45ccbb56781f712e01c0e608cd6f666633696e6465783d6f6e2c6c6f7765726469703d2e2f66696c65305c00"]) memfd_create(&(0x7f0000000080)='&.\x00', 0x10b2ad07726813b4) r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000000)=[{0x6}, {0x0, 0x0, 0x1800}], 0x2) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000300)=""/182) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x480, &(0x7f0000000040)={[], [], 0xf603000000000000}) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)=@known='system.advise\x00') r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f00000002c0)={0x20, 0x0, 0x87e, 0x4, 0x1}) [ 239.913740][ T8814] overlayfs: unrecognized mount option "xino=¤0x0) timer_settime(r6, 0x0, &(0x7f0000000600)={{}, {0x77359400}}, &(0x7f0000000640)) timer_getoverrun(r6) timer_getoverrun(r6) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000001980)='/dev/audio\x00', 0x105040, 0x0) socket$inet6(0xa, 0x5, 0x2) 20:17:59 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x20, 0x201) read(r2, &(0x7f0000000180)=""/216, 0xd8) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:17:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ab", 0x1) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r1, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000003c0)=""/131) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x46, 0x0, [0xfffffffffffffffb, 0xd3, 0x0, 0x13]}) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0) 20:17:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) [ 242.141153][ T8831] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #0 20:17:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x9}, 0x0, 0x8000000000000, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0xb) dup3(r1, r2, 0x0) 20:17:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:17:59 executing program 0: clone(0x1100, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) 20:17:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:59 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) 20:17:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:17:59 executing program 3: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) r0 = socket(0x10, 0x80002, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x7ce2, 0xc7, 0xffff}) dup(r1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) write(r0, &(0x7f0000000000)="220000001500070500e80000004c030502080303010000000800010041024fc10768", 0x22) 20:17:59 executing program 0: syz_open_dev$usbfs(0x0, 0x73, 0x1) [ 242.616073][ T8872] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 20:17:59 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2028}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$null(0xffffffffffffff9c, 0x0, 0x18000, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x6d) listen(r0, 0x5) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/de_adf_c\x04\x00', 0x312140, 0x0) r1 = getpid() r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x97) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r4, 0x7ffffc, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000027000000db972651969b22554f0cc9ef4efff9730234f63399b024c18a93a62fb7ba5f4bc3704a0fad93c3aa90245aaa127e808572a714d96c44e891c913b7cec3e3a0556552313c187287e2bee3a3abd14c6c918b189c70460f82168908a45a3c80dfee6423a4136612cf64a15afb246478a597189805fb625fa515d52491be225e7a"], &(0x7f0000000140)=0x4b) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYPTR], 0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000180)=0xfffffffffffffe2f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x97) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000080)="61bcb0d8e482de0e64c4fe7f14372111edfd66daa7b2bb3600", 0x19) syz_open_procfs(r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000580)=0x0) timer_settime(r6, 0x0, &(0x7f0000000600)={{}, {0x77359400}}, &(0x7f0000000640)) timer_getoverrun(r6) timer_getoverrun(r6) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000001980)='/dev/audio\x00', 0x105040, 0x0) socket$inet6(0xa, 0x5, 0x2) [ 242.661783][ T8878] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 20:18:00 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4100, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f00000000c0)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 20:18:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0x0, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:18:00 executing program 0: syz_open_dev$usbfs(0x0, 0x73, 0x1) 20:18:00 executing program 3: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfd6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) timer_create(0x0, 0x0, 0x0) unshare(0x40000000) [ 243.132704][ T8903] IPVS: ftp: loaded support on port[0] = 21 [ 243.232754][ T8909] IPVS: ftp: loaded support on port[0] = 21 20:18:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:18:02 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2028}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$null(0xffffffffffffff9c, 0x0, 0x18000, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x6d) listen(r0, 0x5) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/de_adf_c\x04\x00', 0x312140, 0x0) r1 = getpid() r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x97) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r4, 0x7ffffc, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000027000000db972651969b22554f0cc9ef4efff9730234f63399b024c18a93a62fb7ba5f4bc3704a0fad93c3aa90245aaa127e808572a714d96c44e891c913b7cec3e3a0556552313c187287e2bee3a3abd14c6c918b189c70460f82168908a45a3c80dfee6423a4136612cf64a15afb246478a597189805fb625fa515d52491be225e7a"], &(0x7f0000000140)=0x4b) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYPTR], 0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000180)=0xfffffffffffffe2f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x97) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000080)="61bcb0d8e482de0e64c4fe7f14372111edfd66daa7b2bb3600", 0x19) syz_open_procfs(r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000580)=0x0) timer_settime(r6, 0x0, &(0x7f0000000600)={{}, {0x77359400}}, &(0x7f0000000640)) timer_getoverrun(r6) timer_getoverrun(r6) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000001980)='/dev/audio\x00', 0x105040, 0x0) socket$inet6(0xa, 0x5, 0x2) 20:18:02 executing program 0: syz_open_dev$usbfs(0x0, 0x73, 0x1) 20:18:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0xa0000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:18:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0x0, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:18:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$kcm(0x29, 0x0, 0x0) close(r0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="9f"], 0x0, 0x1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) gettid() perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x80000000, 0x3, 0x0, 0x5, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000040)=""/106) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) 20:18:02 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) 20:18:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:18:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0x0, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:18:02 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) 20:18:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket$kcm(0x29, 0x0, 0x0) close(r0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="9f"], 0x0, 0x1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) gettid() perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x80000000, 0x3, 0x0, 0x5, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000040)=""/106) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x0) 20:18:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:18:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r2 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000240)={0x9e, 0xffffff58, 0x3ff, 0x3, 0x800}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000100)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @remote}, &(0x7f00000001c0)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000300)={@local, r5}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f04f031fffffe100004000638477fbac141412e0000001c699da153f08a0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r4, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 20:18:03 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2028}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$null(0xffffffffffffff9c, 0x0, 0x18000, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x6d) listen(r0, 0x5) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/de_adf_c\x04\x00', 0x312140, 0x0) r1 = getpid() r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x97) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r4, 0x7ffffc, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000027000000db972651969b22554f0cc9ef4efff9730234f63399b024c18a93a62fb7ba5f4bc3704a0fad93c3aa90245aaa127e808572a714d96c44e891c913b7cec3e3a0556552313c187287e2bee3a3abd14c6c918b189c70460f82168908a45a3c80dfee6423a4136612cf64a15afb246478a597189805fb625fa515d52491be225e7a"], &(0x7f0000000140)=0x4b) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYPTR], 0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000180)=0xfffffffffffffe2f) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x97) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000080)="61bcb0d8e482de0e64c4fe7f14372111edfd66daa7b2bb3600", 0x19) syz_open_procfs(r1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000580)=0x0) timer_settime(r6, 0x0, &(0x7f0000000600)={{}, {0x77359400}}, &(0x7f0000000640)) timer_getoverrun(r6) timer_getoverrun(r6) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000001980)='/dev/audio\x00', 0x105040, 0x0) socket$inet6(0xa, 0x5, 0x2) 20:18:03 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) 20:18:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:18:03 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r0, 0x80, "8a03b0", "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"}}, 0x110) setuid(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x3}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="f0114f997a78b2650f5b11adabb29f137490d5dbdfb45bbf75707065726469723d2e2f66696c65302c6c6f77726b6469723d2e2f66696c65315c00"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 20:18:03 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) [ 246.281028][ T8965] overlayfs: unrecognized mount option "ðO™zx²e[­«²ŸtÕÛß´[¿upperdir=./file0" or missing value [ 246.572760][ T8979] overlayfs: unrecognized mount option "ðO™zx²e[­«²ŸtÕÛß´[¿upperdir=./file0" or missing value 20:18:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:18:05 executing program 0 (fault-call:0 fault-nth:0): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x82, 0x0) 20:18:05 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)) r0 = epoll_create1(0x0) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) io_setup(0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) rt_sigaction(0x100000000034, &(0x7f0000000440)={0x0, {0x1}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000580)) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000002c0)={0x5, "7d7a9f78fbfc0f1920d34805dcd2cc81906ad47291c63fb8b0d02ea753f32ab5", 0x80, 0x5, 0x267, 0x1, 0x5}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r2, 0x8000000000009375, &(0x7f0000000000)="010000000000000018") fcntl$setpipe(r0, 0x407, 0x56d) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r4) ioctl$sock_ifreq(r4, 0x89a3, &(0x7f0000000140)={'team0\x00', @ifru_data=&(0x7f0000000080)="869da96274a54990e05c65870212872caf342b982cbeaff889f23a406149f5b6"}) openat$cgroup_procs(r3, &(0x7f0000000240)='\\Lu\xfdup6z\xecDcs\x00', 0x2, 0x0) connect$vsock_stream(r3, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @reserved}, 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x40, 0x0, 0x2, 0x1000, 0x2, 0x0, 0x1, 0x8, 0x3, 0x0, 0x2, 0xa1b, 0x1a, 0x0, 0x4ef07a30, 0x1, 0x0, 0x3ff, 0x0, 0x0, 0x1d32, 0x0, 0x0, 0x0, 0x401, 0x7fff, 0x80000000, 0x7ff, 0x3, 0xff, 0x0, 0xfffffffffffffffe, 0x6, 0x8, 0x80000000, 0x0, 0x2, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000400), 0xa}, 0x1002c, 0x0, 0x9b31, 0x4, 0x3ff, 0xfffffffffffffffd, 0x1ba}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) shmctl$SHM_INFO(0x0, 0xe, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000480)) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, [], 0x25}, 0x8}}, 0x3, 0x584, 0x1002, 0x4b30, 0x7f}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000540)={r7, 0xfffc}, &(0x7f00000005c0)=0x8) 20:18:05 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x3, 0xffffffec, 0x200, 0xaca, 0x9cc0, 0x3, 0x8000, {0x0, @in6={{0xa, 0x4e22, 0x9, @local, 0x1}}, 0x3, 0x2, 0x7, 0x9265, 0x8}}, &(0x7f0000000000)=0xb0) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.cpus\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x0, 0xe99a}, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x14a, 0x188401) dup2(0xffffffffffffffff, r2) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) sendto$inet(r4, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000280)={0x2, 0x1f}, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') 20:18:05 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000500)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) getgid() openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="75707065726469728c0145c939e7ea292c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c50315c004bcb399cb000757e8f5b6b71d10583"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000400)={0xdc37fa7df6a9158a}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x8, @vbi}}) flistxattr(r1, &(0x7f0000000300)=""/224, 0xe0) r2 = syz_open_dev$midi(0x0, 0x9, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000900)={0x0, @in6={{0xa, 0x0, 0x8f5, @rand_addr="04401ee256935292ca9c3092a1fa5fdf"}}, 0x2, 0x0, 0x4, 0x5, 0x11}, &(0x7f0000000640)=0x98) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @multicast1}, &(0x7f0000000280)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={@mcast2, 0x45, r3}) [ 248.638532][ T8997] FAULT_INJECTION: forcing a failure. [ 248.638532][ T8997] name failslab, interval 1, probability 0, space 0, times 1 [ 248.692222][ T8996] overlayfs: unrecognized mount option "upperdirŒEÉ9çê)" or missing value [ 248.704192][ T8997] CPU: 1 PID: 8997 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 248.712994][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.713001][ T8997] Call Trace: [ 248.713124][ T8997] dump_stack+0x1fb/0x318 [ 248.713189][ T8997] should_fail+0x555/0x770 [ 248.735491][ T8997] __should_failslab+0x11a/0x160 [ 248.740472][ T8997] ? getname_flags+0xba/0x640 [ 248.740501][ T8997] should_failslab+0x9/0x20 [ 248.740510][ T8997] kmem_cache_alloc+0x56/0x2e0 [ 248.740544][ T8997] ? check_preemption_disabled+0xb7/0x2a0 [ 248.740556][ T8997] getname_flags+0xba/0x640 [ 248.764696][ T8997] getname+0x19/0x20 [ 248.768688][ T8997] do_sys_open+0x261/0x560 [ 248.772399][ T9002] overlayfs: unrecognized mount option "upperdirŒEÉ9çê)" or missing value [ 248.773111][ T8997] __x64_sys_open+0x87/0x90 [ 248.773169][ T8997] do_syscall_64+0xf7/0x1c0 [ 248.790959][ T8997] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.796860][ T8997] RIP: 0033:0x4143d1 [ 248.800749][ T8997] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 248.820389][ T8997] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 248.832363][ T8997] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 20:18:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0xf) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, 0x0, 0xedc0) 20:18:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x82, 0x0) [ 248.840457][ T8997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 248.848538][ T8997] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 248.857196][ T8997] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 248.865434][ T8997] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 [ 248.886523][ T8995] bond0: (slave bond_slave_1): Releasing backup interface 20:18:06 executing program 0 (fault-call:0 fault-nth:1): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x82, 0x0) [ 249.004699][ T9016] FAULT_INJECTION: forcing a failure. [ 249.004699][ T9016] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 249.017982][ T9016] CPU: 1 PID: 9016 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 249.026588][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.026599][ T9016] Call Trace: [ 249.026617][ T9016] dump_stack+0x1fb/0x318 [ 249.026635][ T9016] should_fail+0x555/0x770 [ 249.048993][ T9016] should_fail_alloc_page+0x55/0x60 [ 249.054373][ T9016] prepare_alloc_pages+0x283/0x460 [ 249.059514][ T9016] __alloc_pages_nodemask+0xb2/0x5d0 [ 249.059535][ T9016] kmem_getpages+0x4d/0xa00 [ 249.059549][ T9016] cache_grow_begin+0x7e/0x2c0 [ 249.074094][ T9016] cache_alloc_refill+0x311/0x3f0 [ 249.079137][ T9016] ? check_preemption_disabled+0xb7/0x2a0 [ 249.084868][ T9016] kmem_cache_alloc+0x2b9/0x2e0 [ 249.089728][ T9016] ? getname_flags+0xba/0x640 [ 249.094427][ T9016] getname_flags+0xba/0x640 [ 249.098942][ T9016] getname+0x19/0x20 [ 249.102839][ T9016] do_sys_open+0x261/0x560 [ 249.107270][ T9016] __x64_sys_open+0x87/0x90 [ 249.111985][ T9016] do_syscall_64+0xf7/0x1c0 [ 249.116588][ T9016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.122494][ T9016] RIP: 0033:0x4143d1 [ 249.126387][ T9016] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 249.146028][ T9016] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 20:18:06 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x939ed3c76004521}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0xffffff87) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:18:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) [ 249.154466][ T9016] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 249.162450][ T9016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 249.170437][ T9016] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 249.178422][ T9016] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 249.186572][ T9016] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 20:18:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:18:08 executing program 0 (fault-call:0 fault-nth:2): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:08 executing program 3: syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)="8da86113a3d3372ab1e8c81cd6c268fb5200406dcab913adde05ca66934692b329338a2118ebb7d41cf29ada0867570e96c3251b925c5d", 0x37) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 20:18:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) 20:18:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x6, [@rand_addr]}]}}}]}, 0x3c}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x29d83ff6e3fe5dda, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="faf0f7955c10bdb04a0000000002ff00"}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x1000}}, 0x10) 20:18:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000140)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x87}}, &(0x7f0000003ff6)='G\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x70) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendto$inet(r1, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) 20:18:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:18:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x1ffc, 0x100000010a000202) r2 = syz_open_dev$dmmidi(&(0x7f0000000800)='/dev/dmmidi#\x00', 0x8, 0x2000) connect$inet(r2, &(0x7f0000000840)={0x2, 0x4e24, @empty}, 0x10) [ 251.704486][ T9048] FAULT_INJECTION: forcing a failure. [ 251.704486][ T9048] name failslab, interval 1, probability 0, space 0, times 0 [ 251.723770][ T9047] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 251.772557][ T9048] CPU: 0 PID: 9048 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 251.781204][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.791291][ T9048] Call Trace: [ 251.791321][ T9048] dump_stack+0x1fb/0x318 [ 251.791339][ T9048] should_fail+0x555/0x770 [ 251.791358][ T9048] __should_failslab+0x11a/0x160 [ 251.791371][ T9048] ? __alloc_file+0x2c/0x390 [ 251.791388][ T9048] should_failslab+0x9/0x20 [ 251.817508][ T9048] kmem_cache_alloc+0x56/0x2e0 [ 251.822304][ T9048] __alloc_file+0x2c/0x390 [ 251.826750][ T9048] alloc_empty_file+0xac/0x1b0 [ 251.826765][ T9048] path_openat+0x9e/0x4420 [ 251.826780][ T9048] ? __kasan_kmalloc+0x178/0x1b0 [ 251.826879][ T9048] ? __lock_acquire+0xc75/0x1be0 [ 251.845884][ T9048] ? rcu_read_lock_sched_held+0x10b/0x170 [ 251.851643][ T9048] do_filp_open+0x192/0x3d0 [ 251.856168][ T9048] ? _raw_spin_unlock+0x2c/0x50 [ 251.861040][ T9048] do_sys_open+0x29f/0x560 [ 251.865476][ T9048] __x64_sys_open+0x87/0x90 20:18:09 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) [ 251.869996][ T9048] do_syscall_64+0xf7/0x1c0 [ 251.874548][ T9048] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.880451][ T9048] RIP: 0033:0x4143d1 [ 251.884363][ T9048] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 251.904060][ T9048] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 251.912486][ T9048] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 20:18:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 251.920496][ T9048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 251.920503][ T9048] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 251.920508][ T9048] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 251.920517][ T9048] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 20:18:09 executing program 5: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x7) lstat(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x20500c001) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 20:18:09 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) [ 252.044541][ T9047] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 20:18:09 executing program 0 (fault-call:0 fault-nth:3): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 252.180704][ T9083] FAULT_INJECTION: forcing a failure. [ 252.180704][ T9083] name failslab, interval 1, probability 0, space 0, times 0 [ 252.229377][ T9083] CPU: 1 PID: 9083 Comm: syz-executor.2 Not tainted 5.4.0-rc8-syzkaller #0 [ 252.238461][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.248604][ T9083] Call Trace: [ 252.248629][ T9083] dump_stack+0x1fb/0x318 [ 252.248648][ T9083] should_fail+0x555/0x770 [ 252.248673][ T9083] __should_failslab+0x11a/0x160 [ 252.256282][ T9083] ? getname_flags+0xba/0x640 [ 252.256301][ T9083] should_failslab+0x9/0x20 [ 252.256319][ T9083] kmem_cache_alloc+0x56/0x2e0 [ 252.279589][ T9083] getname_flags+0xba/0x640 [ 252.284122][ T9083] getname+0x19/0x20 [ 252.288025][ T9083] do_sys_open+0x261/0x560 [ 252.292460][ T9083] __x64_sys_openat+0xa2/0xb0 [ 252.297151][ T9083] do_syscall_64+0xf7/0x1c0 [ 252.301673][ T9083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.307570][ T9083] RIP: 0033:0x45a639 [ 252.311469][ T9083] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.331219][ T9083] RSP: 002b:00007fe7b16d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.339637][ T9083] RAX: ffffffffffffffda RBX: 00007fe7b16d5c90 RCX: 000000000045a639 [ 252.347995][ T9083] RDX: 0000000000000082 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 252.356006][ T9083] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.363993][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7b16d66d4 20:18:09 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000280)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xf3f5, 0x2000010001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xff8b) setresuid(0x0, r3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xc2b, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r0}]) 20:18:09 executing program 5: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000200)=[{&(0x7f0000000000)="39000000140081ae00003c9733f5f087110208abca8b4e7d0f6298cb85d0b0e62bdbb7d553b4e921556b3d5df500c250825702000000000000", 0x39}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) r2 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) sendto$inet(r4, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000340)={0x32, @remote, 0x4e23, 0x0, 'ovf\x00', 0x8, 0x20, 0x43}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000300020000000100101b56c51af67c0be6799230080000002c00000014000100020000000000000000000000000000001400020002000000ac14140000000000ffff08c503f9230e86093c00000000"], 0x54}}, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x35c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2547}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @ipv4={[], [], @rand_addr=0x20}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @local, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ecf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74ff}]}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x54a4c704}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0xd4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0x3b3}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x857}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6237}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4014) r7 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VFIO_IOMMU_UNMAP_DMA(r8, 0x3b72, &(0x7f0000000280)={0x20, 0x1, 0xffffffffc67abac5, 0x1, 0x40bf}) keyctl$dh_compute(0x17, &(0x7f0000000400)={r7, r2, r7}, &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'crc32\x00'}, &(0x7f0000000480)="a02d47f1fa4f", 0x6}) keyctl$revoke(0x3, r2) [ 252.371978][ T9083] R13: 00000000004c77be R14: 00000000004dd660 R15: 0000000000000004 20:18:09 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x5, 0xfc) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000880)={@ipv4={[0xfc], [], @local}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x2}, 0x20) r3 = dup2(r0, r1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{0x6, 0x9, 0x9, 0x514}, 'syz1\x00', 0xa}) [ 252.462516][ T9093] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 252.505752][ T9093] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 252.538958][ T9085] FAULT_INJECTION: forcing a failure. [ 252.538958][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 252.594713][ T9085] CPU: 1 PID: 9085 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 252.603386][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.613459][ T9085] Call Trace: [ 252.616776][ T9085] dump_stack+0x1fb/0x318 [ 252.621145][ T9085] should_fail+0x555/0x770 [ 252.625591][ T9085] __should_failslab+0x11a/0x160 [ 252.630723][ T9085] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 252.636456][ T9085] should_failslab+0x9/0x20 [ 252.640976][ T9085] __kmalloc+0x7a/0x340 [ 252.645148][ T9085] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 252.650891][ T9085] tomoyo_realpath_from_path+0xdc/0x7c0 [ 252.656465][ T9085] tomoyo_check_open_permission+0x1ce/0x9d0 [ 252.662399][ T9085] tomoyo_file_open+0x141/0x190 [ 252.667338][ T9085] security_file_open+0x65/0x2f0 [ 252.672340][ T9085] do_dentry_open+0x351/0x10c0 [ 252.677162][ T9085] vfs_open+0x73/0x80 [ 252.681161][ T9085] path_openat+0x1397/0x4420 [ 252.685871][ T9085] ? rcu_lock_release+0x9/0x30 [ 252.690666][ T9085] do_filp_open+0x192/0x3d0 [ 252.695200][ T9085] do_sys_open+0x29f/0x560 [ 252.699638][ T9085] __x64_sys_open+0x87/0x90 [ 252.704181][ T9085] do_syscall_64+0xf7/0x1c0 [ 252.708703][ T9085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.714610][ T9085] RIP: 0033:0x4143d1 [ 252.718510][ T9085] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 20:18:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000180)={r8, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={r9, 0x40}, 0x8) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0xffffffffffffffc1, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r2, 0x0, r10, 0x0, 0x80000000, 0x0) [ 252.738747][ T9085] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 252.747178][ T9085] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 252.755169][ T9085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 252.763154][ T9085] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 252.771167][ T9085] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 252.779769][ T9085] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 20:18:10 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) 20:18:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x2000089a2, &(0x7f0000000000)={'bridge0\x00\x00\f4\xbd\x19\n\x00', @ifru_map={0x3, 0x1, 0x9, 0x5, 0x1, 0x4}}) socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300250069000707a2e407edab0080581000000046038107a277001419000a0010000000000003f5000000000000ef38bf461e59d7", 0x330}], 0x1) [ 252.882288][ T9111] FAULT_INJECTION: forcing a failure. [ 252.882288][ T9111] name failslab, interval 1, probability 0, space 0, times 0 [ 252.960627][ T9111] CPU: 1 PID: 9111 Comm: syz-executor.2 Not tainted 5.4.0-rc8-syzkaller #0 [ 252.969287][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.979498][ T9111] Call Trace: [ 252.982826][ T9111] dump_stack+0x1fb/0x318 [ 252.987182][ T9111] should_fail+0x555/0x770 [ 252.991501][ T9085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 252.991614][ T9111] __should_failslab+0x11a/0x160 [ 253.003262][ T9111] ? __alloc_file+0x2c/0x390 [ 253.007891][ T9111] should_failslab+0x9/0x20 [ 253.012407][ T9111] kmem_cache_alloc+0x56/0x2e0 [ 253.017193][ T9111] __alloc_file+0x2c/0x390 [ 253.022234][ T9111] alloc_empty_file+0xac/0x1b0 [ 253.027008][ T9111] path_openat+0x9e/0x4420 [ 253.031433][ T9111] ? __kasan_kmalloc+0x178/0x1b0 [ 253.036404][ T9111] ? rcu_lock_release+0x9/0x30 [ 253.041483][ T9111] do_filp_open+0x192/0x3d0 [ 253.046008][ T9111] ? _raw_spin_unlock+0x2c/0x50 [ 253.050884][ T9111] do_sys_open+0x29f/0x560 [ 253.055312][ T9111] __x64_sys_openat+0xa2/0xb0 [ 253.060001][ T9111] do_syscall_64+0xf7/0x1c0 [ 253.064517][ T9111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.070416][ T9111] RIP: 0033:0x45a639 [ 253.074317][ T9111] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.094457][ T9111] RSP: 002b:00007fe7b16d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.102881][ T9111] RAX: ffffffffffffffda RBX: 00007fe7b16d5c90 RCX: 000000000045a639 20:18:10 executing program 3: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$inet6(0xa, 0x3, 0x100000006) chdir(&(0x7f0000000100)='./file0\x00') openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8}, 0x0, 0x2, 0x6, 0x9, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0xfffffffffffffed3) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) r1 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 253.110874][ T9111] RDX: 0000000000000082 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 253.118867][ T9111] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 253.126853][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7b16d66d4 [ 253.134838][ T9111] R13: 00000000004c77be R14: 00000000004dd660 R15: 0000000000000004 20:18:10 executing program 1: r0 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) setreuid(0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) lstat(0x0, &(0x7f00000003c0)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 20:18:10 executing program 0 (fault-call:0 fault-nth:4): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) [ 253.316651][ T26] audit: type=1800 audit(1574626690.570:34): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16728 res=0 [ 253.367429][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.375809][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.388759][ T26] audit: type=1804 audit(1574626690.600:35): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir632198627/syzkaller.gFOjcX/33/file0" dev="sda1" ino=16728 res=1 [ 253.524266][ T9130] FAULT_INJECTION: forcing a failure. [ 253.524266][ T9130] name failslab, interval 1, probability 0, space 0, times 0 [ 253.545140][ T9130] CPU: 1 PID: 9130 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 253.553770][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.553779][ T9130] Call Trace: [ 253.553802][ T9130] dump_stack+0x1fb/0x318 [ 253.553824][ T9130] should_fail+0x555/0x770 [ 253.553841][ T9130] __should_failslab+0x11a/0x160 [ 253.581067][ T9130] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 253.586881][ T9130] should_failslab+0x9/0x20 [ 253.591386][ T9130] __kmalloc+0x7a/0x340 [ 253.595542][ T9130] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 253.595558][ T9130] tomoyo_realpath_from_path+0xdc/0x7c0 [ 253.595577][ T9130] tomoyo_check_open_permission+0x1ce/0x9d0 [ 253.595608][ T9130] tomoyo_file_open+0x141/0x190 [ 253.617566][ T9130] security_file_open+0x65/0x2f0 [ 253.622524][ T9130] do_dentry_open+0x351/0x10c0 [ 253.628183][ T9130] vfs_open+0x73/0x80 [ 253.632171][ T9130] path_openat+0x1397/0x4420 [ 253.636809][ T9130] do_filp_open+0x192/0x3d0 [ 253.641342][ T9130] do_sys_open+0x29f/0x560 [ 253.645775][ T9130] __x64_sys_open+0x87/0x90 [ 253.650296][ T9130] do_syscall_64+0xf7/0x1c0 [ 253.654819][ T9130] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.660731][ T9130] RIP: 0033:0x4143d1 [ 253.665018][ T9130] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 253.684720][ T9130] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 253.693267][ T9130] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 253.701279][ T9130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 253.709357][ T9130] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 253.717371][ T9130] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 253.725364][ T9130] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 20:18:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x82, 0x0) [ 253.937268][ T9130] ERROR: Out of memory at tomoyo_realpath_from_path. 20:18:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_ROUTER={0x8, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000480)={0x2}) sendto$inet(r4, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x5, @rand_addr="7a62d8399c2b32c949e73f26606c787d", 0x80000000}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, @in6={0xa, 0x4e20, 0x9, @loopback}, @in6={0xa, 0x4e22, 0xdd, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7fffffff}, @in={0x2, 0x4e22, @remote}], 0x74) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=@can_delroute={0x158, 0x19, 0x8, 0x70bd26, 0x25dfdbff, {0x1d, 0x1, 0x3}, [@CGW_LIM_HOPS={0x8, 0xd, 0x20}, @CGW_DST_IF={0x8, 0xa, r7}, @CGW_CS_CRC8={0x120, 0x6, {0x79, 0x29, 0x5b, 0x40, 0x80, "2d83d33b419c011100f75cca6a90827dfffa96feca7106d5b427f1d116d3f917f09364195eae8187fd80eaee6fd865be5baaf526de677a2e21ed160a1b36b115627e835fced8e1e9baf929ebd6ba0cc807406520b82e117521bf7ddfa5090c73c391323212f514fd9caec42b4335727315316de5f2741bffd488fac3d80215162754057ba615402a090f36de8e026291cb33f1c1c3a2df0e983a553231f5dca5ab1988a77d91099407d65902b1b9800621ad161216b86de68f0c453764e4a9bcd1baa4aeeaa01d19de80a588f2a00e9ff427b1f20ccf0dec31c1361277d59f304a4581acace4021ea05f19d2c1236389deba5944bad20395ee79224aecb957d9", 0x3, "220b614b83c1727f73eb6009cb2d686b0d05e82e"}}, @CGW_MOD_UID={0x8, 0xe, 0xee00}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x40000) [ 254.075989][ T9143] netlink: 'syz-executor.5': attribute type 22 has an invalid length. [ 254.093450][ T26] audit: type=1804 audit(1574626691.350:36): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir632198627/syzkaller.gFOjcX/33/file0" dev="sda1" ino=16728 res=1 [ 254.163702][ T26] audit: type=1804 audit(1574626691.390:37): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir632198627/syzkaller.gFOjcX/33/file0" dev="sda1" ino=16728 res=1 [ 254.203980][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 254.272223][ T9143] netlink: 'syz-executor.5': attribute type 22 has an invalid length. [ 254.330180][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 20:18:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:18:12 executing program 0 (fault-call:0 fault-nth:5): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='\\dev/sequencer2\x00', 0x82, 0x0) 20:18:12 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) sendto$inet(r4, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) listen(r4, 0xffffd4fd) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1ff, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x24, 0x6}}, r5, 0x2, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x6}) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, 0x0) 20:18:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140)) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x12) r3 = dup3(r2, r1, 0x0) finit_module(r2, 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000040)=""/8, 0x8}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000380)) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x50, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0448b0eb04001800160011000586f9835b3f00009148790003f85acc7c45", 0x2e}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$inet(r5, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) write$sndseq(r5, &(0x7f0000000300)=[{0x0, 0x9, 0x40, 0x3, @time={r6, r7+30000000}, {0x5, 0x3}, {0x8, 0x1}, @time=@time={0x0, 0x1c9c380}}], 0x30) write(0xffffffffffffffff, &(0x7f0000000200)="40598076556fc794e062f737ac5ebb9eeaf064dbb85ae8c29d140117669e33a968b54c0821151bc1382c1af556155ca68e2517159262c9c239a472f69530ef340b0121c0859ed382bb113c95c3dabf34a0a1a93c", 0x54) [ 255.295263][ T9161] FAULT_INJECTION: forcing a failure. [ 255.295263][ T9161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.308537][ T9161] CPU: 1 PID: 9161 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 255.317151][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.327247][ T9161] Call Trace: [ 255.330559][ T9161] dump_stack+0x1fb/0x318 [ 255.334938][ T9161] should_fail+0x555/0x770 [ 255.339365][ T9161] should_fail_alloc_page+0x55/0x60 [ 255.339378][ T9161] prepare_alloc_pages+0x283/0x460 [ 255.339400][ T9161] __alloc_pages_nodemask+0xb2/0x5d0 [ 255.355009][ T9161] kmem_getpages+0x4d/0xa00 [ 255.359534][ T9161] cache_grow_begin+0x7e/0x2c0 [ 255.364324][ T9161] cache_alloc_refill+0x311/0x3f0 [ 255.369495][ T9161] ? check_preemption_disabled+0xb7/0x2a0 [ 255.369514][ T9161] __kmalloc+0x318/0x340 [ 255.379467][ T9161] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 255.379480][ T9161] tomoyo_realpath_from_path+0xdc/0x7c0 [ 255.379495][ T9161] tomoyo_check_open_permission+0x1ce/0x9d0 [ 255.379526][ T9161] tomoyo_file_open+0x141/0x190 [ 255.379539][ T9161] security_file_open+0x65/0x2f0 [ 255.379560][ T9161] do_dentry_open+0x351/0x10c0 [ 255.379588][ T9161] vfs_open+0x73/0x80 [ 255.379601][ T9161] path_openat+0x1397/0x4420 [ 255.379647][ T9161] do_filp_open+0x192/0x3d0 [ 255.411319][ T9161] do_sys_open+0x29f/0x560 [ 255.419849][ T9161] __x64_sys_open+0x87/0x90 [ 255.419864][ T9161] do_syscall_64+0xf7/0x1c0 [ 255.419880][ T9161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.419891][ T9161] RIP: 0033:0x4143d1 [ 255.419906][ T9161] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 255.467131][ T9161] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 255.467145][ T9161] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 255.467151][ T9161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 255.467156][ T9161] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 255.467162][ T9161] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 255.467167][ T9161] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 [ 255.467700][ T26] audit: type=1804 audit(1574626692.550:38): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir261194928/syzkaller.r9xou2/36/bus" dev="sda1" ino=16726 res=1 20:18:12 executing program 0 (fault-call:0 fault-nth:6): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/#ev/sequencer2\x00', 0x82, 0x0) [ 255.652356][ T9173] FAULT_INJECTION: forcing a failure. [ 255.652356][ T9173] name failslab, interval 1, probability 0, space 0, times 0 [ 255.707442][ T9173] CPU: 1 PID: 9173 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 255.716109][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.726180][ T9173] Call Trace: [ 255.729489][ T9173] dump_stack+0x1fb/0x318 [ 255.733831][ T9173] should_fail+0x555/0x770 [ 255.733855][ T9173] __should_failslab+0x11a/0x160 [ 255.733875][ T9173] ? tomoyo_encode2+0x273/0x5a0 [ 255.748043][ T9173] should_failslab+0x9/0x20 [ 255.752549][ T9173] __kmalloc+0x7a/0x340 20:18:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/%ev/sequencer2\x00', 0x82, 0x0) [ 255.752569][ T9173] tomoyo_encode2+0x273/0x5a0 [ 255.752586][ T9173] tomoyo_realpath_from_path+0x769/0x7c0 [ 255.752605][ T9173] tomoyo_check_open_permission+0x1ce/0x9d0 [ 255.752637][ T9173] tomoyo_file_open+0x141/0x190 [ 255.761425][ T9173] security_file_open+0x65/0x2f0 [ 255.761443][ T9173] do_dentry_open+0x351/0x10c0 [ 255.761465][ T9173] vfs_open+0x73/0x80 [ 255.761478][ T9173] path_openat+0x1397/0x4420 [ 255.761530][ T9173] do_filp_open+0x192/0x3d0 [ 255.774578][ T9173] do_sys_open+0x29f/0x560 [ 255.774598][ T9173] __x64_sys_open+0x87/0x90 [ 255.774614][ T9173] do_syscall_64+0xf7/0x1c0 [ 255.774632][ T9173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.784386][ T9173] RIP: 0033:0x4143d1 [ 255.784399][ T9173] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 255.784405][ T9173] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 20:18:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/*ev/sequencer2\x00', 0x82, 0x0) [ 255.784415][ T9173] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 255.784421][ T9173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 255.784427][ T9173] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 255.784433][ T9173] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 255.784439][ T9173] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 20:18:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/+ev/sequencer2\x00', 0x82, 0x0) [ 256.016124][ T26] audit: type=1804 audit(1574626693.270:39): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir261194928/syzkaller.r9xou2/36/bus" dev="sda1" ino=16726 res=1 [ 256.043697][ T9173] ERROR: Out of memory at tomoyo_realpath_from_path. 20:18:13 executing program 0 (fault-call:0 fault-nth:7): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) [ 256.203730][ T9191] FAULT_INJECTION: forcing a failure. [ 256.203730][ T9191] name failslab, interval 1, probability 0, space 0, times 0 [ 256.226739][ T9191] CPU: 0 PID: 9191 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 256.235405][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.245475][ T9191] Call Trace: [ 256.248790][ T9191] dump_stack+0x1fb/0x318 [ 256.253157][ T9191] should_fail+0x555/0x770 [ 256.257597][ T9191] __should_failslab+0x11a/0x160 [ 256.262547][ T9191] should_failslab+0x9/0x20 [ 256.267075][ T9191] kmem_cache_alloc_trace+0x5d/0x2f0 [ 256.272449][ T9191] ? usbdev_open+0x67/0x690 [ 256.276968][ T9191] usbdev_open+0x67/0x690 [ 256.281314][ T9191] ? do_raw_spin_unlock+0x136/0x260 [ 256.286520][ T9191] chrdev_open+0x509/0x590 [ 256.290939][ T9191] ? security_file_open+0x236/0x2f0 [ 256.296169][ T9191] ? cd_forget+0x160/0x160 [ 256.300602][ T9191] do_dentry_open+0x740/0x10c0 [ 256.305411][ T9191] vfs_open+0x73/0x80 [ 256.309404][ T9191] path_openat+0x1397/0x4420 [ 256.314058][ T9191] do_filp_open+0x192/0x3d0 [ 256.318587][ T9191] do_sys_open+0x29f/0x560 [ 256.323143][ T9191] __x64_sys_open+0x87/0x90 [ 256.327671][ T9191] do_syscall_64+0xf7/0x1c0 [ 256.332187][ T9191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.338080][ T9191] RIP: 0033:0x4143d1 [ 256.341985][ T9191] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 256.361596][ T9191] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 256.370020][ T9191] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 256.378013][ T9191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 256.386002][ T9191] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 256.394168][ T9191] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 20:18:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/-ev/sequencer2\x00', 0x82, 0x0) [ 256.402149][ T9191] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 20:18:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:18:15 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/.ev/sequencer2\x00', 0x82, 0x0) 20:18:15 executing program 0 (fault-call:0 fault-nth:8): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:15 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x16000, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x4}}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r3, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x240000}, 0xfebf, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000010) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x33c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00\x00\x00$\x00\a\a\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00deff000a000100636f64656c0000004c0002001000050000000000"], 0x3bc}}, 0x0) 20:18:15 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x804022, &(0x7f0000000040)={[{@noquota='noquota'}]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) [ 258.562275][ T9206] FAULT_INJECTION: forcing a failure. [ 258.562275][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 258.578521][ T9203] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 258.586633][ T9203] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 258.613460][ T9201] EXT4-fs (sda1): re-mounted. Opts: noquota, [ 258.627249][ T9206] CPU: 0 PID: 9206 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 258.635874][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.645933][ T9206] Call Trace: [ 258.649264][ T9206] dump_stack+0x1fb/0x318 [ 258.653620][ T9206] should_fail+0x555/0x770 [ 258.658148][ T9206] __should_failslab+0x11a/0x160 [ 258.663236][ T9206] should_failslab+0x9/0x20 [ 258.667837][ T9206] kmem_cache_alloc_trace+0x5d/0x2f0 [ 258.673136][ T9206] ? usb_control_msg+0x75/0x420 [ 258.678005][ T9206] usb_control_msg+0x75/0x420 [ 258.682683][ T9206] ? lock_acquire+0x158/0x250 [ 258.687368][ T9206] hub_ext_port_status+0x109/0x6c0 [ 258.692529][ T9206] hub_activate+0xcae/0x2030 [ 258.697169][ T9206] hub_resume+0x5d/0x350 [ 258.701413][ T9206] ? usbfs_notify_resume+0xdf/0xf0 [ 258.706576][ T9206] usb_resume_both+0x541/0x9e0 20:18:16 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='//ev/sequencer2\x00', 0x82, 0x0) [ 258.711361][ T9206] usb_runtime_resume+0x21/0x30 [ 258.716293][ T9206] __rpm_callback+0x14f/0x4b0 [ 258.720980][ T9206] ? autosuspend_check+0x5a0/0x5a0 [ 258.726191][ T9206] ? autosuspend_check+0x5a0/0x5a0 [ 258.731566][ T9206] rpm_resume+0xf4c/0x1a00 [ 258.736009][ T9206] __pm_runtime_resume+0x11b/0x180 [ 258.741129][ T9206] usb_autoresume_device+0x23/0x60 [ 258.746249][ T9206] usbdev_open+0x140/0x690 [ 258.750678][ T9206] ? do_raw_spin_unlock+0x136/0x260 [ 258.755893][ T9206] chrdev_open+0x509/0x590 [ 258.760320][ T9206] ? security_file_open+0x236/0x2f0 [ 258.765531][ T9206] ? cd_forget+0x160/0x160 [ 258.769951][ T9206] do_dentry_open+0x740/0x10c0 [ 258.774742][ T9206] vfs_open+0x73/0x80 [ 258.778737][ T9206] path_openat+0x1397/0x4420 [ 258.783371][ T9206] do_filp_open+0x192/0x3d0 [ 258.787909][ T9206] do_sys_open+0x29f/0x560 [ 258.792366][ T9206] __x64_sys_open+0x87/0x90 [ 258.796874][ T9206] do_syscall_64+0xf7/0x1c0 [ 258.801381][ T9206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.807275][ T9206] RIP: 0033:0x4143d1 [ 258.811173][ T9206] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 258.830806][ T9206] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 258.839231][ T9206] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 258.847238][ T9206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 258.855225][ T9206] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 258.863209][ T9206] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 258.871192][ T9206] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 [ 258.904874][ T9206] hub 5-0:1.0: hub_ext_port_status failed (err = -12) 20:18:16 executing program 0 (fault-call:0 fault-nth:9): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) [ 258.961295][ T9215] EXT4-fs (sda1): re-mounted. Opts: noquota, 20:18:16 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/0ev/sequencer2\x00', 0x82, 0x0) 20:18:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) fstatfs(r1, &(0x7f0000000340)=""/224) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r5, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0xfffffffffffffde8, &(0x7f0000000180)={0x0}}, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00f68814d13400e30b28ee66403bb9c8a338f276810f98b1003eed000000fcff00001400120dc32e4900627269646765000004000200"], 0x34}}, 0x0) 20:18:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x4e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) io_submit(0x0, 0xa4, &(0x7f0000000300)) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) clock_adjtime(0x0, 0x0) io_setup(0x206, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) io_submit(r0, 0x3, &(0x7f00000008c0)=[0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000580)="7bdcde09f1e1b1d99167a6218702a2b214bfcc1a6602454a3e0b1a6f46b0559999a78ae77c3a3e633d507d12bcfb23faba68f8ad08401932714532cd490e57014c251d6590d5090f41d04e058aebb694256959b33afdfc277a6782061a3be1e3e2eb50514c9f905ed472d6bd1a985d1ed237639e68db15e45b723ca8d3f250b48b1ea51abbd0ad25d7f07d9610f3faad05d5c013316a8c27c8f80e5f1164e15748e391940f0dcebfb82e9f6072a68b0d68ddeb0e4b25c8ce7e7b38854110183cbc3c7e41e34c0a9e5ec0d0e2c2d70770fa7c9bdf60eebc006ec15c0a1ce3cb072ed7c9a97437fdf4e2c345d6c6b5e2085c1f03dedc0bffa231", 0xf9, 0x4, 0x0, 0x2, r1}, 0x0]) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) clone3(&(0x7f0000000500)={0x0, &(0x7f00000003c0)=0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440), 0x12, 0x0, &(0x7f0000000480)=""/122, 0x7a, &(0x7f0000000b40)=""/4096}, 0x40) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x511000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x101000, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000680)='/dev/audio\x00', 0x40000, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r9 = accept$nfc_llcp(r8, 0x0, &(0x7f0000000840)) r10 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x22000, 0x61) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r11, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r12 = open(&(0x7f0000000980)='./file0\x00', 0x100, 0x4) r13 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/btrfs-control\x00', 0x40101, 0x0) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000003b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0xa, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x2}]}, @struct={0x6, 0x6, 0x0, 0x4, 0x0, 0x5, [{0xd, 0x3, 0xffff}, {0x0, 0x0, 0x6}, {0x2, 0x3, 0x8001}, {0x4, 0x3, 0x6}, {0xf, 0x2, 0x9}, {0xd, 0x3, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x931}}, @const={0x2, 0x0, 0x0, 0xa, 0x5}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x6}}, @ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @fwd={0xa}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x0, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000a40)=""/72, 0x10e, 0x48}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003d40)={0xffffffffffffffff}) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r17 = dup(r16) sendto$inet(r17, 0x0, 0xa4, 0xadf5571442d3cdbe, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) io_submit(r0, 0x8, &(0x7f0000003e00)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0xd, 0x40, r2, &(0x7f0000000300)="beb89c4a509ae84e3fc003321ea974ab4c37a8cc8a40b4325fec0ad138a786305760776c02653990eefa60d4e41ff727bc2d3b5b06dbbe616f60f5b6207e3039a1693d1802b8007d38c72a83396cd0382d", 0x51, 0xa4ff, 0x0, 0xbe1cad52534236d9, r3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x7, r4, &(0x7f0000000580)="784d80e57044364a31380dd2f8b4dc3e5f8c2e1ffc5e2330", 0x18, 0x9, 0x0, 0x456446f647131a84, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000740)="a867f6a965551113863c06e3ea94b43ce66d35065b906c97b68a18da994fa9c3f5e76a4ee62446cd72fc2436d96d3ecfefd6608eab28ec1f1a0184aad7378443bf110eb6085aa6d8dea2f3758df27307586122496f5023252e68850546076f1491f3b880704cde96de70b68fbfe324342fdb66e666a2e351c4271c8285e261436f5780c15f3dea6bd8fe5c91e2d258584a432acc00b0428613145ff7184b498f99c62904fcdde6bce3c99e9ce659bf38ccb012d7e4f1bd34ffa97f1782df249d83e404a99fb355fe3bbaaf4727dff7ea3d7030963fe9133f7cb0e7ecb6a0e5504c5552a910", 0xe5, 0x1ff, 0x0, 0x1, r7}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x7, r9, &(0x7f0000000880)="d6b018a21a8f282efc532badc1ffc4dd30c386e0567e8d4aef1ffaf9f58dbfd6753c4c7766dd34649dab2dc2835e3831ebcedc4e6c5546ba854951cc6c295a", 0x3f, 0x100000000, 0x0, 0x0, r10}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1f, r11, &(0x7f0000001b40)="b75d4df06906ffd9bd3a22ad690fd4bbf1d8b32e6046da6e45ecfb39d5311a2d906bb6da86120ad75364e08db3e79a3ca7dcb0f5d1a44fe22896808aa7c36c3b83c5260d37c9111cd121335b9de48fc0911eac7061ff5ffefc265fcc813ce95a8e184024b170da508d08ac7d97dc0b09a5edbc9ee13e6d53683750b47661151a565be5624f72327d1cf5f541d082930ed76bd2173440c0571182d2b31c297d52add4d164748fb9474a06dfed82332d40c75e6026406dcd335453a32b3925d9d3795466f4b5d03a4880488f8771c5bc41d0abd8f299608330623c3c66741618a1044f417cd1a75b1addbe7ecc0afd9c6162630bfef346b2a6f520b6214d52a031ceed1aecab2c3ffc5d304af40adf79f1b140a90191ecc5d6b477743f5b5f5e823e975cd19072a64a7f01ee6e58ce6b0dfbeba4e9fabf6896f29701f079c5b9dda5e53d52867cd4c46b8822831c21713553e21895da941760b0ef3c19211149a38d218d6784ef49241caba392aaf7760eca0dd3b2f736196febbe6835092732cef9af7dc653b6d71e3cc10d7b784a05cdfe6ce988092a155b577dcb64ed194ef1d2c28e4f11ce958003fe4aaca5bc89412e97cf20e16a9447367611b08b3f21bcfbb3fefad95f92c8207d10601fa52c912d09d7b355c6c54d1b1eb3881c3c4f0b96b95933e1611e67ab572c87cca8bcdd97001b20ca0938032f8af66336317c03b4ad25a312b81726711e370252cffae4c94996acccf6d0e57d9a5bcbcb64de03ac7cc92988d6e7942f9bc75f9b0b89cd3a6c40c23126811ed472b86f314c0b0da43af97740c14916b5383f88a2f5273aeb3c88f0e131c529778b3aec52fb952993a0d2829bda6dd49ad29ca528f6cc3b7b414fedae5f5d8e1017e479c4c425067a80e85ac5020d6cd4cb4c1b1ca364d9aaa9a54e6ba39800b5bd4bb53fe5858993247a21511a47e67c8ad869497cdadf107e32f04f70cc91a763cacbe98e16185a6ebc8191bbba2250e2f3a98c9749c6aab752df3946b2fa00713286c235bf82ec126c27258743e142115f840baf4b277668d08e74a2b930ea7e0b48b04afa6ab1696590b0835183090f7878966472446214d36611e0eb6b7a154a70272ca37339303e4b7c063e512d0d22cd9187a6aeae846e62890b064ad06b023c76b3ac8e1d7ce811698d405edc533fc36dcdad6e70b038edbdf2673f376b5a8dda4226f5270628341d202d235ac18045cccbec476a3ca2646e61b0224c0f12f80587780bd2d812e06054a9dd8ffe853d472fd220f21f6ae2192d990004d5bcc6e1d68109bee8fb2bcb3f670488d74068d6b11ad86cacb954b5697af8d6b9a3fa7a932068019de6b6e09894e93d4af675c3609ce1262d21b4b7aa2ba6e0b918fdd0be654276287ea5951165eebc0dedabd0c803beefd69a75513be39a5f0e754d9e59a11de905b8e15c0a23bc2e352bb0053a8c2802808946fb45cb87f91bbf04b8b7216df7600fadc5a3a80ce98a76691653bdd07d10e4941142545970e1953e09e0933c6708b850c3a873b2a2fdf2cfe43391448f399cb31ba29070e8d3b676f5ead1611b96544aa5d519d95d6e6dac5cd427f03fbdb3f52aee05aabeb58d4baaaacf98c333662a3a56f5e0be136ead038f55b278129a4406e1727e50486eb78a533d765aeb96aaa463434e38445d5fbb08106c4647d8dd5c9169de90c3c492646cdaad793e2e552f233d15cb725fccf047ce9ca9518b94153e26a40122c4ba39e96717620e87e6b6c416ff722cd534a1349810ec1b77e9482e111aac07c32c90565196e269f7ec90992260253877bfca7939b19c1bf60751299cca1ff901153f1c53e697bf011b02b5671b6aedc44c9b017ecc244a3f49f3789ea97d1c10389fd6d5a9e3e938091b5424976bd065a1ed54070aa537962df37cd85d30ad46a319de9e42adf4c94d366c259a7f614b4dda682e3376effc652a904193eea8df95d8004860217e0930fb693f33b8e0821ed350597d1d3295f03540a0c64bc04fe561af1d722f612403d1473f4fd28f0cdb8537c1ad2793d8549d0ca27bba93d137a2e1fe38726f7cf6fd89b5c3a01108915e51b344ea1ba29db6e0458a24dd6a64546852a074bc32ebe9bf1bb6a387600be90b0a5936ccf0a1144fc51bd42ff2b60b223e56f8e8474329af329af2ec709addab2ebd429cbead550b91f819c832f152eae13b4f82d2d69fe612d915156ec575dbfd7914b873b9c52d5c48d482ea950a0144f5f4a2efd55a59675ab66ac7e100a294c5807d5f8a44ffee83a5e11d04fa8f72f00f5d19f337173906925c5e4bdea607a0c3373bc59201f41fb53e660405fcd52693869cc209d39c2a1d6512f5e895d1c57005121a7250c3b0144d1e8cfe678dc086d6835998a9f342c33d8f3418f2f3acabcb143fa562b72822880501c55699dd447bde7d29b6e500e9283f2e0cc9d23df52564a7e4033473792d5cb23b2dea77775145ddf3acc0049e938b6df3aa1bcbb30e0039cd5c3e6bfe113eea5e26826545cc779404589efe5f328eadbe1b8e859ed1c5a3d4928ec35db67fd506b859a7fc71f2edd093205d6a7995233920868b8ddb17e814c68b14fcdacfa8aedcf35f889c9f297edc2cce74a9b78cc9a21230106b8c38036b731362799658385238772f776aef23675f13bb1da0e77d34410e0c06656a1cd4e259ff94719d67328c9f5fc5523d7af91d5e0c7a8a020683c8fa70d3cf903ba87c1a472e9db1cbbe3fb4afa90e2e6f96e72e807aef0ce0067133f81c0377d5700623f009e1a913b635a1a075184aaccbfc378a6ed6e06af48910cc41e1080e6a49d4a8c8bd182e5529f3bcff5560102436ec53fc4b300395ab08a90d417b1e94720bc4ed78ec1d111c4a2cd712d2810cab10fb0aedc32220d4aaf81e2114a0a6d35991306a308fbc5301f41ac7c22d89562ed46647de26b9fc44c39f0ea9ce161e453bd5deea8b8cc1fb47bfc700a8307c2e9b5ce5b9b3b936292b783eb37943f701fd6760c2ae08f90b1857aeb5e736066500d313740367107b14ed24c0fab55f79dced0ef2d25e6f9191dedd04512fadf76f6d59e67965aca157d27e176bd641f2e1f70f95034a78bc9d60a829e9a20233840e109d536083bf310e33532d5e1a8c0f9e7ee99b52f6819011103b8e0f76997f4e55bf4f1a57f9d8db3aab4ca0eab276f073dbdc401a1d976904ebdcab956739babda6aeff1b9af8cf19c8b0d3d44b3a72884a97905631de2d66d92411d63549542291df11bdc8164017b7343935ce99010cb319bcfd1826d69c4acb86a6bc81d15f77f961fa492759c1acc561fdd05c3018830c10307495087c02558e1abcd9c643d295a757750948f9945ce79c7b40d94744df361e7bf6a30d420c174156338c151edd3c8d97dcddfb834876f9631c7fa81a2d5c0f0ced06dbf5531b12caf27210481358eafc6ca8c7f2cbdc43aad13f1507c36cc4343df6fcfdf497a5b69c9883d938167a89282a98ab955cb665ad1b6749f08cd7b3379cfe56ba8d72d5a9af85fb1ddc610287f67c2c0f7068752df1ecbcf2dcb9b7be2b19b5a46afff72c01f27a5ea53a8bf066f93f9359c5dc96d66b8964eeb4ca4306fd895f970255c5297e695009c34e4ee2a43c4a2b35c63f2bfe354815b25e3e2f8bc3833170bf3d6fe276a7a3ccca5908dfaab5155b4f843fe98dcc2355b6487cb9d2d0fb4e51cca8611b19b718da81d7849b96c799dfa951b360e3b1f2834d1c1b7aa108f798852d9d6965b3e0179917b7aee9df70d2879dbda5db313e81b2a49f290d9fa4cdc9645dced32aa0d2abfcafa90c71614d9fd05d9cd4d55331bc33a86f22470adf07b7f8c9c1fa96f0ad7baa7540eb99a31efc5a32e1312192e1d7df80e29bc2b638c18f6ab00007eca05c5cf80c1a064fc3b8a2585a8d6df2e164fbcd5cbd68d7e386d765219e7e118a3d43848ce65de1ee3c96f6c4d761d8eb9890e3e1968c4aeba774bee9e8ade6d9765a2be7792411f344131abb478a54605e1d334bc0c5b51594ea4e509f0e8b3a79dad8646de4e6b0b04abeb6c2c063335df3bc564a7c940942e5988de8bd4d8562456aa5a54789c355f3f9ac6fe9f708e7b0a8ac6dfde334cce39371a17a08c464d350b4d7d6919992e0b72562cc07ee35628234909cf2a3e614b707d57a65da7350658b0a6f01fee2e86adf039e36da28fe0537262d3a14e3a2f2442b4b5d7ab6c70556bfc24bb94efcd700df758c93babeb68d8242cc30341a386e6fc9fe70dc5a28f6dbffde35e1dbbdc7bf0cf5f27c51b0141fe4f9c1d400b6b1448ada9ba856c6a9a0673a16f88e9bd2e6d2bb08863a371c329df9797215ce0d3f608a038343263f98fb396552f0644bc19be582d7cd15b8594fcec1784031f61d4a124adc8b2da3b436f3a60150dd2a0956cdb6542e7f43646411e7a32aa963f14db0ca2d9d87151b27136b75cc498642b3005483eba402a8fa0cb342be430270bd37d9ac23fbd4e1343c0e32012ba824ffb93850285781249613017b09885af12d260fcee0179890df21318d74e1da5c8cc3e294452061d95c3ba960fd0121f7de200d5ec395cdd106d78cc84386a436af98799530690d4e57487856b7618be1f70fa44b68a895fe54ca69edd9f669adf07ba2100668c79ba9c94293afaee76791b8f1a2265d21766d84c91f71d58c0576470d4418790db47f6ef10fc24f9568d67f37b2fc7b23b5d5bcf5d4a4f7002ed24161e30325c2024e34fbf5bda06453ad3c41ded0d92fbfa8128764d19abf640f2c7745a9e8ea0b8b1a797e67727ba81be10af9d8bb66a046534d7e9aef80c5ca38495b107f1da26512bae034b53134288c77afafd31e26b9ed50c65c7a8b8cc51d96f7e06fbb999649d0f98051cbb7b03a3212298dc4660a47c34c3ac04a1b556084028a36621524e963162502c998aa122527feebc5a8631f909c59aa700beee608be077002cab53aa36f5bb5271f3f74fc4de5e540e3dff1db590edcc458e8e54506ce9d3832f0f8b17ea4e1cbe412cbeef2759173369ca7ac2bfd8fb2859e6ce1f0a85e844fb081676c11b500d762f1fdd5496e38d0ff39bcede7c22f0bf46a3af66889fd668205f0100d1366c92c421ebb0bf901c1e08415d6b2845f7148a0b8928ee5f813b86ae7871a82df493eaad4cd0c53885245a213081939594e6423674531f5ed049abfc5634da72ee14fcdbc8d814f1719dcca65aa457f77cd19aa6444c4682d6df57b6691f75397d59e10fa21248323f28c3d4b21d6ab5b2284678e61926cf22977f2eaeef59eb297cc208d2189a0518928905e2f60ac447c99fe9511cc0094bfb516614ee05b1b2e42c8932cb9dc523707c36da59b04da27d877c425a46709d7f7e16ce5e168cef17ef7b4251e662d1853218625607f3e57a7f4603413d66acf724607aa2c1f8790a6abcaa48575308a273d49abf2b6ecb06fdc872e3e56bd9019788f734f72a3261b98b5a39efe875130ecf3ca0676c05744ce522424d394aa8b2318c48599ecf12a3943dff0b05b66988289585da68756904ceeed471a0708c137b1d558afa130ce9cd564c054abc3c09094695b4dd50123b0b1bfb34352654dd7c0224baad224095a89341ef327d6807cdf372cb6b8a6011556a30a0f8faf0c06bbb294525476038f60671cf90d387cc47085dd76637dd0157b9da0a742b79ce37093e592e06d0910ad45e5ea274dac06dcbec86ce7e04cd9bf739b7575e980d7bceef666bb8a620a8aedb269cd141ebb2da7a52b84235202", 0x1000, 0x8, 0x0, 0x1}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x8000, r12, &(0x7f0000002b40)="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", 0x1000, 0xffff, 0x0, 0x2, r13}, &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x1, r14, &(0x7f0000003c80)="6a479a2c63a0200c7a6cd59faf83a44d8349c8af3a47dcd20386f2a898d5484f8af9f81078c4db7b971ee8a9be1fa01079f02bdc8fc1170ef7411b473cbe92e3f3543513c850cefaa04a58983bcc9cd330535e76cd502c97347b", 0x5a, 0x8, 0x0, 0x1}, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x2, 0xb9e, r15, &(0x7f0000003d80)="fd674a96dbba2eed492e7734fff772b545f23ceb23452b01fd42ecc5c9b941a0155b9b4f5ba3a3555d96c42309b618", 0x2f, 0x84f, 0x0, 0x2, r17}]) r18 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r18) r19 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) r20 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r20, 0x208200) r21 = open(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r19, r19, &(0x7f0000000000), 0x8080fffffffe) r22 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r23 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x200100, 0x0) ioctl$RTC_UIE_ON(r23, 0x7003) r24 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r24, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r24, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r22, 0x84, 0xa, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r25}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r21, 0x84, 0x70, &(0x7f0000000040)={r25, @in6={{0xa, 0x4e20, 0x7fffffff, @empty, 0xe3}}, [0x6, 0xf7, 0x0, 0xffffffffffff0000, 0x6f38, 0x5, 0x7, 0x7e, 0x7, 0xb42, 0xff, 0x9, 0x6, 0x1000, 0x8001]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r18, 0x84, 0x19, &(0x7f0000000240)={r26}, 0x8) [ 259.069121][ T9227] FAULT_INJECTION: forcing a failure. [ 259.069121][ T9227] name failslab, interval 1, probability 0, space 0, times 0 [ 259.135055][ T9227] CPU: 1 PID: 9227 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 259.143828][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.153919][ T9227] Call Trace: [ 259.157231][ T9227] dump_stack+0x1fb/0x318 [ 259.161581][ T9227] should_fail+0x555/0x770 [ 259.166025][ T9227] __should_failslab+0x11a/0x160 [ 259.170981][ T9227] ? usb_alloc_urb+0x44/0x110 [ 259.175671][ T9227] should_failslab+0x9/0x20 [ 259.180185][ T9227] __kmalloc+0x7a/0x340 [ 259.184358][ T9227] usb_alloc_urb+0x44/0x110 [ 259.188873][ T9227] usb_control_msg+0x12b/0x420 [ 259.193652][ T9227] hub_ext_port_status+0x109/0x6c0 [ 259.198777][ T9227] hub_activate+0xcae/0x2030 [ 259.207664][ T9227] hub_resume+0x5d/0x350 [ 259.211920][ T9227] ? usbfs_notify_resume+0xdf/0xf0 [ 259.217045][ T9227] usb_resume_both+0x541/0x9e0 [ 259.221838][ T9227] usb_runtime_resume+0x21/0x30 [ 259.226701][ T9227] __rpm_callback+0x14f/0x4b0 [ 259.231387][ T9227] ? autosuspend_check+0x5a0/0x5a0 [ 259.236505][ T9227] ? autosuspend_check+0x5a0/0x5a0 [ 259.241620][ T9227] rpm_resume+0xf4c/0x1a00 [ 259.246062][ T9227] __pm_runtime_resume+0x11b/0x180 [ 259.251183][ T9227] usb_autoresume_device+0x23/0x60 [ 259.256394][ T9227] usbdev_open+0x140/0x690 [ 259.260872][ T9227] ? do_raw_spin_unlock+0x136/0x260 [ 259.266086][ T9227] chrdev_open+0x509/0x590 [ 259.270517][ T9227] ? security_file_open+0x236/0x2f0 [ 259.275722][ T9227] ? cd_forget+0x160/0x160 [ 259.280675][ T9227] do_dentry_open+0x740/0x10c0 [ 259.285456][ T9227] vfs_open+0x73/0x80 [ 259.289446][ T9227] path_openat+0x1397/0x4420 [ 259.294081][ T9227] do_filp_open+0x192/0x3d0 [ 259.298610][ T9227] do_sys_open+0x29f/0x560 [ 259.303048][ T9227] __x64_sys_open+0x87/0x90 [ 259.307573][ T9227] do_syscall_64+0xf7/0x1c0 [ 259.312091][ T9227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.318002][ T9227] RIP: 0033:0x4143d1 [ 259.321899][ T9227] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 259.341513][ T9227] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 259.349957][ T9227] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 259.357964][ T9227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 259.365972][ T9227] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 259.373961][ T9227] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 20:18:16 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/Lev/sequencer2\x00', 0x82, 0x0) [ 259.381991][ T9227] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 [ 259.404497][ T9227] hub 5-0:1.0: hub_ext_port_status failed (err = -12) 20:18:16 executing program 0 (fault-call:0 fault-nth:10): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) [ 259.462830][ T9244] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 259.564336][ T9252] FAULT_INJECTION: forcing a failure. [ 259.564336][ T9252] name failslab, interval 1, probability 0, space 0, times 0 [ 259.602982][ T9244] device bond2 entered promiscuous mode [ 259.636157][ T9252] CPU: 0 PID: 9252 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 259.644810][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.655010][ T9252] Call Trace: [ 259.658333][ T9252] dump_stack+0x1fb/0x318 [ 259.662686][ T9252] should_fail+0x555/0x770 [ 259.667143][ T9252] __should_failslab+0x11a/0x160 [ 259.672108][ T9252] ? kzalloc+0x1f/0x40 [ 259.676193][ T9252] should_failslab+0x9/0x20 [ 259.680704][ T9252] __kmalloc+0x7a/0x340 [ 259.685030][ T9252] kzalloc+0x1f/0x40 [ 259.688934][ T9252] usb_hcd_submit_urb+0x83a/0x1b90 [ 259.694053][ T9252] ? chrdev_open+0x509/0x590 [ 259.698655][ T9252] ? do_dentry_open+0x740/0x10c0 [ 259.701806][ T9244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.703598][ T9252] ? do_sys_open+0x29f/0x560 [ 259.703622][ T9252] ? do_syscall_64+0xf7/0x1c0 [ 259.703639][ T9252] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.725704][ T9252] usb_submit_urb+0x108e/0x1550 [ 259.730583][ T9252] usb_start_wait_urb+0xd4/0x2f0 [ 259.735540][ T9252] ? __kasan_check_write+0x14/0x20 [ 259.741009][ T9252] usb_control_msg+0x24a/0x420 [ 259.745799][ T9252] hub_ext_port_status+0x109/0x6c0 [ 259.750935][ T9252] hub_activate+0xcae/0x2030 [ 259.755550][ T9252] hub_resume+0x5d/0x350 [ 259.759805][ T9252] ? usbfs_notify_resume+0xdf/0xf0 [ 259.765040][ T9252] usb_resume_both+0x541/0x9e0 [ 259.768093][ T9249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.769812][ T9252] usb_runtime_resume+0x21/0x30 [ 259.783967][ T9252] __rpm_callback+0x14f/0x4b0 [ 259.788652][ T9252] ? autosuspend_check+0x5a0/0x5a0 [ 259.793785][ T9252] ? autosuspend_check+0x5a0/0x5a0 [ 259.798910][ T9252] rpm_resume+0xf4c/0x1a00 [ 259.803351][ T9252] __pm_runtime_resume+0x11b/0x180 [ 259.808583][ T9252] usb_autoresume_device+0x23/0x60 [ 259.813738][ T9252] usbdev_open+0x140/0x690 [ 259.818167][ T9252] ? do_raw_spin_unlock+0x136/0x260 [ 259.823384][ T9252] chrdev_open+0x509/0x590 [ 259.827955][ T9252] ? security_file_open+0x236/0x2f0 [ 259.833162][ T9252] ? cd_forget+0x160/0x160 [ 259.837591][ T9252] do_dentry_open+0x740/0x10c0 [ 259.842377][ T9252] vfs_open+0x73/0x80 [ 259.846364][ T9252] path_openat+0x1397/0x4420 [ 259.850995][ T9252] do_filp_open+0x192/0x3d0 [ 259.855520][ T9252] do_sys_open+0x29f/0x560 [ 259.859946][ T9252] __x64_sys_open+0x87/0x90 [ 259.864454][ T9252] do_syscall_64+0xf7/0x1c0 [ 259.868963][ T9252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.874857][ T9252] RIP: 0033:0x4143d1 [ 259.878841][ T9252] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 259.898452][ T9252] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 259.906879][ T9252] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 259.914980][ T9252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 259.923116][ T9252] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 259.931105][ T9252] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 259.939181][ T9252] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 [ 259.955818][ T9252] hub 5-0:1.0: hub_ext_port_status failed (err = -12) [ 260.019012][ T26] audit: type=1804 audit(1574626697.280:40): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir261194928/syzkaller.r9xou2/38/file0/bus" dev="loop5" ino=23 res=1 [ 260.087705][ T26] audit: type=1804 audit(1574626697.320:41): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir261194928/syzkaller.r9xou2/38/file0/bus" dev="loop5" ino=23 res=1 [ 260.164231][ T26] audit: type=1804 audit(1574626697.330:42): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir261194928/syzkaller.r9xou2/38/file0/bus" dev="loop5" ino=23 res=1 [ 260.196392][ T9244] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 260.219477][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:18:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x266, 0x0, 0x0, 0x0, 0x3b2}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 20:18:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/Xev/sequencer2\x00', 0x82, 0x0) 20:18:18 executing program 0 (fault-call:0 fault-nth:11): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'syz_tun\x00\x04\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="2f00000000000000000000000000e30000000000000000000000000000000000000000000000000000000000000100000000000000190083ed48b200"/77]}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3ded8", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e23, 0xf07, @ipv4={[], [], @loopback}, 0x7}, {0xa, 0x4e20, 0xffff, @rand_addr="66a73b50993bb02c0cfa979c8390596e", 0x5}, 0x0, [0x9, 0x80000000, 0x2, 0x500000, 0x2, 0x49, 0x1, 0xfffffffd]}, 0x5c) 20:18:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/\\ev/sequencer2\x00', 0x82, 0x0) [ 261.702973][ T9264] FAULT_INJECTION: forcing a failure. [ 261.702973][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 261.745309][ C1] sd 0:0:1:0: [sg0] tag#7850 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 261.754869][ C1] sd 0:0:1:0: [sg0] tag#7850 CDB: Third party copy in, sa=0x1f [ 261.762525][ C1] sd 0:0:1:0: [sg0] tag#7850 CDB[00]: 84 7f 32 73 c5 a3 ee c8 cd bd ad 71 e0 59 8b 0e [ 261.772267][ C1] sd 0:0:1:0: [sg0] tag#7850 CDB[10]: 6f 2d f8 d2 26 3f 09 4b 7d 2b a9 d1 89 db d3 de [ 261.781948][ C1] sd 0:0:1:0: [sg0] tag#7850 CDB[20]: d8 [ 261.793564][ T9264] CPU: 0 PID: 9264 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 261.802222][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.812320][ T9264] Call Trace: [ 261.815646][ T9264] dump_stack+0x1fb/0x318 [ 261.820001][ T9264] should_fail+0x555/0x770 [ 261.824439][ T9264] __should_failslab+0x11a/0x160 [ 261.829390][ T9264] should_failslab+0x9/0x20 [ 261.833906][ T9264] kmem_cache_alloc_trace+0x5d/0x2f0 [ 261.839207][ T9264] ? usb_control_msg+0x75/0x420 [ 261.844136][ T9264] usb_control_msg+0x75/0x420 [ 261.848835][ T9264] hub_ext_port_status+0x109/0x6c0 [ 261.853965][ T9264] hub_activate+0xcae/0x2030 [ 261.858577][ T9264] hub_resume+0x5d/0x350 [ 261.862826][ T9264] ? usbfs_notify_resume+0xdf/0xf0 [ 261.867952][ T9264] usb_resume_both+0x541/0x9e0 [ 261.872735][ T9264] usb_runtime_resume+0x21/0x30 [ 261.877592][ T9264] __rpm_callback+0x14f/0x4b0 [ 261.882275][ T9264] ? autosuspend_check+0x5a0/0x5a0 [ 261.887509][ T9264] ? autosuspend_check+0x5a0/0x5a0 [ 261.892625][ T9264] rpm_resume+0xf4c/0x1a00 [ 261.897062][ T9264] __pm_runtime_resume+0x11b/0x180 [ 261.902175][ T9264] usb_autoresume_device+0x23/0x60 [ 261.907289][ T9264] usbdev_open+0x140/0x690 [ 261.911713][ T9264] ? do_raw_spin_unlock+0x136/0x260 [ 261.916920][ T9264] chrdev_open+0x509/0x590 [ 261.921343][ T9264] ? security_file_open+0x236/0x2f0 [ 261.926557][ T9264] ? cd_forget+0x160/0x160 [ 261.930985][ T9264] do_dentry_open+0x740/0x10c0 [ 261.935775][ T9264] vfs_open+0x73/0x80 [ 261.939764][ T9264] path_openat+0x1397/0x4420 [ 261.944400][ T9264] do_filp_open+0x192/0x3d0 [ 261.949082][ T9264] do_sys_open+0x29f/0x560 [ 261.953519][ T9264] __x64_sys_open+0x87/0x90 [ 261.958035][ T9264] do_syscall_64+0xf7/0x1c0 [ 261.962557][ T9264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.968514][ T9264] RIP: 0033:0x4143d1 [ 261.972409][ T9264] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 261.992295][ T9264] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 262.000724][ T9264] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 262.008706][ T9264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 262.016689][ T9264] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 262.024674][ T9264] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 262.032680][ T9264] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 20:18:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/cev/sequencer2\x00', 0x82, 0x0) [ 262.056379][ T9264] hub 5-0:1.0: hub_ext_port_status failed (err = -12) 20:18:19 executing program 0 (fault-call:0 fault-nth:12): syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x73, 0x0) 20:18:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000371000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000029f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10000a}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/hev/sequencer2\x00', 0x82, 0x0) 20:18:19 executing program 1: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) syz_mount_image$erofs(&(0x7f0000000480)='erofs\x00', &(0x7f00000004c0)='./bus\x00', 0x8000, 0x9, &(0x7f0000000900)=[{&(0x7f0000000500)="17f9f1e4cd546c25f458d25e2d1aee6d8dcd846414af3b4f393d4c2af35e45b814d981907c404c185dc1cf6755bf61b2b1ac3c5ba4a7ac6efe8040b1abd78546e7bde65766c3ca957eba33d0d031c109547f4f5d510949a59fabb7ed71f9960ade2aae697a22e4bddf37b21dc4004fa4e9d1c5590794be7dbcab2eab8d287184db7c762ca38a5dc5f5c1f6896324c9c5c814fc52d50f85beded9b1a51d56bc936e1ef78db903feae9c7a3f842b9884e841796fa9cd46bc8c82cf3bd482eb026de00b8513e660b4d7353362695a917f53f01616c6292e993adb25bc0066ab04bf8d8fc7f8ff1d26e65ff8", 0xea, 0xff}, {&(0x7f0000000600)="3be976710ebbac01c83b8a683f12d69c2821e6b53850fd326eecf41454ed91", 0x1f, 0x7ff}, {&(0x7f0000000640)="c58b980a9245c04a0ebcaea26ff71a8952652cfa4b9c", 0x16, 0x20}, {&(0x7f0000000680)="fd200090", 0x4, 0x7fff}, {&(0x7f00000006c0), 0x0, 0xffff}, {&(0x7f0000000700)="c8fc66ad0f6569ad0e50dcd17cb1cb5f9fb37c34313fe987870f42561a5492c223be1897ba65d1f659bef37dbe5af8900d96938bc30ab6536935b76495bd7181507defa3af91d20fc2567ab31bdcb9ccfa060bb78e5da9115b93f2d653373725de518b639cc73dd6ff3e90435c7921e4a59c6abde6d3d4dc21d1a03a541f3f7221c4e0efdfd524736055f97dfef5fd93a494ed5b5bfe246068", 0x99}, {&(0x7f00000007c0)="108516a12d1c5e3054b47d11854103a5ed3b6876d3af7882e56889805e316b2a418d4e8c631cb0861dbd0774ad50352777b1ae0a294ed7", 0x37, 0x7f}, {&(0x7f0000000800)="347cb4", 0x3, 0x1a0f8533}, {&(0x7f0000000840)="f5cfd1048b010b0c2320350691944d799bf6a63ef14eb9080c6fe86cad26cec4b2e592bae033027c8b5e06e0af09eb6a1f582d241791e46c8e23c5d43936b5600da69ba44e94d8067d2fb82826493c1f0ca93c49f138337079b5d3aae7633c1a04583f36d455667a2651caf5274be4dce50d4c4a635dc0d80248bd138164d0e94116508dbb058580851c0eb15c5444ac1e0bb56af67152a5509088507d2e62c5a41bee97f0837a3c9b193456df5ca2c7bbc6a8a0e7c26ae1bd023a19", 0xbc, 0x1ff}], 0x201400, &(0x7f0000000a00)={[{@noacl='noacl'}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0xd137}}, {@acl='acl'}, {@noacl='noacl'}], [{@fowner_lt={'fowner<', r2}}]}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e4ff03005400005523b1fe0500fa6218f72517f26c8c", @ANYBLOB="850081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c15316132e2e"], 0xa2}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000180)={0x8ed0, 0x1, 0x1e00000}, 0xc) syz_open_procfs(0x0, 0x0) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000240)={0x1ff, 0x0, [0x0, 0x20, 0xfff, 0x0, 0x5], 0x7f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xa0, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffeff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd9b}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6cc}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x22000000}, 0x1) [ 262.285141][ T26] audit: type=1804 audit(1574626699.540:43): pid=9287 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir632198627/syzkaller.gFOjcX/38/bus" dev="sda1" ino=16778 res=1 [ 262.322216][ T9289] FAULT_INJECTION: forcing a failure. [ 262.322216][ T9289] name failslab, interval 1, probability 0, space 0, times 0 [ 262.387228][ T9289] CPU: 1 PID: 9289 Comm: syz-executor.0 Not tainted 5.4.0-rc8-syzkaller #0 [ 262.395873][ T9289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.405939][ T9289] Call Trace: [ 262.409271][ T9289] dump_stack+0x1fb/0x318 [ 262.415292][ T9289] should_fail+0x555/0x770 [ 262.419760][ T9289] __should_failslab+0x11a/0x160 [ 262.424714][ T9289] ? usb_alloc_urb+0x44/0x110 [ 262.429394][ T9289] should_failslab+0x9/0x20 [ 262.433899][ T9289] __kmalloc+0x7a/0x340 [ 262.438068][ T9289] usb_alloc_urb+0x44/0x110 [ 262.442592][ T9289] usb_control_msg+0x12b/0x420 [ 262.447361][ T9289] hub_ext_port_status+0x109/0x6c0 [ 262.452480][ T9289] hub_activate+0xcae/0x2030 [ 262.457079][ T9289] hub_resume+0x5d/0x350 [ 262.461314][ T9289] ? usbfs_notify_resume+0xdf/0xf0 [ 262.466435][ T9289] usb_resume_both+0x541/0x9e0 [ 262.471215][ T9289] usb_runtime_resume+0x21/0x30 [ 262.476071][ T9289] __rpm_callback+0x14f/0x4b0 [ 262.480751][ T9289] ? autosuspend_check+0x5a0/0x5a0 [ 262.485873][ T9289] ? autosuspend_check+0x5a0/0x5a0 [ 262.490988][ T9289] rpm_resume+0xf4c/0x1a00 [ 262.495454][ T9289] __pm_runtime_resume+0x11b/0x180 [ 262.500585][ T9289] usb_autoresume_device+0x23/0x60 [ 262.505704][ T9289] usbdev_open+0x140/0x690 [ 262.510131][ T9289] ? do_raw_spin_unlock+0x136/0x260 [ 262.515340][ T9289] chrdev_open+0x509/0x590 [ 262.519779][ T9289] ? security_file_open+0x236/0x2f0 [ 262.524993][ T9289] ? cd_forget+0x160/0x160 [ 262.529433][ T9289] do_dentry_open+0x740/0x10c0 [ 262.534222][ T9289] vfs_open+0x73/0x80 [ 262.538207][ T9289] path_openat+0x1397/0x4420 [ 262.542837][ T9289] do_filp_open+0x192/0x3d0 [ 262.547374][ T9289] do_sys_open+0x29f/0x560 [ 262.551998][ T9289] __x64_sys_open+0x87/0x90 [ 262.556512][ T9289] do_syscall_64+0xf7/0x1c0 [ 262.561026][ T9289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.566918][ T9289] RIP: 0033:0x4143d1 [ 262.570809][ T9289] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 262.590421][ T9289] RSP: 002b:00007f2d828287a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 262.598845][ T9289] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 262.606835][ T9289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f2d82828850 [ 262.614812][ T9289] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 262.622802][ T9289] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f2d828296d4 [ 262.630779][ T9289] R13: 00000000004ca4e5 R14: 00000000004e2550 R15: 0000000000000003 [ 262.652195][ T9289] hub 5-0:1.0: hub_ext_port_status failed (err = -12) [ 408.437434][ T1072] INFO: task syz-executor.5:9229 blocked for more than 143 seconds. [ 408.445688][ T1072] Not tainted 5.4.0-rc8-syzkaller #0 [ 408.452317][ T1072] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.461043][ T1072] syz-executor.5 D27360 9229 8056 0x00004004 [ 408.467454][ T1072] Call Trace: [ 408.470812][ T1072] __schedule+0x7b7/0xc30 [ 408.475156][ T1072] schedule+0x131/0x1e0 [ 408.479399][ T1072] io_schedule+0x8b/0x100 [ 408.483775][ T1072] wait_on_page_bit_common+0x918/0xc90 [ 408.489307][ T1072] ? trace_mm_filemap_add_to_page_cache+0x290/0x290 [ 408.495896][ T1072] wait_on_page_bit+0x46/0x50 [ 408.500750][ T1072] wait_on_page_writeback+0x13e/0x180 [ 408.506179][ T1072] truncate_inode_pages_range+0x119b/0x16e0 [ 408.512333][ T1072] truncate_setsize+0xd9/0x100 [ 408.517239][ T1072] fat_setattr+0x8d4/0xd60 [ 408.521667][ T1072] ? fat_getattr+0x200/0x200 [ 408.527017][ T1072] notify_change+0xa27/0xe70 [ 408.532153][ T1072] do_truncate+0x194/0x230 [ 408.536585][ T1072] path_openat+0x2fe3/0x4420 [ 408.541246][ T1072] ? __kasan_kmalloc+0x178/0x1b0 [ 408.546202][ T1072] do_filp_open+0x192/0x3d0 [ 408.551079][ T1072] do_sys_open+0x29f/0x560 [ 408.555516][ T1072] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 408.561060][ T1072] __x64_sys_creat+0x65/0x70 [ 408.565665][ T1072] do_syscall_64+0xf7/0x1c0 [ 408.570621][ T1072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.576525][ T1072] RIP: 0033:0x45a639 [ 408.580477][ T1072] Code: 03 00 00 48 29 f0 48 3d f8 12 00 00 76 7d 48 81 ec 08 10 00 00 48 89 ac 24 00 10 00 00 48 8d ac 24 00 10 00 00 48 8b 59 20 48 <85> db 75 67 48 8b b4 24 20 10 00 00 8b 8c 24 28 10 00 00 48 89 e7 [ 408.600317][ T1072] RSP: 002b:00007f9bf67a6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 408.608857][ T1072] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045a639 [ 408.616843][ T1072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000700 [ 408.624893][ T1072] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 408.632935][ T1072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9bf67a76d4 [ 408.641034][ T1072] R13: 00000000004c0ee8 R14: 00000000004d3be0 R15: 00000000ffffffff [ 408.649228][ T1072] INFO: task syz-executor.5:9239 blocked for more than 143 seconds. [ 408.657255][ T1072] Not tainted 5.4.0-rc8-syzkaller #0 [ 408.663159][ T1072] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.671958][ T1072] syz-executor.5 D24952 9239 8056 0x00004004 [ 408.678857][ T1072] Call Trace: [ 408.682146][ T1072] __schedule+0x7b7/0xc30 [ 408.686455][ T1072] schedule+0x131/0x1e0 [ 408.690764][ T1072] io_schedule+0x8b/0x100 [ 408.695088][ T1072] wait_on_page_bit_common+0x918/0xc90 [ 408.700632][ T1072] ? trace_mm_filemap_add_to_page_cache+0x290/0x290 [ 408.707287][ T1072] wait_on_page_bit+0x46/0x50 [ 408.711957][ T1072] wait_on_page_writeback+0x13e/0x180 [ 408.717446][ T1072] __filemap_fdatawait_range+0x1b5/0x3b0 [ 408.723101][ T1072] file_write_and_wait_range+0x141/0x1a0 [ 408.728849][ T1072] __generic_file_fsync+0x76/0x1a0 [ 408.733959][ T1072] fat_file_fsync+0x7c/0x190 [ 408.738628][ T1072] vfs_fsync_range+0xfd/0x1a0 [ 408.743301][ T1072] generic_file_write_iter+0x575/0x630 [ 408.748823][ T1072] do_iter_readv_writev+0x651/0x8e0 [ 408.754023][ T1072] do_iter_write+0x180/0x590 [ 408.758891][ T1072] ? retint_kernel+0x2b/0x2b [ 408.763499][ T1072] vfs_iter_write+0x7c/0xa0 [ 408.768066][ T1072] iter_file_splice_write+0x6d8/0xe20 [ 408.773450][ T1072] ? splice_from_pipe+0x180/0x180 [ 408.778632][ T1072] direct_splice_actor+0xf7/0x130 [ 408.783832][ T1072] splice_direct_to_actor+0x463/0xac0 [ 408.789258][ T1072] ? do_splice_direct+0x330/0x330 [ 408.794283][ T1072] do_splice_direct+0x200/0x330 [ 408.799230][ T1072] ? security_file_permission+0x130/0x350 [ 408.804964][ T1072] do_sendfile+0x7e4/0xfd0 [ 408.809463][ T1072] __x64_sys_sendfile64+0xfc/0x1b0 [ 408.814587][ T1072] do_syscall_64+0xf7/0x1c0 [ 408.822416][ T1072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.828414][ T1072] RIP: 0033:0x45a639 [ 408.832308][ T1072] Code: 03 00 00 48 29 f0 48 3d f8 12 00 00 76 7d 48 81 ec 08 10 00 00 48 89 ac 24 00 10 00 00 48 8d ac 24 00 10 00 00 48 8b 59 20 48 <85> db 75 67 48 8b b4 24 20 10 00 00 8b 8c 24 28 10 00 00 48 89 e7 [ 408.852220][ T1072] RSP: 002b:00007f9bf673ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 408.861551][ T1072] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a639 [ 408.870880][ T1072] RDX: 0000000020000000 RSI: 000000000000000e RDI: 000000000000000e [ 408.879009][ T1072] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 408.886986][ T1072] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f9bf673b6d4 [ 408.895065][ T1072] R13: 00000000004c85aa R14: 00000000004dec38 R15: 00000000ffffffff [ 408.903208][ T1072] [ 408.903208][ T1072] Showing all locks held in the system: [ 408.911024][ T1072] 1 lock held by khungtaskd/1072: [ 408.916041][ T1072] #0: ffffffff888d3e40 (rcu_read_lock){....}, at: rcu_lock_acquire+0x4/0x30 [ 408.924965][ T1072] 2 locks held by getty/7985: [ 408.929703][ T1072] #0: ffff8880a74ad090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 408.939106][ T1072] #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 408.948743][ T1072] 2 locks held by getty/7986: [ 408.953404][ T1072] #0: ffff8880a108e090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 408.962839][ T1072] #1: ffffc90005f392e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 408.972504][ T1072] 2 locks held by getty/7987: [ 408.977261][ T1072] #0: ffff8880a4d70090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 408.986471][ T1072] #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 408.996149][ T1072] 2 locks held by getty/7988: [ 409.000868][ T1072] #0: ffff88809eced090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 409.010166][ T1072] #1: ffffc90005f3f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 409.019855][ T1072] 2 locks held by getty/7989: [ 409.024509][ T1072] #0: ffff88809a65b090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 409.033770][ T1072] #1: ffffc90005f192e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 409.043374][ T1072] 2 locks held by getty/7990: [ 409.048161][ T1072] #0: ffff888094610090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 409.057425][ T1072] #1: ffffc90005f432e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 409.066983][ T1072] 2 locks held by getty/7991: [ 409.071722][ T1072] #0: ffff88809ff78090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 409.081347][ T1072] #1: ffffc90005f112e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 409.091029][ T1072] 2 locks held by kworker/0:4/8097: [ 409.096220][ T1072] #0: ffff8880aea34998 (&rq->lock){-.-.}, at: __schedule+0xda/0xc30 [ 409.104380][ T1072] #1: ffffffff888d3e40 (rcu_read_lock){....}, at: rcu_lock_acquire+0x4/0x30 [ 409.113320][ T1072] 3 locks held by syz-executor.5/9229: [ 409.118818][ T1072] #0: ffff88804feb2428 (sb_writers#13){.+.+}, at: mnt_want_write+0x4a/0xa0 [ 409.127556][ T1072] #1: ffff888093910830 (&sb->s_type->i_mutex_key#21){++++}, at: do_truncate+0x186/0x230 [ 409.137612][ T1072] #2: ffff8880939106d0 (&ei->truncate_lock){+.+.}, at: fat_setattr+0x8b9/0xd60 [ 409.146657][ T1072] 1 lock held by syz-executor.5/9239: [ 409.152098][ T1072] #0: ffff88804feb2428 (sb_writers#13){.+.+}, at: do_sendfile+0x7c2/0xfd0 [ 409.160891][ T1072] [ 409.163229][ T1072] ============================================= [ 409.163229][ T1072] [ 409.171830][ T1072] NMI backtrace for cpu 1 [ 409.176170][ T1072] CPU: 1 PID: 1072 Comm: khungtaskd Not tainted 5.4.0-rc8-syzkaller #0 [ 409.184384][ T1072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.194439][ T1072] Call Trace: [ 409.197764][ T1072] dump_stack+0x1fb/0x318 [ 409.202081][ T1072] nmi_cpu_backtrace+0xaf/0x1a0 [ 409.206912][ T1072] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 409.213787][ T1072] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 409.219921][ T1072] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 409.225903][ T1072] arch_trigger_cpumask_backtrace+0x10/0x20 [ 409.231849][ T1072] trigger_all_cpu_backtrace+0x17/0x20 [ 409.237306][ T1072] watchdog+0xbb9/0xbd0 [ 409.241442][ T1072] kthread+0x332/0x350 [ 409.245483][ T1072] ? hungtask_pm_notify+0x50/0x50 [ 409.250492][ T1072] ? kthread_blkcg+0xe0/0xe0 [ 409.255069][ T1072] ret_from_fork+0x24/0x30 [ 409.259602][ T1072] Sending NMI from CPU 1 to CPUs 0: [ 409.264900][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 409.265819][ T1072] Kernel panic - not syncing: hung_task: blocked tasks [ 409.280027][ T1072] CPU: 1 PID: 1072 Comm: khungtaskd Not tainted 5.4.0-rc8-syzkaller #0 [ 409.288255][ T1072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.298294][ T1072] Call Trace: [ 409.301585][ T1072] dump_stack+0x1fb/0x318 [ 409.305971][ T1072] panic+0x264/0x7a9 [ 409.310124][ T1072] ? nmi_trigger_cpumask_backtrace+0x21a/0x290 [ 409.317576][ T1072] watchdog+0xbcc/0xbd0 [ 409.321723][ T1072] kthread+0x332/0x350 [ 409.325783][ T1072] ? hungtask_pm_notify+0x50/0x50 [ 409.330821][ T1072] ? kthread_blkcg+0xe0/0xe0 [ 409.335416][ T1072] ret_from_fork+0x24/0x30 [ 409.341516][ T1072] Kernel Offset: disabled [ 409.345855][ T1072] Rebooting in 86400 seconds..