\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r3, 0x0, &(0x7f0000000180)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x40000080806, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x40fdf) 06:07:53 executing program 5: add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x7, @sliced}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000093c200000062aaaaaaaaaabb64461ec661403c968e2db44987130d4400"/41], 0x29) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r3, 0x0, &(0x7f0000000180)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x40000080806, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x40fdf) [ 545.762325][T19522] mkiss: ax0: crc mode is auto. 06:07:53 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0}, 0x20) 06:07:56 executing program 5: add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x7, @sliced}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000093c200000062aaaaaaaaaabb64461ec661403c968e2db44987130d4400"/41], 0x29) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r3, 0x0, &(0x7f0000000180)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x40000080806, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x40fdf) 06:07:56 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x28, 0x0, &(0x7f00000000c0)) 06:07:56 executing program 4: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000000)) setgid(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 06:07:56 executing program 1: add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x7, @sliced}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000093c200000062aaaaaaaaaabb64461ec661403c968e2db44987130d4400"/41], 0x29) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r3, 0x0, &(0x7f0000000180)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x40000080806, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x40fdf) 06:07:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_cmd={0x19}}) 06:07:56 executing program 2: add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x7, @sliced}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000093c200000062aaaaaaaaaabb64461ec661403c968e2db44987130d4400"/41], 0x29) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r3, 0x0, &(0x7f0000000180)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x40000080806, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x40fdf) [ 548.276463][T19565] mkiss: ax0: crc mode is auto. 06:07:56 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01003ddf45f187edef68441dda35bf4a7be7b9973809ae62f5c91c00000000000047027fa1b9b385b4000000000000000b34dd1361e3d845"], 0x38) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 06:07:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000680), 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0xb0}, 0x0) 06:07:56 executing program 1: add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x7, @sliced}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000093c200000062aaaaaaaaaabb64461ec661403c968e2db44987130d4400"/41], 0x29) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r3, 0x0, &(0x7f0000000180)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$inet6(0xa, 0x40000080806, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @dev}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x40fdf) 06:07:56 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x2}]}}, &(0x7f00000003c0)=""/219, 0x32, 0xdb, 0x8}, 0x20) [ 548.495113][ T25] audit: type=1804 audit(1575266876.363:124): pid=19579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir141192068/syzkaller.JxLinh/124/file0" dev="sda1" ino=16801 res=1 06:07:56 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readahead(r0, 0x0, 0x0) [ 548.673466][ T25] audit: type=1804 audit(1575266876.533:125): pid=19582 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir141192068/syzkaller.JxLinh/124/file0" dev="sda1" ino=16801 res=1 06:07:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="736155b81b2ae44aa5e4b320b353f187fbd9753eb9815860855415f1", 0x1c, r0) keyctl$read(0xb, r1, &(0x7f0000000180)=""/27, 0x1b) 06:07:56 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) [ 548.762129][T19594] BPF:[1] ARRAY (anon) [ 548.816727][ T25] audit: type=1804 audit(1575266876.573:126): pid=19582 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir141192068/syzkaller.JxLinh/124/file0" dev="sda1" ino=16801 res=1 [ 548.839295][T19594] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 548.915158][T19594] BPF: [ 548.932973][T19594] BPF:vlen != 0 06:07:56 executing program 1: r0 = fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) dup2(r0, r1) 06:07:56 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x18) [ 548.971583][T19594] BPF: [ 548.971583][T19594] [ 548.985433][T19604] BPF:[1] ARRAY (anon) [ 549.035365][T19604] BPF:type_id=0 index_type_id=0 nr_elems=0 [ 549.065852][T19604] BPF: [ 549.069971][T19604] BPF:vlen != 0 [ 549.073996][T19604] BPF: [ 549.073996][T19604] 06:07:57 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000100)="2e0000002b00050ad25a80648c6356c10a24fc00100004000a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 06:07:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb1, &(0x7f00000000c0)) 06:07:57 executing program 1: r0 = fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) dup2(r0, r1) 06:07:59 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01003ddf45f187edef68441dda35bf4a7be7b9973809ae62f5c91c00000000000047027fa1b9b385b4000000000000000b34dd1361e3d845"], 0x38) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 06:07:59 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x18) 06:07:59 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x18) 06:07:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb1, &(0x7f00000000c0)) 06:07:59 executing program 1: r0 = fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) dup2(r0, r1) 06:07:59 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) 06:07:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb1, &(0x7f00000000c0)) 06:07:59 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x18) 06:07:59 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x18) [ 551.743935][ T25] audit: type=1804 audit(1575266879.603:127): pid=19658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir141192068/syzkaller.JxLinh/125/file0" dev="sda1" ino=16765 res=1 06:07:59 executing program 1: r0 = fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) dup2(r0, r1) 06:07:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb1, &(0x7f00000000c0)) 06:07:59 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) 06:08:00 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01003ddf45f187edef68441dda35bf4a7be7b9973809ae62f5c91c00000000000047027fa1b9b385b4000000000000000b34dd1361e3d845"], 0x38) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 06:08:00 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x18) 06:08:00 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01003ddf45f187edef68441dda35bf4a7be7b9973809ae62f5c91c00000000000047027fa1b9b385b4000000000000000b34dd1361e3d845"], 0x38) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 06:08:00 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x18) 06:08:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) 06:08:00 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) [ 552.319317][ T25] audit: type=1804 audit(1575266880.183:128): pid=19696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir003198120/syzkaller.eX1fc7/423/file0" dev="sda1" ino=16899 res=1 06:08:00 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x19, @mcast2, 0x6}, {0xa, 0x4e21, 0xffff0000, @mcast2, 0x9}, 0xe0f, [0x80, 0xfffffffd, 0x7d4, 0x7fff, 0x20, 0x9, 0x4, 0x100]}, 0x5c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0xb7, "b521d040b37bc0adb4bec89795e646a628f00e276866a68e0c0505260da5c3690bcbd43828d3bb7f61b290e95d3b17540b6881d958622c44a6c126fba11d6b8afb8a5a469013c62dd66783c9385104fba57b363031039ca433989127a4e4bf418768cbd311db742e40a085a72a76752269f9356aadff13d5fec632c7c15dd44ab33f4bb606285e98c6f841ea397003e56e399011fdf2fe0eb3fce65fe4f10aff950d8876ffce23e8f86c1c9c06ff69548192b02ca03a7d"}, &(0x7f0000000100)=0xdb) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') ptrace$peekuser(0x3, 0x0, 0x0) [ 552.519927][ T25] audit: type=1804 audit(1575266880.383:129): pid=19709 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir141192068/syzkaller.JxLinh/126/file0" dev="sda1" ino=17011 res=1 06:08:00 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) 06:08:00 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) 06:08:00 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) 06:08:00 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01003ddf45f187edef68441dda35bf4a7be7b9973809ae62f5c91c00000000000047027fa1b9b385b4000000000000000b34dd1361e3d845"], 0x38) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 06:08:01 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) 06:08:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) [ 553.187638][ T25] audit: type=1804 audit(1575266881.053:130): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir141192068/syzkaller.JxLinh/127/file0" dev="sda1" ino=16790 res=1 06:08:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) 06:08:03 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01003ddf45f187edef68441dda35bf4a7be7b9973809ae62f5c91c00000000000047027fa1b9b385b4000000000000000b34dd1361e3d845"], 0x38) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 06:08:03 executing program 5: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffd6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x6, 0x0) unshare(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000005c0)=0x26c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r7 = socket(0x40000000002, 0x0, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010120, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, 0x0, 0x0) 06:08:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) 06:08:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) 06:08:03 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x19, @mcast2, 0x6}, {0xa, 0x4e21, 0xffff0000, @mcast2, 0x9}, 0xe0f, [0x80, 0xfffffffd, 0x7d4, 0x7fff, 0x20, 0x9, 0x4, 0x100]}, 0x5c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0xb7, "b521d040b37bc0adb4bec89795e646a628f00e276866a68e0c0505260da5c3690bcbd43828d3bb7f61b290e95d3b17540b6881d958622c44a6c126fba11d6b8afb8a5a469013c62dd66783c9385104fba57b363031039ca433989127a4e4bf418768cbd311db742e40a085a72a76752269f9356aadff13d5fec632c7c15dd44ab33f4bb606285e98c6f841ea397003e56e399011fdf2fe0eb3fce65fe4f10aff950d8876ffce23e8f86c1c9c06ff69548192b02ca03a7d"}, &(0x7f0000000100)=0xdb) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') ptrace$peekuser(0x3, 0x0, 0x0) 06:08:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) 06:08:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) [ 555.380475][ T25] audit: type=1804 audit(1575266883.243:131): pid=19797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir003198120/syzkaller.eX1fc7/424/file0" dev="sda1" ino=16799 res=1 06:08:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) 06:08:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000140)) ptrace(0x10, r2) ptrace$cont(0x21, r2, 0x0, 0x0) 06:08:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) 06:08:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffda, 0x3}, 0x10) 06:08:03 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x19, @mcast2, 0x6}, {0xa, 0x4e21, 0xffff0000, @mcast2, 0x9}, 0xe0f, [0x80, 0xfffffffd, 0x7d4, 0x7fff, 0x20, 0x9, 0x4, 0x100]}, 0x5c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0xb7, "b521d040b37bc0adb4bec89795e646a628f00e276866a68e0c0505260da5c3690bcbd43828d3bb7f61b290e95d3b17540b6881d958622c44a6c126fba11d6b8afb8a5a469013c62dd66783c9385104fba57b363031039ca433989127a4e4bf418768cbd311db742e40a085a72a76752269f9356aadff13d5fec632c7c15dd44ab33f4bb606285e98c6f841ea397003e56e399011fdf2fe0eb3fce65fe4f10aff950d8876ffce23e8f86c1c9c06ff69548192b02ca03a7d"}, &(0x7f0000000100)=0xdb) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') ptrace$peekuser(0x3, 0x0, 0x0) 06:08:06 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="01003ddf45f187edef68441dda35bf4a7be7b9973809ae62f5c91c00000000000047027fa1b9b385b4000000000000000b34dd1361e3d845"], 0x38) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 06:08:06 executing program 0: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000600000/0x1000)=nil, 0x1000}, 0x1}) 06:08:06 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffda, 0x3}, 0x10) 06:08:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) 06:08:06 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e24, 0x19, @mcast2, 0x6}, {0xa, 0x4e21, 0xffff0000, @mcast2, 0x9}, 0xe0f, [0x80, 0xfffffffd, 0x7d4, 0x7fff, 0x20, 0x9, 0x4, 0x100]}, 0x5c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0xb7, "b521d040b37bc0adb4bec89795e646a628f00e276866a68e0c0505260da5c3690bcbd43828d3bb7f61b290e95d3b17540b6881d958622c44a6c126fba11d6b8afb8a5a469013c62dd66783c9385104fba57b363031039ca433989127a4e4bf418768cbd311db742e40a085a72a76752269f9356aadff13d5fec632c7c15dd44ab33f4bb606285e98c6f841ea397003e56e399011fdf2fe0eb3fce65fe4f10aff950d8876ffce23e8f86c1c9c06ff69548192b02ca03a7d"}, &(0x7f0000000100)=0xdb) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') ptrace$peekuser(0x3, 0x0, 0x0) 06:08:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x0) 06:08:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) dup3(r0, r1, 0x0) 06:08:06 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffda, 0x3}, 0x10) 06:08:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) [ 558.524427][ T25] audit: type=1804 audit(1575266886.383:132): pid=19855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir003198120/syzkaller.eX1fc7/425/file0" dev="sda1" ino=17425 res=1 06:08:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setresgid(0x0, r1, 0x0) 06:08:06 executing program 5: r0 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000200)=0x1, 0x4) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040), 0x0, 0x0) 06:08:06 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffda, 0x3}, 0x10) 06:08:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/226, 0xe2) 06:08:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setresgid(0x0, r1, 0x0) 06:08:09 executing program 2: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) 06:08:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x0) 06:08:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010000ffff0800000000000000010000850000000004000000020000000000000a00000000da003ed9aed616aa94f92417f9e857d1d45b54da920bfbed77cff360afa7996df6a1309418eec5f97cebdc661626027c1bb39852ffbb5b1884c5"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x20) 06:08:09 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'gretap0\x00'}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 06:08:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32=r2, @ANYBLOB="000002000a000200ffffffffffff523c7cee61e2fa21727600000000000004ec36771e033c8d28b407440ec2021503d47febeb5602d000c02896c0455b7c297708ff3dbf4c129bc3039a8523a55486a436873312bec79e3f0bd982e93eba512e1ba1214ec19e325737104b25d3d51945497d194db9d4ba4c458843530ea5e80a386143fc07b509d589ac71ea612235adcbcd6f8f8194f181ec4ce405209fd8850c34edbc6d10d5fdbe2bff7a797e202ccaa2d2c7e516022a7599"], 0x28}}, 0x0) 06:08:09 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) 06:08:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setresgid(0x0, r1, 0x0) 06:08:09 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'gretap0\x00'}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 06:08:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/226, 0xe2) 06:08:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setresgid(0x0, r1, 0x0) 06:08:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/226, 0xe2) 06:08:09 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'gretap0\x00'}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 06:08:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/226, 0xe2) 06:08:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x0) 06:08:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 06:08:10 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'gretap0\x00'}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 06:08:10 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) 06:08:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/226, 0xe2) 06:08:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/226, 0xe2) [ 562.421531][T19937] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 06:08:10 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) 06:08:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 06:08:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x02\x00'}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)=""/226, 0xe2) 06:08:10 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) [ 562.790697][T19954] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 06:08:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 06:08:11 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) [ 563.187574][T19965] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 06:08:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x0) 06:08:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 06:08:11 executing program 3: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) 06:08:11 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) [ 563.486895][T19981] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 06:08:11 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) 06:08:11 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880344fb0a000200060ada1b40d805000300c50083b8", 0xb5}], 0x1}, 0x0) 06:08:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x2, 0x2, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0xff}, 0x1f00}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x4}, 0x18) r6 = socket$unix(0x1, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000040)={@remote, @empty, 0x0}, &(0x7f0000000080)=0xc) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f00000000c0)={r8, 0x5, 0x8e, 0x20, 0x3, 0x2, 0x3}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$unix(0x1, 0x10004000000002, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000240)=""/191, 0x0, 0xbf, 0x8}, 0x20) [ 563.731338][T19985] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 06:08:11 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) [ 564.082255][T19998] BPF:hdr_len not found 06:08:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x2, 0x2, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0xff}, 0x1f00}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x4}, 0x18) r6 = socket$unix(0x1, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000040)={@remote, @empty, 0x0}, &(0x7f0000000080)=0xc) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f00000000c0)={r8, 0x5, 0x8e, 0x20, 0x3, 0x2, 0x3}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$unix(0x1, 0x10004000000002, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000240)=""/191, 0x0, 0xbf, 0x8}, 0x20) 06:08:12 executing program 3: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) 06:08:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000011002b0400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000101c0012000c000100627269646765009c0c00020008001900080002004b1499f4ca18e488e4c89e232ff07f79e6afc93ba46b470fa10749e5aada8f295783c2977be8342bdd6def7a5db77506e44e494e5f3fe62d612a9e"], 0x3c}}, 0x0) 06:08:12 executing program 1: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) 06:08:12 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) [ 564.471307][T20003] BPF:hdr_len not found 06:08:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x2, 0x2, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0xff}, 0x1f00}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x4}, 0x18) r6 = socket$unix(0x1, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000040)={@remote, @empty, 0x0}, &(0x7f0000000080)=0xc) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f00000000c0)={r8, 0x5, 0x8e, 0x20, 0x3, 0x2, 0x3}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$unix(0x1, 0x10004000000002, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000240)=""/191, 0x0, 0xbf, 0x8}, 0x20) 06:08:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffaa, &(0x7f0000000100)) [ 564.665867][T20014] device bridge5 entered promiscuous mode [ 564.706643][T20020] device bridge_slave_0 left promiscuous mode [ 564.753291][T20020] bridge0: port 1(bridge_slave_0) entered disabled state 06:08:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffaa, &(0x7f0000000100)) 06:08:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffaa, &(0x7f0000000100)) 06:08:12 executing program 1: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x3a, 0x16, 0x0, 0x0) [ 565.025323][T20020] bridge5: port 1(bridge_slave_0) entered blocking state [ 565.042774][T20020] bridge5: port 1(bridge_slave_0) entered disabled state [ 565.100107][T20037] BPF:hdr_len not found [ 565.126197][T20020] device bridge_slave_0 entered promiscuous mode [ 565.146373][T20020] bridge5: port 1(bridge_slave_0) entered blocking state [ 565.154302][T20020] bridge5: port 1(bridge_slave_0) entered forwarding state 06:08:13 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffd26) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) [ 565.216338][T20023] device bridge_slave_0 left promiscuous mode [ 565.223587][T20023] bridge5: port 1(bridge_slave_0) entered disabled state 06:08:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffaa, &(0x7f0000000100)) 06:08:13 executing program 5: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x1, 0x10) 06:08:13 executing program 3: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) ftruncate(r0, 0x1f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x5d6, 0xfff, 0x0, 0x8, 0xf7, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r3, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) getgid() syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @bt={0x80, 0x395d, 0x7, 0xffffffff, 0xfff, 0x0, 0x10, 0x3}}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x40400) [ 565.860305][T20020] device bridge5 entered promiscuous mode 06:08:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000011002b0400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000101c0012000c000100627269646765009c0c00020008001900080002004b1499f4ca18e488e4c89e232ff07f79e6afc93ba46b470fa10749e5aada8f295783c2977be8342bdd6def7a5db77506e44e494e5f3fe62d612a9e"], 0x3c}}, 0x0) 06:08:14 executing program 5: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x1, 0x10) 06:08:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$describe(0x6, r2, 0x0, 0x0) 06:08:14 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44) io_setup(0xc, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYPTR], 0x8) io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 06:08:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @volatile={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0x33b, 0x1}, 0x20) 06:08:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x2, 0x2, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0xff}, 0x1f00}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x4}, 0x18) r6 = socket$unix(0x1, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000040)={@remote, @empty, 0x0}, &(0x7f0000000080)=0xc) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f00000000c0)={r8, 0x5, 0x8e, 0x20, 0x3, 0x2, 0x3}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$unix(0x1, 0x10004000000002, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000240)=""/191, 0x0, 0xbf, 0x8}, 0x20) 06:08:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000011002b0400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000101c0012000c000100627269646765009c0c00020008001900080002004b1499f4ca18e488e4c89e232ff07f79e6afc93ba46b470fa10749e5aada8f295783c2977be8342bdd6def7a5db77506e44e494e5f3fe62d612a9e"], 0x3c}}, 0x0) 06:08:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$describe(0x6, r2, 0x0, 0x0) 06:08:14 executing program 5: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x1, 0x10) [ 566.692698][T20080] device bridge5 entered promiscuous mode 06:08:14 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44) io_setup(0xc, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYPTR], 0x8) io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 566.751469][T20086] device bridge1 entered promiscuous mode [ 566.762800][T20088] bridge5: port 1(bridge_slave_0) entered blocking state [ 566.770340][T20091] BPF:hdr_len not found [ 566.792003][T20088] bridge5: port 1(bridge_slave_0) entered disabled state 06:08:14 executing program 5: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x1, 0x10) 06:08:14 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) [ 566.812008][T20088] device bridge_slave_0 entered promiscuous mode [ 566.821870][T20088] bridge5: port 1(bridge_slave_0) entered blocking state [ 566.831743][T20088] bridge5: port 1(bridge_slave_0) entered forwarding state [ 566.884146][T20086] device bridge_slave_0 left promiscuous mode [ 566.929301][T20086] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.154465][T20086] bridge1: port 1(bridge_slave_0) entered blocking state [ 567.161958][T20086] bridge1: port 1(bridge_slave_0) entered disabled state [ 567.170547][T20086] device bridge_slave_0 entered promiscuous mode [ 567.178570][T20086] bridge1: port 1(bridge_slave_0) entered blocking state [ 567.187114][T20086] bridge1: port 1(bridge_slave_0) entered forwarding state [ 567.196064][T20099] device bridge_slave_0 left promiscuous mode [ 567.203097][T20099] bridge1: port 1(bridge_slave_0) entered disabled state [ 567.476288][T20080] device bridge_slave_0 left promiscuous mode [ 567.482723][T20080] bridge5: port 1(bridge_slave_0) entered disabled state 06:08:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000011002b0400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000101c0012000c000100627269646765009c0c00020008001900080002004b1499f4ca18e488e4c89e232ff07f79e6afc93ba46b470fa10749e5aada8f295783c2977be8342bdd6def7a5db77506e44e494e5f3fe62d612a9e"], 0x3c}}, 0x0) 06:08:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$describe(0x6, r2, 0x0, 0x0) 06:08:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f003efb0a0002000000000000000f00060004000000", 0x2e}], 0x1}, 0x0) 06:08:15 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) 06:08:15 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44) io_setup(0xc, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYPTR], 0x8) io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 06:08:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000011002b0400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000101c0012000c000100627269646765009c0c00020008001900080002004b1499f4ca18e488e4c89e232ff07f79e6afc93ba46b470fa10749e5aada8f295783c2977be8342bdd6def7a5db77506e44e494e5f3fe62d612a9e"], 0x3c}}, 0x0) [ 568.033603][T20120] bridge: RTM_NEWNEIGH with invalid ether address [ 568.071293][T20115] device bridge1 entered promiscuous mode 06:08:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$describe(0x6, r2, 0x0, 0x0) 06:08:15 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) 06:08:16 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) [ 568.106839][T20121] bridge1: port 1(bridge_slave_0) entered blocking state [ 568.151975][T20121] bridge1: port 1(bridge_slave_0) entered disabled state [ 568.165659][T20121] device bridge_slave_0 entered promiscuous mode [ 568.172908][T20121] bridge1: port 1(bridge_slave_0) entered blocking state [ 568.180114][T20121] bridge1: port 1(bridge_slave_0) entered forwarding state [ 568.219093][T20123] device bridge_slave_0 left promiscuous mode [ 568.227718][T20123] bridge1: port 1(bridge_slave_0) entered disabled state 06:08:16 executing program 3: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44) io_setup(0xc, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYPTR], 0x8) io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 06:08:16 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) 06:08:16 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) [ 568.912864][T20122] device bridge5 entered promiscuous mode [ 568.921041][T20131] bridge5: port 1(bridge_slave_0) entered blocking state [ 568.941911][T20131] bridge5: port 1(bridge_slave_0) entered disabled state [ 568.950780][T20131] device bridge_slave_0 entered promiscuous mode [ 568.958183][T20131] bridge5: port 1(bridge_slave_0) entered blocking state [ 568.965318][T20131] bridge5: port 1(bridge_slave_0) entered forwarding state [ 568.984164][T20134] device bridge_slave_0 left promiscuous mode [ 568.991255][T20134] bridge5: port 1(bridge_slave_0) entered disabled state 06:08:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000011002b0400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000101c0012000c000100627269646765009c0c00020008001900080002004b1499f4ca18e488e4c89e232ff07f79e6afc93ba46b470fa10749e5aada8f295783c2977be8342bdd6def7a5db77506e44e494e5f3fe62d612a9e"], 0x3c}}, 0x0) 06:08:17 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) 06:08:17 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) 06:08:17 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) 06:08:17 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) bind$isdn(r0, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x29}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x10100) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00U\x00\xa3\x9f&0?\x8f\\\x01\x00\x00\x00\x00\xbf\x06\x8a\xa9\xcb3\xe1uf\xdc\x1a\x0e\b\x7f\xc7\x05$\xfdm\xd3y\xa0\xef\xe1\xb6\xe8\xb7 \xc2\x1bnY1\xb3\x8b9\xfb*y\xbe\x0f2\x13 U\xdc\x12\xbf\v/T\xfb%\t\xc9c\x9e\x9e\xe4?\xb1\xab\"\xc8\x15:&h\tZ[\x87\xd7\xaf\xaf6\xdf\xbd#\\\x14i\x1a\xfc\xbbA~\xf1\xe7\xb5\x87y\x1a\xda\xe5f\xd0\f\xd5x;\x00\x90\xcb\x8a\xe6\xdeJ\r\t\x9b\a\xae\xac+\xbc\xd6\xe5\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j,`\x8a\xf3\x85\n\x1d\xecVJ\\t\xe5;\x84\xd2\x036\f\x84]V\x9ew[\xbfb\xbe,\xa0\xb6\x82\x9b_=\x00\x00\x00\x00\x00\x00\x7f\xff\xc7J\xde\xbe\n\b9\xb2\x9b\t0\x17_7Q\xf6\xa9\xf3\xcd\x14\xab\'\x1e.\'>\x05\xcd,\x01w\xda\x94O\xe1\xe0t\xe0;\x9e\xe3\x9f\xe7\xc8\x81d\x19/5\x9b\x80\x9ei\xa3\x83\x85\xb6|\xe6S\xc1\'t\xb3\xdd\x1b\xa3m\xa3=\x1a:\xb6\xdf\xbd\x00X\xbf\xf7[,\xdd\x1dxa\x04\xcaD0\x00}|p\f\xc2kL\x18\xc9\xf5%\xe6\xc46\x1c\xb0>\xb5\x98\x01+N\xb4\x99b\x10\xa2\x12\xea\xf6[F3\xf5\xda\xcf\x8e\x84~\xe4E\xec\x84I\x85`!~\xa1\x0e\x8d\xbd\xcc\xd7\x9f\xe2\xb8s\xd8\xfa\x01_)\xc6\x7f\f\xc7L3\xd8\x03\xe1\\\x87\x05\x00\x00;!]\xff\xc1\x1f\xb4\xde\xfb=\xdf\x1b%\xd8\xd7\f\xa4\xed<\xeb\x1a\xa3\xd7\x89\x88BE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x18\nSZ\x1f\x06\x88\x9fHGo\xfe\x8c\x93\n\x9f\x9e/\x86\xe5zS\xbe\xea\xf3\x00C\x910To\xeegtEW\xab26\x11s,\x01\x10\xc7\xf65K\'\xf1b7\xffz\x17iA\x14\x97\xa5\xdb\x9c\xaeL*\x94n\v%\xcc\xb1v\x90\xc0\xb6\'\x91q9\x1c?$|\x8bch\xed\x87\xc3\xd57\a{\xb4\x00\x00\x00') ioctl$int_out(r6, 0x5460, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x1400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r7 = accept(r4, 0x0, &(0x7f0000000080)=0x10058) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@hci={0x1f, r1}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db87a2cc7964d446aa12b5e4a2dd783f42a6ac6a564e441b0f97b5c46c35f8cc3c3c332b9bf088cb8acfce78400eb3d139ec6d5c1d1d711b505a4287f80b4b44bc47c6ef01a1f9a91c51c5f0afb271e2ddcfe9b427dcd9d5b266795a933c29e01a1fd691e64cf41c2604125613d7118682682beb", 0xbc}, {&(0x7f0000000840)="0f2cd78559fae92f93589037ac1c4dcfd1518f629dcaf4d5e1b6ca91a07a2c1d1878b4dbd4fb3801dda1e671ff8244ff9d3df4c8e2e9cbe253b406ff7c9e40b3176625df976ac2b52546954d9167357a2ea71dbb91c1435d189170e04ff510a9c52feeb2356983f58a1fed974d3062342d98d3ce0fd6b38fe12315632dee4b9de64e529c42b98f6b8127d9966cbcecf426", 0x91}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f29c9fc5", 0x3e}, {0x0}], 0x5}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r5, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 06:08:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r6, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000011002b0400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000101c0012000c000100627269646765009c0c00020008001900080002004b1499f4ca18e488e4c89e232ff07f79e6afc93ba46b470fa10749e5aada8f295783c2977be8342bdd6def7a5db77506e44e494e5f3fe62d612a9e"], 0x3c}}, 0x0) 06:08:17 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) [ 569.596333][T20156] device bridge1 entered promiscuous mode 06:08:17 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) [ 569.649446][T20162] device bridge5 entered promiscuous mode 06:08:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) dup2(r1, r3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 06:08:17 executing program 5: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x1f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x3, 0x5, 0x2e3) semget(0x2, 0x0, 0x200) r1 = semget(0x2, 0x3, 0x8) semop(r1, 0x0, 0xa9b01d486ca589ab) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1, 0x5, 0xfffffffd, 0x0, 0x40}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(r2, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x2) rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 06:08:17 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) 06:08:17 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r0, 0x9) close(r0) [ 570.356123][T20152] cgroup: fork rejected by pids controller in /syz2 [ 570.426833][T20168] bridge5: port 1(bridge_slave_0) entered blocking state [ 570.446250][T20168] bridge5: port 1(bridge_slave_0) entered disabled state [ 570.475526][T20168] device bridge_slave_0 entered promiscuous mode [ 570.506655][T20168] bridge5: port 1(bridge_slave_0) entered blocking state [ 570.513859][T20168] bridge5: port 1(bridge_slave_0) entered forwarding state [ 570.557045][T20162] device bridge_slave_0 left promiscuous mode [ 570.563389][T20162] bridge5: port 1(bridge_slave_0) entered disabled state 06:08:19 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) bind$isdn(r0, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x29}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x10100) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00U\x00\xa3\x9f&0?\x8f\\\x01\x00\x00\x00\x00\xbf\x06\x8a\xa9\xcb3\xe1uf\xdc\x1a\x0e\b\x7f\xc7\x05$\xfdm\xd3y\xa0\xef\xe1\xb6\xe8\xb7 \xc2\x1bnY1\xb3\x8b9\xfb*y\xbe\x0f2\x13 U\xdc\x12\xbf\v/T\xfb%\t\xc9c\x9e\x9e\xe4?\xb1\xab\"\xc8\x15:&h\tZ[\x87\xd7\xaf\xaf6\xdf\xbd#\\\x14i\x1a\xfc\xbbA~\xf1\xe7\xb5\x87y\x1a\xda\xe5f\xd0\f\xd5x;\x00\x90\xcb\x8a\xe6\xdeJ\r\t\x9b\a\xae\xac+\xbc\xd6\xe5\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j,`\x8a\xf3\x85\n\x1d\xecVJ\\t\xe5;\x84\xd2\x036\f\x84]V\x9ew[\xbfb\xbe,\xa0\xb6\x82\x9b_=\x00\x00\x00\x00\x00\x00\x7f\xff\xc7J\xde\xbe\n\b9\xb2\x9b\t0\x17_7Q\xf6\xa9\xf3\xcd\x14\xab\'\x1e.\'>\x05\xcd,\x01w\xda\x94O\xe1\xe0t\xe0;\x9e\xe3\x9f\xe7\xc8\x81d\x19/5\x9b\x80\x9ei\xa3\x83\x85\xb6|\xe6S\xc1\'t\xb3\xdd\x1b\xa3m\xa3=\x1a:\xb6\xdf\xbd\x00X\xbf\xf7[,\xdd\x1dxa\x04\xcaD0\x00}|p\f\xc2kL\x18\xc9\xf5%\xe6\xc46\x1c\xb0>\xb5\x98\x01+N\xb4\x99b\x10\xa2\x12\xea\xf6[F3\xf5\xda\xcf\x8e\x84~\xe4E\xec\x84I\x85`!~\xa1\x0e\x8d\xbd\xcc\xd7\x9f\xe2\xb8s\xd8\xfa\x01_)\xc6\x7f\f\xc7L3\xd8\x03\xe1\\\x87\x05\x00\x00;!]\xff\xc1\x1f\xb4\xde\xfb=\xdf\x1b%\xd8\xd7\f\xa4\xed<\xeb\x1a\xa3\xd7\x89\x88BE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x18\nSZ\x1f\x06\x88\x9fHGo\xfe\x8c\x93\n\x9f\x9e/\x86\xe5zS\xbe\xea\xf3\x00C\x910To\xeegtEW\xab26\x11s,\x01\x10\xc7\xf65K\'\xf1b7\xffz\x17iA\x14\x97\xa5\xdb\x9c\xaeL*\x94n\v%\xcc\xb1v\x90\xc0\xb6\'\x91q9\x1c?$|\x8bch\xed\x87\xc3\xd57\a{\xb4\x00\x00\x00') ioctl$int_out(r6, 0x5460, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x1400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r7 = accept(r4, 0x0, &(0x7f0000000080)=0x10058) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@hci={0x1f, r1}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db87a2cc7964d446aa12b5e4a2dd783f42a6ac6a564e441b0f97b5c46c35f8cc3c3c332b9bf088cb8acfce78400eb3d139ec6d5c1d1d711b505a4287f80b4b44bc47c6ef01a1f9a91c51c5f0afb271e2ddcfe9b427dcd9d5b266795a933c29e01a1fd691e64cf41c2604125613d7118682682beb", 0xbc}, {&(0x7f0000000840)="0f2cd78559fae92f93589037ac1c4dcfd1518f629dcaf4d5e1b6ca91a07a2c1d1878b4dbd4fb3801dda1e671ff8244ff9d3df4c8e2e9cbe253b406ff7c9e40b3176625df976ac2b52546954d9167357a2ea71dbb91c1435d189170e04ff510a9c52feeb2356983f58a1fed974d3062342d98d3ce0fd6b38fe12315632dee4b9de64e529c42b98f6b8127d9966cbcecf426", 0x91}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f29c9fc5", 0x3e}, {0x0}], 0x5}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r5, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 06:08:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000200)={'bridge0\x00', @ifru_mtu}) 06:08:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0500b0eb04001800160011000586f9835b3f2f009148790028f85acc7c45", 0x2e}], 0x1}, 0x0) 06:08:19 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x2, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a075a1dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 06:08:19 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) bind$isdn(r0, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x29}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x10100) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00U\x00\xa3\x9f&0?\x8f\\\x01\x00\x00\x00\x00\xbf\x06\x8a\xa9\xcb3\xe1uf\xdc\x1a\x0e\b\x7f\xc7\x05$\xfdm\xd3y\xa0\xef\xe1\xb6\xe8\xb7 \xc2\x1bnY1\xb3\x8b9\xfb*y\xbe\x0f2\x13 U\xdc\x12\xbf\v/T\xfb%\t\xc9c\x9e\x9e\xe4?\xb1\xab\"\xc8\x15:&h\tZ[\x87\xd7\xaf\xaf6\xdf\xbd#\\\x14i\x1a\xfc\xbbA~\xf1\xe7\xb5\x87y\x1a\xda\xe5f\xd0\f\xd5x;\x00\x90\xcb\x8a\xe6\xdeJ\r\t\x9b\a\xae\xac+\xbc\xd6\xe5\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j,`\x8a\xf3\x85\n\x1d\xecVJ\\t\xe5;\x84\xd2\x036\f\x84]V\x9ew[\xbfb\xbe,\xa0\xb6\x82\x9b_=\x00\x00\x00\x00\x00\x00\x7f\xff\xc7J\xde\xbe\n\b9\xb2\x9b\t0\x17_7Q\xf6\xa9\xf3\xcd\x14\xab\'\x1e.\'>\x05\xcd,\x01w\xda\x94O\xe1\xe0t\xe0;\x9e\xe3\x9f\xe7\xc8\x81d\x19/5\x9b\x80\x9ei\xa3\x83\x85\xb6|\xe6S\xc1\'t\xb3\xdd\x1b\xa3m\xa3=\x1a:\xb6\xdf\xbd\x00X\xbf\xf7[,\xdd\x1dxa\x04\xcaD0\x00}|p\f\xc2kL\x18\xc9\xf5%\xe6\xc46\x1c\xb0>\xb5\x98\x01+N\xb4\x99b\x10\xa2\x12\xea\xf6[F3\xf5\xda\xcf\x8e\x84~\xe4E\xec\x84I\x85`!~\xa1\x0e\x8d\xbd\xcc\xd7\x9f\xe2\xb8s\xd8\xfa\x01_)\xc6\x7f\f\xc7L3\xd8\x03\xe1\\\x87\x05\x00\x00;!]\xff\xc1\x1f\xb4\xde\xfb=\xdf\x1b%\xd8\xd7\f\xa4\xed<\xeb\x1a\xa3\xd7\x89\x88BE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x18\nSZ\x1f\x06\x88\x9fHGo\xfe\x8c\x93\n\x9f\x9e/\x86\xe5zS\xbe\xea\xf3\x00C\x910To\xeegtEW\xab26\x11s,\x01\x10\xc7\xf65K\'\xf1b7\xffz\x17iA\x14\x97\xa5\xdb\x9c\xaeL*\x94n\v%\xcc\xb1v\x90\xc0\xb6\'\x91q9\x1c?$|\x8bch\xed\x87\xc3\xd57\a{\xb4\x00\x00\x00') ioctl$int_out(r6, 0x5460, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x1400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r7 = accept(r4, 0x0, &(0x7f0000000080)=0x10058) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@hci={0x1f, r1}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db87a2cc7964d446aa12b5e4a2dd783f42a6ac6a564e441b0f97b5c46c35f8cc3c3c332b9bf088cb8acfce78400eb3d139ec6d5c1d1d711b505a4287f80b4b44bc47c6ef01a1f9a91c51c5f0afb271e2ddcfe9b427dcd9d5b266795a933c29e01a1fd691e64cf41c2604125613d7118682682beb", 0xbc}, {&(0x7f0000000840)="0f2cd78559fae92f93589037ac1c4dcfd1518f629dcaf4d5e1b6ca91a07a2c1d1878b4dbd4fb3801dda1e671ff8244ff9d3df4c8e2e9cbe253b406ff7c9e40b3176625df976ac2b52546954d9167357a2ea71dbb91c1435d189170e04ff510a9c52feeb2356983f58a1fed974d3062342d98d3ce0fd6b38fe12315632dee4b9de64e529c42b98f6b8127d9966cbcecf426", 0x91}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f29c9fc5", 0x3e}, {0x0}], 0x5}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r5, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 06:08:19 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 571.310381][T20305] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 06:08:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='\"\xad\x00\x00\b', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x160) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000400)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) [ 571.372724][T20310] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 06:08:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0500b0eb04001800160011000586f9835b3f2f009148790028f85acc7c45", 0x2e}], 0x1}, 0x0) 06:08:19 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x2, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a075a1dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 571.659700][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 571.666638][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 571.679545][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 571.686835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 571.700932][T20324] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 06:08:19 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x2, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a075a1dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 06:08:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0500b0eb04001800160011000586f9835b3f2f009148790028f85acc7c45", 0x2e}], 0x1}, 0x0) [ 571.734575][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 571.740641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 571.904330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 571.904387][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:08:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0500b0eb04001800160011000586f9835b3f2f009148790028f85acc7c45", 0x2e}], 0x1}, 0x0) [ 571.961758][T20332] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 06:08:20 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) bind$isdn(r0, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x29}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x10100) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00U\x00\xa3\x9f&0?\x8f\\\x01\x00\x00\x00\x00\xbf\x06\x8a\xa9\xcb3\xe1uf\xdc\x1a\x0e\b\x7f\xc7\x05$\xfdm\xd3y\xa0\xef\xe1\xb6\xe8\xb7 \xc2\x1bnY1\xb3\x8b9\xfb*y\xbe\x0f2\x13 U\xdc\x12\xbf\v/T\xfb%\t\xc9c\x9e\x9e\xe4?\xb1\xab\"\xc8\x15:&h\tZ[\x87\xd7\xaf\xaf6\xdf\xbd#\\\x14i\x1a\xfc\xbbA~\xf1\xe7\xb5\x87y\x1a\xda\xe5f\xd0\f\xd5x;\x00\x90\xcb\x8a\xe6\xdeJ\r\t\x9b\a\xae\xac+\xbc\xd6\xe5\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j,`\x8a\xf3\x85\n\x1d\xecVJ\\t\xe5;\x84\xd2\x036\f\x84]V\x9ew[\xbfb\xbe,\xa0\xb6\x82\x9b_=\x00\x00\x00\x00\x00\x00\x7f\xff\xc7J\xde\xbe\n\b9\xb2\x9b\t0\x17_7Q\xf6\xa9\xf3\xcd\x14\xab\'\x1e.\'>\x05\xcd,\x01w\xda\x94O\xe1\xe0t\xe0;\x9e\xe3\x9f\xe7\xc8\x81d\x19/5\x9b\x80\x9ei\xa3\x83\x85\xb6|\xe6S\xc1\'t\xb3\xdd\x1b\xa3m\xa3=\x1a:\xb6\xdf\xbd\x00X\xbf\xf7[,\xdd\x1dxa\x04\xcaD0\x00}|p\f\xc2kL\x18\xc9\xf5%\xe6\xc46\x1c\xb0>\xb5\x98\x01+N\xb4\x99b\x10\xa2\x12\xea\xf6[F3\xf5\xda\xcf\x8e\x84~\xe4E\xec\x84I\x85`!~\xa1\x0e\x8d\xbd\xcc\xd7\x9f\xe2\xb8s\xd8\xfa\x01_)\xc6\x7f\f\xc7L3\xd8\x03\xe1\\\x87\x05\x00\x00;!]\xff\xc1\x1f\xb4\xde\xfb=\xdf\x1b%\xd8\xd7\f\xa4\xed<\xeb\x1a\xa3\xd7\x89\x88BE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x18\nSZ\x1f\x06\x88\x9fHGo\xfe\x8c\x93\n\x9f\x9e/\x86\xe5zS\xbe\xea\xf3\x00C\x910To\xeegtEW\xab26\x11s,\x01\x10\xc7\xf65K\'\xf1b7\xffz\x17iA\x14\x97\xa5\xdb\x9c\xaeL*\x94n\v%\xcc\xb1v\x90\xc0\xb6\'\x91q9\x1c?$|\x8bch\xed\x87\xc3\xd57\a{\xb4\x00\x00\x00') ioctl$int_out(r6, 0x5460, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x1400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r7 = accept(r4, 0x0, &(0x7f0000000080)=0x10058) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@hci={0x1f, r1}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db87a2cc7964d446aa12b5e4a2dd783f42a6ac6a564e441b0f97b5c46c35f8cc3c3c332b9bf088cb8acfce78400eb3d139ec6d5c1d1d711b505a4287f80b4b44bc47c6ef01a1f9a91c51c5f0afb271e2ddcfe9b427dcd9d5b266795a933c29e01a1fd691e64cf41c2604125613d7118682682beb", 0xbc}, {&(0x7f0000000840)="0f2cd78559fae92f93589037ac1c4dcfd1518f629dcaf4d5e1b6ca91a07a2c1d1878b4dbd4fb3801dda1e671ff8244ff9d3df4c8e2e9cbe253b406ff7c9e40b3176625df976ac2b52546954d9167357a2ea71dbb91c1435d189170e04ff510a9c52feeb2356983f58a1fed974d3062342d98d3ce0fd6b38fe12315632dee4b9de64e529c42b98f6b8127d9966cbcecf426", 0x91}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f29c9fc5", 0x3e}, {0x0}], 0x5}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r5, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 06:08:20 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x2, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000130a075a1dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 06:08:20 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) bind$isdn(r0, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x29}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x10100) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00U\x00\xa3\x9f&0?\x8f\\\x01\x00\x00\x00\x00\xbf\x06\x8a\xa9\xcb3\xe1uf\xdc\x1a\x0e\b\x7f\xc7\x05$\xfdm\xd3y\xa0\xef\xe1\xb6\xe8\xb7 \xc2\x1bnY1\xb3\x8b9\xfb*y\xbe\x0f2\x13 U\xdc\x12\xbf\v/T\xfb%\t\xc9c\x9e\x9e\xe4?\xb1\xab\"\xc8\x15:&h\tZ[\x87\xd7\xaf\xaf6\xdf\xbd#\\\x14i\x1a\xfc\xbbA~\xf1\xe7\xb5\x87y\x1a\xda\xe5f\xd0\f\xd5x;\x00\x90\xcb\x8a\xe6\xdeJ\r\t\x9b\a\xae\xac+\xbc\xd6\xe5\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j,`\x8a\xf3\x85\n\x1d\xecVJ\\t\xe5;\x84\xd2\x036\f\x84]V\x9ew[\xbfb\xbe,\xa0\xb6\x82\x9b_=\x00\x00\x00\x00\x00\x00\x7f\xff\xc7J\xde\xbe\n\b9\xb2\x9b\t0\x17_7Q\xf6\xa9\xf3\xcd\x14\xab\'\x1e.\'>\x05\xcd,\x01w\xda\x94O\xe1\xe0t\xe0;\x9e\xe3\x9f\xe7\xc8\x81d\x19/5\x9b\x80\x9ei\xa3\x83\x85\xb6|\xe6S\xc1\'t\xb3\xdd\x1b\xa3m\xa3=\x1a:\xb6\xdf\xbd\x00X\xbf\xf7[,\xdd\x1dxa\x04\xcaD0\x00}|p\f\xc2kL\x18\xc9\xf5%\xe6\xc46\x1c\xb0>\xb5\x98\x01+N\xb4\x99b\x10\xa2\x12\xea\xf6[F3\xf5\xda\xcf\x8e\x84~\xe4E\xec\x84I\x85`!~\xa1\x0e\x8d\xbd\xcc\xd7\x9f\xe2\xb8s\xd8\xfa\x01_)\xc6\x7f\f\xc7L3\xd8\x03\xe1\\\x87\x05\x00\x00;!]\xff\xc1\x1f\xb4\xde\xfb=\xdf\x1b%\xd8\xd7\f\xa4\xed<\xeb\x1a\xa3\xd7\x89\x88BE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x18\nSZ\x1f\x06\x88\x9fHGo\xfe\x8c\x93\n\x9f\x9e/\x86\xe5zS\xbe\xea\xf3\x00C\x910To\xeegtEW\xab26\x11s,\x01\x10\xc7\xf65K\'\xf1b7\xffz\x17iA\x14\x97\xa5\xdb\x9c\xaeL*\x94n\v%\xcc\xb1v\x90\xc0\xb6\'\x91q9\x1c?$|\x8bch\xed\x87\xc3\xd57\a{\xb4\x00\x00\x00') ioctl$int_out(r6, 0x5460, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x1400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r7 = accept(r4, 0x0, &(0x7f0000000080)=0x10058) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@hci={0x1f, r1}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db87a2cc7964d446aa12b5e4a2dd783f42a6ac6a564e441b0f97b5c46c35f8cc3c3c332b9bf088cb8acfce78400eb3d139ec6d5c1d1d711b505a4287f80b4b44bc47c6ef01a1f9a91c51c5f0afb271e2ddcfe9b427dcd9d5b266795a933c29e01a1fd691e64cf41c2604125613d7118682682beb", 0xbc}, {&(0x7f0000000840)="0f2cd78559fae92f93589037ac1c4dcfd1518f629dcaf4d5e1b6ca91a07a2c1d1878b4dbd4fb3801dda1e671ff8244ff9d3df4c8e2e9cbe253b406ff7c9e40b3176625df976ac2b52546954d9167357a2ea71dbb91c1435d189170e04ff510a9c52feeb2356983f58a1fed974d3062342d98d3ce0fd6b38fe12315632dee4b9de64e529c42b98f6b8127d9966cbcecf426", 0x91}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f29c9fc5", 0x3e}, {0x0}], 0x5}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r5, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) [ 572.202551][T20309] debugfs: Directory '20309-6' with parent 'kvm' already present! [ 572.254500][T20343] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 572.294330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 572.300383][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:08:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000700000000000000000000020000000000000000000000090100000000000000010000040000000200000000020000000000000200300000612e00"], &(0x7f0000004600)=""/210, 0x4f, 0x193, 0x1}, 0x20) 06:08:20 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x400000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000001640)="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"}, 0x20) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x522f58c7ff5ac33d}, 0x14}}, 0x0) 06:08:20 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:20 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:20 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:20 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x400000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000001640)="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"}, 0x20) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x522f58c7ff5ac33d}, 0x14}}, 0x0) 06:08:21 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x400000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000001640)="57c9f61255b4ba17c2f6d201e7e886d6072dbfeea109ea028014ce72c8368898fade4c270cc3964fcc311a3f20430dcaa2ae2744d02fc10c5209f33c014a372f72ba192a4fa1be6e9dd2c914d9103fb221b3474d66fe9311b648acb1107619434758ce6679dec95ea7fbfeea2827311d3d19157a187a0ecda0b301868cd8cc9d0f57b067db666d015355d6912ef8318ab83aedabe1ff2b6624afb417e0f539fc058d32d18f514ca0e9d99a80cb96af9dfe375e97bbadbbe2c6cfff1993b2795348781fc082a8f3270937b46e425eabd6c4e0e0c87a81f3540387c42795ea9ab804ab34c8a450f49aad8c067627c4fe56ef0a7d036068203d569efe6541c56bec8f9317c6b2dfe7373b75e0bb1f2eac1a13ab48df9f94dbb62701c5871309a4236081ca197b330c7a774be66706d3d99ab2d207721175d7cca21122d82cf421e295e1c7c8d13a3c78c71a0c97395bb6fb7e1c7976b116c47980eb0c0a6ff42b6f6f0411511d6f4eba91df0873786375a590c5344c8bf7b74dd19ff4fe49312d044a90594ef654d029a7a35c86462510efdff45addd3252a448a201513516f929d7f7a26998dec7be9d5fd18e11182c8a749e07f8c6b47857637a0c9de382b5f9bf08c27018ec6b3779da0c6e0b893089dd80b7c20d4db0b2c00ba26a1455aeaf9f8680605e0da692c7f03cbb78c4ce29362beb3db614f93a4005af015acdece70cb4080a62780dc1e48a6eb75e0c0382e478830a0aee24e43c621f5c55c366bfa96f294ec47b92b0ea06f3ea55340ab613847d7d47e92789455d333cb06cb683bb4fa9ba767869d5dc00d84edbbec393fcd26ef6abe3bb7c4df495e48d805730dc5742ece2b6c2e876f53ecf3f2f6ca339d2ff2b25b0871cfcf5f51d0aa00fb7083dded40102246847febde144256fbd0b371d5297eb86022329ae05dd07d5483a9f91ea97f9293c8175435ef239121b351c7c88d9820fd323182ae29572ac610ff1747f86b34a62d72368bf10669489db506063f7c9c93542b9e2752b9843118f48972588641dd5e82d74b549977e5a334e614e8050c408edc341aabacc649e8209590422caeef7d7e9adabcab5b7ccda82ad73c54e363a2ed47bf7f275a1480a66649b349a109587b7b8f3823080d2fda76bb0f6d3a0e2e966596d490eef8af0d6d107c25722c25205b495a900421574531fefc1088c3f4fbbe73c6b327d8c9d2e5eda24aa572f239bf047e76852087b80d54ce630622558835da00fd961a2bb567486ee66782e81ab6c757a3839bae428a4ffeb5e8efe995a1c40b09633991b17a3aa663ba31283d3f3219b98678d2a0226fd0c0440b13b3235ea4e44e0091b86218e5fce7db8f113af5268ccdcf57d63463d2f0228277cc6735d423346e922d0e54fd934cc63bf787256d78ca73100c4f66457db186687f98ea9dc32c15641e5b80a1d581f6168bf5152c2e756d92c8a021fb89b125271d477913e70bf66d59cf2b6602085b0043b428781230f7ec8c23871d8e54ce0a12a11cd5920e010697e17c9ce9d7678d31611c232172815a6dc04872cbb9172d801171f5395e75ed97c5d8267ceca60c9be7335386eb55205103859b8498e939142f8561b5e17fb6794cfa9c888e14c3c5c7db2e40a8f852738c3cc7015efcd7bb4e81cd230bbe4fa9de32b7845345aff61a8e7ff743a207b8a1e5f8e21a7e10719b870b1f2d933d47cef19a3deecb7b67a017519aae829ec1ab1573ed6eb6abee620aa027883d5234c37474f437a70162ab7c772b1f0422040237d3b6f46ff9d6d8e5f5eacc4d1c092bf9e6d810799ebcb4870e2ee5df662be6e818c1d3b328983a1e6d56f5856da910998d2f2fdf985ea839807c30a8ac73600ea702965c869f6a07e2fc4448ec75fe7b0d5f6cb350e15ef5b64d77b136ecacc981a82a6543c24c0dc9e96a5ba2effd027420bb3796c75bcd1c51b52c1d176f012c09df8e93545a675bae9b6cfc869bb6ce3d8ef165b4a467a869c3115a2c355c67d696bcaa285c9b6b1d385805c08308623a2e831c3305a811d145620480a7da423f4848416d69e042a7d00c75eca543309e540db8d0761afe903fb44c4b9c9d54a05f4454b042a014e7b4da37050a19fbdb7057d161b5b9ae23c23780dd83c12a5ce4203da327b686da64b0b59d3ea99b8de71cac3908f19f7c639fed3f78fbb92ae3242dc11a596c5d2f7797c944cce5ff9c62c4628e61aa3b264c5ba20de389b0b2a7ab00937d5cb4ebc2d6bac85da2f4c9d1540ec4d87fad7054543bdc44f8bfe5d432e8ccfcb9e263dbd0916c4d9e029f40f139d7793c3e57fc244211f88c2646e354de416eb427482285ed42d5033465e0d2487dd27a8ba587f81f0eb845230b980407d179f9b76bcaa83ba8d1453f3d24ee0c457fbdde9f92c5c509f5d41b515b042ea4fbe1704732fac958cd572ee554e328a1bd672dfcf05e787140c8c9888e21e855d7d0e010f52e99453825e3b523091b8b70e0bde0074dc342d11b59d747131fe282ddb9e211e05e0f3b467ea193165732a6aec97d6c695683378bb60cf88d48c01310cc10a1e7bc301339a7f65e8bcdd86cf41adfcd3942deb8b954b54750266c2e89327979801f1681d8c057b30a567c0ba87bb90dc6d9f29b149663c2a82cf3bac34cfb8d5e7f35c31c09388491e770da2b9fc2c907b67a850e71b5c7d92b5745d031c4c5a634db9e28bc05df42fd18c1ebe4d0f496e5fbead89a91eb7f3c4f5fcfbed392fdf79b1c18b1d65c7a62fd88c77169a2b654052a7a70a581e63b1a0e6827394182c3c87e168f52e8235ffbc04c979c644a69cb85d736bd78a93e8ffc6b0299f877f92e407e56baed43c54ffe4193f16a2263f5ad0fbca0604c65b7f78e1915e5c8d0cca40b49ddf47a18c8f354221ce6928839527a8fc6e2008037744d7fd5f2580e9ab3d5e0c4c5c80463bfa450815cec845a85b498ec4a0fcd6eed53a9f516d3435cda9329ab87a906e01a524b6af95604e141debce09457310d02e60d2c6faa05828e29fbb310fcb11e923626ece8cdd77beeed002d6545ac40dc385b175a934b825f85abd47a29688d0280f67d1f67b417654eda63b1dfd67b7475d6a7a7ae5f439edfa16ce6fa4414cf0c401327ceda3b94dbfe860945465fb66a2a4c393323a2a42c19b196babeb4564cbf245d8393bc54a45d73a7c664cdb0e894ba21528d3ecfba3c168fc026100987118a921885b1736389eebef5143f49b6ad5d9aa6cb343bec4ce18f6d91e474d52dacdbabd1c6a0bf5da5e1221f14aa639c5417b0eb5690805fe4aa0ba23d9fa24a6f346aca4f627c5e6ee6ad1edb339fb445aff532bd7f6969bcf6669b3e4faa34b042da151478346b71bea68b89bdd4345d4a58663f27bf804ff7ec89d7bccc637995c62d3c0e4435f44159bcc52f5f46c8d4a5fdeab496e45fb9321e1835f71728509d71033cb33af325a095961635f96ffe3f7e36ef25a68e6d085be123f02fe36e80a1fa573543641413edfed71b07ce71a7039d589e138217f0b5218a562df453f0ada9b115e2e08ac2120384881084cb915f31e510aa3cb5a5de25b894b98951074e7717694b2896cc1085e0c85aa48889b4a1c9253ae56921f29c06ba1f4f14efabf5afab91cec7ca879f4d9c0e6e2e9e734fdc301246c8411edf6041ff009e807b702dc73ed88de89b9ea9a23b43e72d990bceb9364cb1acfd1d1dc7901f6812ebdfcc3c09ca085b1e92cc68c01a7812a6ba20c21160ecd76e7fdee0f11bf0d291b8b9b78563507723fd253ba255d2a460e011ee09fabd45bc7c697fe0a3b559ff839e4d822f6f86a10c6cdeec2efc94f94c97665fc29c2b81b0e8629ff3c60220bf14ac063ae59e155ec7311d9e8e73032f2353e85360c5318034fe08f09b4823f18b59cb78c8c331925ae56e87879f720d2e5cea5c0af24f14837a0630ec7fa9c480c0735b1b8b20539b8f3c6038b04aec57b9d53222dae1df9220db827262c4497dc8ab432ab080a9073107598338914f22c85c2789857edeec0cc16cf2c15bc8f339a3b90d2d0ecec8f5fc21522cbf4a2b69decd99b3f8a525bb2ccd5b6cdf0d6e57a8f541c6eb47d4cb252bc5334726cb191d983799409368fa149bc54ad8477a7e67f3830beb18e27a3508ccdb282239199b2f6ef2b5c39f70abd6bf9cf4c35d705defa8db21f01b1ec48f98e7167fec080a78950ac5f0b7a08f2e0912a8728002d81d6828b53f851dbfe94b2c42477e94fbfd266e76d22b2aaab264bbaf1274594729ad1d8a60e07bc7dd969833d8886fb885abe6dc668a710ebf24f9a2afc169500ffda08966497cea046f6ab599ea264ee164776d4444ca73aae1d9aba2219a1de94510d8b9fb9aee4d2a75ff1de7904ac234e0d20bff34255b4930e1426505a9e7ea9b880366fc918cfd52f240d89e75595eeb53c763817f4d28a1a4d6b47792749aa939d96d805fb5570f0ea832a93d11163363f201f31b391a7029f6d25de8e563be398d307669423a3999b5778cc43034a1eb4c5ae27bd489484c56e977f1281809905e65dbb3920359a7c27c93bc0f9ba5f93fb7ac3d2da284c6e3bcf6d212d4b49d925877ba0841afccc9349263c4f4d7a7931f7639b0bcdde5fcff04f74b744a6c9c0dcd7f7c57c59cc1017d53046e6999f4e0c01e7c36961cd2260a9e270b4cf3484577a00b531e453915202bec3a7f5072c8e870b1078f29c945f060347f79d634756169011ee508cef50aee7eaf77910db8048b8a964d678a77b209128666732cf16ebcadfabb3e0f9f4f62b3da39af0c7e6c2d7d0ba71672004cfa91e57f3fee579fe1b7fd738dfb8f89a9b44f7b89ccfa4902d1171c598c71ddec68c197dc6a23094c9e72acbf4bbf2f85716be19d259af1e25b0495018def1b45d15d436fb4425704ce00489378c0c7458adc11afb61992a90fffe266161a2488fdd586eccd0adcd70260eaaa92fdd98f09ac1547058c6d1280521af747489c85e6d0e0f08a0e547f068be5001f169a34663e2a0e0c0cb9a43f194c88f9315e6cfbe08f59b512a550b7634d1508da30833432d13daae9d4a6a91efc91c63ced3d9415f0bfd69088d2bbde4ad7a85e40ed87a3f64c015f2014cdbdcdf77d273d339b9c3ad871887fe12222c926effa2f37b5f962cdfd9d002de1a69d6bff78ef5e6053649ff98968719de7c04000984f2d5e0852c383b9ca4ac390a815af96ad73efc528348467e9962c461639401cbba0214993a3dc9f496596cf53ee255168166f0df4e403222c7de0aef6d6da2b6475a4bdb10ad235c1a42c6fa41f47ef523cdf3415ea1c367847001f0e8b98bf58369f303879eec12516f27289e07cefe6bff2c8e5a3787bf5b04cbaebd06fd30cccb987bb2c4b6c8a28084ed83ce99607c34c70cf8873e8c04ba798c10f048ded6d07a1dace10624fd2f23b2a30d1ffad4358e9cf639521a3dce759ebc5c558a0b2326cbc84df4cc9388e99c346d6ad568c62d2109259cfdf9d6c925a8ef8fa7b41a205362eb831a7fb17b83f9b4cfa98574302ecab12743e0c8000ecd7801fa4dc99e0a4d668e1f91a782d118985f1f983add8de8738e422cc68a899770bb9842b23665635ed88f2732c7aada1b0f326cd2787bcc0944b5cf660510d638d74b41cf1a8bd0063704faa8887c469d72726f55a24fd9f62721779a2a0fd9faed198078b5bbde2e56639495f1c789afc76acc0f7360da39df80ec3889e32d5a0ab74572ad4650b3e695e51b4e2bc78bf8a19de2afcf7"}, 0x20) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x522f58c7ff5ac33d}, 0x14}}, 0x0) 06:08:21 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) bind$isdn(r0, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x29}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x10100) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00U\x00\xa3\x9f&0?\x8f\\\x01\x00\x00\x00\x00\xbf\x06\x8a\xa9\xcb3\xe1uf\xdc\x1a\x0e\b\x7f\xc7\x05$\xfdm\xd3y\xa0\xef\xe1\xb6\xe8\xb7 \xc2\x1bnY1\xb3\x8b9\xfb*y\xbe\x0f2\x13 U\xdc\x12\xbf\v/T\xfb%\t\xc9c\x9e\x9e\xe4?\xb1\xab\"\xc8\x15:&h\tZ[\x87\xd7\xaf\xaf6\xdf\xbd#\\\x14i\x1a\xfc\xbbA~\xf1\xe7\xb5\x87y\x1a\xda\xe5f\xd0\f\xd5x;\x00\x90\xcb\x8a\xe6\xdeJ\r\t\x9b\a\xae\xac+\xbc\xd6\xe5\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j,`\x8a\xf3\x85\n\x1d\xecVJ\\t\xe5;\x84\xd2\x036\f\x84]V\x9ew[\xbfb\xbe,\xa0\xb6\x82\x9b_=\x00\x00\x00\x00\x00\x00\x7f\xff\xc7J\xde\xbe\n\b9\xb2\x9b\t0\x17_7Q\xf6\xa9\xf3\xcd\x14\xab\'\x1e.\'>\x05\xcd,\x01w\xda\x94O\xe1\xe0t\xe0;\x9e\xe3\x9f\xe7\xc8\x81d\x19/5\x9b\x80\x9ei\xa3\x83\x85\xb6|\xe6S\xc1\'t\xb3\xdd\x1b\xa3m\xa3=\x1a:\xb6\xdf\xbd\x00X\xbf\xf7[,\xdd\x1dxa\x04\xcaD0\x00}|p\f\xc2kL\x18\xc9\xf5%\xe6\xc46\x1c\xb0>\xb5\x98\x01+N\xb4\x99b\x10\xa2\x12\xea\xf6[F3\xf5\xda\xcf\x8e\x84~\xe4E\xec\x84I\x85`!~\xa1\x0e\x8d\xbd\xcc\xd7\x9f\xe2\xb8s\xd8\xfa\x01_)\xc6\x7f\f\xc7L3\xd8\x03\xe1\\\x87\x05\x00\x00;!]\xff\xc1\x1f\xb4\xde\xfb=\xdf\x1b%\xd8\xd7\f\xa4\xed<\xeb\x1a\xa3\xd7\x89\x88BE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x18\nSZ\x1f\x06\x88\x9fHGo\xfe\x8c\x93\n\x9f\x9e/\x86\xe5zS\xbe\xea\xf3\x00C\x910To\xeegtEW\xab26\x11s,\x01\x10\xc7\xf65K\'\xf1b7\xffz\x17iA\x14\x97\xa5\xdb\x9c\xaeL*\x94n\v%\xcc\xb1v\x90\xc0\xb6\'\x91q9\x1c?$|\x8bch\xed\x87\xc3\xd57\a{\xb4\x00\x00\x00') ioctl$int_out(r6, 0x5460, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x1400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r7 = accept(r4, 0x0, &(0x7f0000000080)=0x10058) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@hci={0x1f, r1}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db87a2cc7964d446aa12b5e4a2dd783f42a6ac6a564e441b0f97b5c46c35f8cc3c3c332b9bf088cb8acfce78400eb3d139ec6d5c1d1d711b505a4287f80b4b44bc47c6ef01a1f9a91c51c5f0afb271e2ddcfe9b427dcd9d5b266795a933c29e01a1fd691e64cf41c2604125613d7118682682beb", 0xbc}, {&(0x7f0000000840)="0f2cd78559fae92f93589037ac1c4dcfd1518f629dcaf4d5e1b6ca91a07a2c1d1878b4dbd4fb3801dda1e671ff8244ff9d3df4c8e2e9cbe253b406ff7c9e40b3176625df976ac2b52546954d9167357a2ea71dbb91c1435d189170e04ff510a9c52feeb2356983f58a1fed974d3062342d98d3ce0fd6b38fe12315632dee4b9de64e529c42b98f6b8127d9966cbcecf426", 0x91}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f29c9fc5", 0x3e}, {0x0}], 0x5}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r5, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 06:08:21 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) bind$isdn(r0, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x29}}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x10100) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='\x00\x00U\x00\xa3\x9f&0?\x8f\\\x01\x00\x00\x00\x00\xbf\x06\x8a\xa9\xcb3\xe1uf\xdc\x1a\x0e\b\x7f\xc7\x05$\xfdm\xd3y\xa0\xef\xe1\xb6\xe8\xb7 \xc2\x1bnY1\xb3\x8b9\xfb*y\xbe\x0f2\x13 U\xdc\x12\xbf\v/T\xfb%\t\xc9c\x9e\x9e\xe4?\xb1\xab\"\xc8\x15:&h\tZ[\x87\xd7\xaf\xaf6\xdf\xbd#\\\x14i\x1a\xfc\xbbA~\xf1\xe7\xb5\x87y\x1a\xda\xe5f\xd0\f\xd5x;\x00\x90\xcb\x8a\xe6\xdeJ\r\t\x9b\a\xae\xac+\xbc\xd6\xe5\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j,`\x8a\xf3\x85\n\x1d\xecVJ\\t\xe5;\x84\xd2\x036\f\x84]V\x9ew[\xbfb\xbe,\xa0\xb6\x82\x9b_=\x00\x00\x00\x00\x00\x00\x7f\xff\xc7J\xde\xbe\n\b9\xb2\x9b\t0\x17_7Q\xf6\xa9\xf3\xcd\x14\xab\'\x1e.\'>\x05\xcd,\x01w\xda\x94O\xe1\xe0t\xe0;\x9e\xe3\x9f\xe7\xc8\x81d\x19/5\x9b\x80\x9ei\xa3\x83\x85\xb6|\xe6S\xc1\'t\xb3\xdd\x1b\xa3m\xa3=\x1a:\xb6\xdf\xbd\x00X\xbf\xf7[,\xdd\x1dxa\x04\xcaD0\x00}|p\f\xc2kL\x18\xc9\xf5%\xe6\xc46\x1c\xb0>\xb5\x98\x01+N\xb4\x99b\x10\xa2\x12\xea\xf6[F3\xf5\xda\xcf\x8e\x84~\xe4E\xec\x84I\x85`!~\xa1\x0e\x8d\xbd\xcc\xd7\x9f\xe2\xb8s\xd8\xfa\x01_)\xc6\x7f\f\xc7L3\xd8\x03\xe1\\\x87\x05\x00\x00;!]\xff\xc1\x1f\xb4\xde\xfb=\xdf\x1b%\xd8\xd7\f\xa4\xed<\xeb\x1a\xa3\xd7\x89\x88BE\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x18\nSZ\x1f\x06\x88\x9fHGo\xfe\x8c\x93\n\x9f\x9e/\x86\xe5zS\xbe\xea\xf3\x00C\x910To\xeegtEW\xab26\x11s,\x01\x10\xc7\xf65K\'\xf1b7\xffz\x17iA\x14\x97\xa5\xdb\x9c\xaeL*\x94n\v%\xcc\xb1v\x90\xc0\xb6\'\x91q9\x1c?$|\x8bch\xed\x87\xc3\xd57\a{\xb4\x00\x00\x00') ioctl$int_out(r6, 0x5460, &(0x7f0000001900)) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x1400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r7 = accept(r4, 0x0, &(0x7f0000000080)=0x10058) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@hci={0x1f, r1}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000780)="0f8de6669ba9e6ee2e83bff9d261899bb647ca4787aa105bd2e9b35c0663c7e556e25f7b584c7916398cccb30d721747816fb152b163a79d46502ffe9793c24c5ede953501adc585db87a2cc7964d446aa12b5e4a2dd783f42a6ac6a564e441b0f97b5c46c35f8cc3c3c332b9bf088cb8acfce78400eb3d139ec6d5c1d1d711b505a4287f80b4b44bc47c6ef01a1f9a91c51c5f0afb271e2ddcfe9b427dcd9d5b266795a933c29e01a1fd691e64cf41c2604125613d7118682682beb", 0xbc}, {&(0x7f0000000840)="0f2cd78559fae92f93589037ac1c4dcfd1518f629dcaf4d5e1b6ca91a07a2c1d1878b4dbd4fb3801dda1e671ff8244ff9d3df4c8e2e9cbe253b406ff7c9e40b3176625df976ac2b52546954d9167357a2ea71dbb91c1435d189170e04ff510a9c52feeb2356983f58a1fed974d3062342d98d3ce0fd6b38fe12315632dee4b9de64e529c42b98f6b8127d9966cbcecf426", 0x91}, {&(0x7f0000000280)="4e8290accf6bef9a0bfbfe1563799deddb4ad2b6c3946be8ea555e0c9831b59b4adf4c12eff86bef0d0b81d78ef529271b48963b54dbb2490fd2f29c9fc5", 0x3e}, {0x0}], 0x5}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r5, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 06:08:21 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:21 executing program 5: openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x400000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000001640)="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"}, 0x20) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x522f58c7ff5ac33d}, 0x14}}, 0x0) 06:08:21 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:21 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:22 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB='7:2\t'], 0x4) 06:08:22 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eb08001800160011000586f9835b3f2f0091482503bdf85acc7c45", 0x2e}], 0x1}, 0x0) [ 574.544951][T20427] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.2'. 06:08:22 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:22 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x3a) 06:08:22 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB='7:2\t'], 0x4) 06:08:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:08:22 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB='7:2\t'], 0x4) 06:08:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) dup3(r1, r3, 0x0) 06:08:23 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB='7:2\t'], 0x4) 06:08:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) dup3(r1, r3, 0x0) 06:08:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) dup3(r1, r3, 0x0) 06:08:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) dup3(r1, r3, 0x0) 06:08:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x4, 0x3, 0xa0000000, 0x2000000, '\x00', 0x3d6b}, 0x6, 0x1, 0xfffffff7, r0, 0x3, 0x101, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', '/dev/kvm\x00', '$(securitybdev\x00'], 0x21, [], [0x9ca, 0x0, 0x84, 0x1ff]}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) dup3(r1, r3, 0x0) 06:08:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="97", 0x1}], 0x1, &(0x7f0000000140)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x0) 06:08:29 executing program 4: wait4(0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000800)) bind$packet(0xffffffffffffffff, 0x0, 0x0) 06:08:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={0x0, 0x1, 0x86}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613531322d617678000000000000000000000000000b00000000000000330c000000000000000067d400000000000000cb4e94e752a4b955000000000000"], &(0x7f00000003c0)="0e", &(0x7f0000000400)=""/134) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x4200, r4) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000004c0)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x9}}, 0x18) open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x663abba741622feb) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:08:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x3c) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x270, &(0x7f0000000200)=""/144}, 0x48) 06:08:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) 06:08:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0xa}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)={0xc7, 0x34, 0x829, 0x0, 0x0, {0x3, 0x9}, [@nested={0x18, 0x0, [@typed={0x3b, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 06:08:29 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x8}]}}, &(0x7f00000002c0)=""/136, 0x26, 0x88, 0x1}, 0x20) 06:08:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) dup3(r1, r3, 0x0) 06:08:29 executing program 4: wait4(0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000800)) bind$packet(0xffffffffffffffff, 0x0, 0x0) [ 581.755369][T20526] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.2'. [ 581.794224][T20519] kvm: emulating exchange as write 06:08:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x1b3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/14) 06:08:29 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa}) 06:08:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0xa}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)={0xc7, 0x34, 0x829, 0x0, 0x0, {0x3, 0x9}, [@nested={0x18, 0x0, [@typed={0x3b, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 06:08:29 executing program 4: wait4(0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000800)) bind$packet(0xffffffffffffffff, 0x0, 0x0) 06:08:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) dup3(r1, r3, 0x0) [ 582.118177][T20546] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.2'. [ 582.258267][T20509] cgroup: fork rejected by pids controller in /syz5 06:08:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={0x0, 0x1, 0x86}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613531322d617678000000000000000000000000000b00000000000000330c000000000000000067d400000000000000cb4e94e752a4b955000000000000"], &(0x7f00000003c0)="0e", &(0x7f0000000400)=""/134) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x4200, r4) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000004c0)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x9}}, 0x18) open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x663abba741622feb) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:08:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x1b3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/14) 06:08:30 executing program 4: wait4(0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000800)) bind$packet(0xffffffffffffffff, 0x0, 0x0) 06:08:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0xa}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)={0xc7, 0x34, 0x829, 0x0, 0x0, {0x3, 0x9}, [@nested={0x18, 0x0, [@typed={0x3b, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 06:08:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x1b3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/14) 06:08:30 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, &(0x7f0000001280)=0x2, r1, 0x0, 0x800000a, 0x0) 06:08:30 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60f5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 06:08:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getpeername$inet6(r0, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000240)="585ccbc4ed83b836c1a647cffb1f6bb749a80afc9ca94914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50cc93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d000000000000400000000000000000", 0xc0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000340)={'s\x01\x00', 0x1}, &(0x7f0000000100)='\x00', 0x90, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x0f\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x97\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}}) [ 582.633392][T20664] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.2'. 06:08:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0xa}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)={0xc7, 0x34, 0x829, 0x0, 0x0, {0x3, 0x9}, [@nested={0x18, 0x0, [@typed={0x3b, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 06:08:30 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x1b3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/14) 06:08:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x1b3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/14) [ 582.970593][T20686] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.2'. 06:08:30 executing program 4: perf_event_open(&(0x7f0000000600)={0x1, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0x5646, &(0x7f0000000680)={0x0, @bt={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) [ 583.267213][T20693] Sensor A: ================= START STATUS ================= [ 583.334934][T20693] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 583.384898][T20693] v4l2-ctrls: Sensor A: Vertical Flip: false [ 583.391115][T20693] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 583.422683][T20693] v4l2-ctrls: Sensor A: Brightness: 128 [ 583.464385][T20693] v4l2-ctrls: Sensor A: Contrast: 128 [ 583.484665][T20693] v4l2-ctrls: Sensor A: Hue: 0 [ 583.515832][T20693] v4l2-ctrls: Sensor A: Saturation: 128 [ 583.521460][T20693] Sensor A: ================== END STATUS ================== 06:08:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={0x0, 0x1, 0x86}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613531322d617678000000000000000000000000000b00000000000000330c000000000000000067d400000000000000cb4e94e752a4b955000000000000"], &(0x7f00000003c0)="0e", &(0x7f0000000400)=""/134) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x4200, r4) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000004c0)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x9}}, 0x18) open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x663abba741622feb) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:08:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x1b3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/14) 06:08:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x1d) 06:08:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x47, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x1b3) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/14) 06:08:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getpeername$inet6(r0, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000240)="585ccbc4ed83b836c1a647cffb1f6bb749a80afc9ca94914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50cc93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d000000000000400000000000000000", 0xc0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000340)={'s\x01\x00', 0x1}, &(0x7f0000000100)='\x00', 0x90, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x0f\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x97\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}}) 06:08:31 executing program 4: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 583.783939][T20711] Unknown ioctl -2145893024 06:08:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x499, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:08:31 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 06:08:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x499, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:08:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x499, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:08:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 584.214846][ T9143] libceph: connect (1)[d::]:6789 error -101 [ 584.238258][ T9143] libceph: mon0 (1)[d::]:6789 connect error 06:08:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={0x0, 0x1, 0x86}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613531322d617678000000000000000000000000000b00000000000000330c000000000000000067d400000000000000cb4e94e752a4b955000000000000"], &(0x7f00000003c0)="0e", &(0x7f0000000400)=""/134) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x4200, r4) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f00000004c0)) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x9}}, 0x18) open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x663abba741622feb) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:08:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x499, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:08:32 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 584.542437][T20711] Unknown ioctl -2145893024 06:08:32 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 584.657074][T20711] debugfs: Directory '20711-8' with parent 'kvm' already present! [ 584.949083][T10681] libceph: connect (1)[d::]:6789 error -101 [ 584.994468][T10681] libceph: mon0 (1)[d::]:6789 connect error 06:08:32 executing program 4: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:08:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getpeername$inet6(r0, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000240)="585ccbc4ed83b836c1a647cffb1f6bb749a80afc9ca94914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50cc93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d000000000000400000000000000000", 0xc0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000340)={'s\x01\x00', 0x1}, &(0x7f0000000100)='\x00', 0x90, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x0f\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x97\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}}) [ 585.212698][T20781] Unknown ioctl -2145893024 06:08:33 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 06:08:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 585.342714][ T1100] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) 06:08:33 executing program 2: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:33 executing program 5: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:08:33 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 585.950615][T20795] Unknown ioctl -2145893024 06:08:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getpeername$inet6(r0, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000240)="585ccbc4ed83b836c1a647cffb1f6bb749a80afc9ca94914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50cc93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d000000000000400000000000000000", 0xc0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000340)={'s\x01\x00', 0x1}, &(0x7f0000000100)='\x00', 0x90, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r2, r3}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x0f\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x97\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}}) [ 586.076414][T20799] Unknown ioctl -2145893024 [ 586.203874][ T9143] libceph: connect (1)[d::]:6789 error -101 [ 586.213697][ T9143] libceph: mon0 (1)[d::]:6789 connect error 06:08:34 executing program 0: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 586.713230][T20818] Unknown ioctl -2145893024 [ 587.655734][ T17] libceph: connect (1)[d::]:6789 error -101 [ 587.661701][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 588.616940][ T17] libceph: connect (1)[d::]:6789 error -101 [ 588.623262][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 589.657159][ T17] libceph: connect (1)[d::]:6789 error -101 [ 589.664693][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 591.654776][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 593.665118][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 593.678211][ T17] libceph: connect (1)[d::]:6789 error -101 [ 593.687268][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 594.617564][ T17] libceph: connect (1)[d::]:6789 error -101 [ 594.624726][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 595.654915][ T17] libceph: connect (1)[d::]:6789 error -101 [ 595.662635][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 597.654855][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 599.654984][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 599.669262][ T17] libceph: connect (1)[d::]:6789 error -101 [ 599.675556][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 600.616002][ T17] libceph: connect (1)[d::]:6789 error -101 [ 600.622075][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 601.656857][ T17] libceph: connect (1)[d::]:6789 error -101 [ 601.662996][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 603.655550][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 605.654980][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 605.664720][ T17] libceph: connect (1)[d::]:6789 error -101 [ 605.670802][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 606.617087][ T17] libceph: connect (1)[d::]:6789 error -101 [ 606.623096][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 607.657598][ T17] libceph: connect (1)[d::]:6789 error -101 [ 607.663682][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 609.654931][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 611.655138][ T17] libceph: mon1 (1)[::6]:6789 socket error on write [ 611.665604][ T17] libceph: connect (1)[d::]:6789 error -101 [ 611.671722][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 612.624527][ T17] libceph: connect (1)[d::]:6789 error -101 [ 612.630726][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 613.656543][ T17] libceph: connect (1)[d::]:6789 error -101 [ 613.662567][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 615.654883][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 617.665208][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 617.675689][ T17] libceph: connect (1)[d::]:6789 error -101 [ 617.681930][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 618.618832][ T17] libceph: connect (1)[d::]:6789 error -101 [ 618.624977][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 619.659486][ T17] libceph: connect (1)[d::]:6789 error -101 [ 619.665913][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 621.654987][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 623.659032][ T17] libceph: connect (1)[d::]:6789 error -101 [ 623.665187][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 624.616781][ T17] libceph: connect (1)[d::]:6789 error -101 [ 624.622795][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 625.656300][ T17] libceph: connect (1)[d::]:6789 error -101 [ 625.662361][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 627.655212][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 629.654985][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 629.664998][ T17] libceph: connect (1)[d::]:6789 error -101 [ 629.670976][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 630.614765][ T17] libceph: connect (1)[d::]:6789 error -101 [ 630.620818][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 631.657281][ T17] libceph: connect (1)[d::]:6789 error -101 [ 631.663360][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 633.660104][ T17] libceph: mon1 (1)[::6]:6789 socket error on write [ 635.654997][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) [ 635.663631][ T17] libceph: connect (1)[d::]:6789 error -101 [ 635.669894][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 636.618442][ T17] libceph: connect (1)[d::]:6789 error -101 [ 636.624577][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 637.658176][ T17] libceph: connect (1)[d::]:6789 error -101 [ 637.664863][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 639.654939][ T17] libceph: mon1 (1)[::6]:6789 socket error on write [ 641.655217][ T17] libceph: mon1 (1)[::6]:6789 socket error on write [ 641.665313][ T17] libceph: connect (1)[d::]:6789 error -101 [ 641.671341][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 642.618485][ T17] libceph: connect (1)[d::]:6789 error -101 [ 642.625408][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 643.657988][ T17] libceph: connect (1)[d::]:6789 error -101 [ 643.664127][ T17] libceph: mon0 (1)[d::]:6789 connect error [ 644.644289][ T17] libceph: mon1 (1)[::6]:6789 socket closed (con state CONNECTING) 06:09:33 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 06:09:33 executing program 5: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:09:33 executing program 3: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:09:33 executing program 2: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:09:33 executing program 0: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:09:33 executing program 4: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 645.411060][T20832] Unknown ioctl -2145893024 [ 645.429315][T20833] Unknown ioctl -2145893024 [ 645.443852][T20836] Unknown ioctl -2145893024 [ 645.468308][T20837] Unknown ioctl -2145893024 [ 645.474991][T20839] Unknown ioctl -2145893024 06:09:34 executing program 4: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:09:34 executing program 0: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:09:34 executing program 2: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 647.281230][T20863] Unknown ioctl -2145893024 [ 647.477491][T20869] Unknown ioctl -2145893024 [ 647.491545][T20867] Unknown ioctl -2145893024 06:09:35 executing program 3: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:09:35 executing program 5: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 648.003523][T20880] Unknown ioctl -2145893024 [ 648.145988][T20882] Unknown ioctl -2145893024 06:09:36 executing program 0: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 648.395334][T20863] cgroup: fork rejected by pids controller in /syz4 [ 648.582664][T20893] Unknown ioctl -2145893024 06:09:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 649.264652][T11936] tipc: TX() has been purged, node left! [ 650.523343][T20932] IPVS: ftp: loaded support on port[0] = 21 [ 650.858026][T20932] chnl_net:caif_netlink_parms(): no params data found [ 651.058412][T20932] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.094415][T20932] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.115658][T20932] device bridge_slave_0 entered promiscuous mode [ 651.135669][T20932] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.142841][T20932] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.195539][T20932] device bridge_slave_1 entered promiscuous mode [ 651.622957][T20932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.672398][T20932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.100509][T20932] team0: Port device team_slave_0 added [ 652.143369][T20932] team0: Port device team_slave_1 added [ 652.237773][T20932] device hsr_slave_0 entered promiscuous mode [ 652.297047][T20932] device hsr_slave_1 entered promiscuous mode [ 652.469829][T20932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.486175][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.493996][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.506308][T20932] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.516695][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.531461][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.540379][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.547503][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.556123][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.573487][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.582456][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.591445][T10681] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.598598][T10681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.695594][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.725839][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.737097][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.745914][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.754675][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.763097][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.771736][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.781107][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 652.790868][T20932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.809532][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 652.817497][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 652.830532][T20932] 8021q: adding VLAN 0 to HW filter on device batadv0 06:09:41 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 06:09:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:09:41 executing program 3: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:09:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:09:41 executing program 5: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x20000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) close(r1) 06:09:41 executing program 0: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 653.282534][T20962] Unknown ioctl -2145893024 06:09:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 653.332562][T20966] Unknown ioctl -2145893024 06:09:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:09:41 executing program 5: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x20000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) close(r1) [ 653.449520][ T1100] libceph: connect (1)[d::]:6789 error -101 [ 653.456839][ T1100] libceph: mon0 (1)[d::]:6789 connect error 06:09:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:09:41 executing program 2: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x20000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) close(r1) 06:09:41 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x400, 0x8}, 0xc) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) openat$cgroup_int(r2, &(0x7f0000000300)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r1, 0x0, 0x0) 06:09:41 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045005, &(0x7f0000000040)) 06:09:42 executing program 2: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x20000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) close(r1) [ 654.163981][T11936] bridge0: port 3(gretap0) entered disabled state 06:09:42 executing program 5: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x20000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) close(r1) 06:09:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000005200190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 654.233445][T11936] device gretap0 left promiscuous mode [ 654.272668][T11936] bridge0: port 3(gretap0) entered disabled state 06:09:42 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045005, &(0x7f0000000040)) [ 654.469677][T20997] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 06:09:42 executing program 0: r0 = getpid() ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4060, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x8000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/9) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000040)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f00000004c0)=0x4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x8000) write$nbd(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="674466980000000002000100020000009de09704d4adffe182506290810a5b16399254ec8dace78d4c656a2b8810be99b928aaf71fe3ce6945b92bdb3f02a606bf0512aa4d063a5891ea59d4799a437922f0e297b6ed9fe068571bf939b06a2cb44ad24ef9f057fcd7f3e0e2a6aec4d983c7f26203b5e1ac5d4bb048723a33c41f9fdeb6f14ee72b28b9dd8366665076d90fa9ee07d2fa72080fdadaa25be666cfaba18bec31527a58de4b69512b197ae5bd7a2a1509cad4c6dcc9755264439008be9e4b5028b9f14ee7d8e34e9dbf"], 0xcf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) clone3(&(0x7f0000000580)={0x0, &(0x7f0000000280), 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 654.511720][T20997] CPU: 1 PID: 20997 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 654.520085][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.530152][T20997] Call Trace: [ 654.533558][T20997] dump_stack+0x197/0x210 [ 654.538034][T20997] dump_header+0x10b/0x82d [ 654.542477][T20997] oom_kill_process.cold+0x10/0x15 [ 654.547615][T20997] out_of_memory+0x334/0x13c0 [ 654.552383][T20997] ? __sched_text_start+0x8/0x8 [ 654.557248][T20997] ? oom_killer_disable+0x280/0x280 [ 654.562591][T20997] mem_cgroup_out_of_memory+0x1d8/0x240 [ 654.568162][T20997] ? memcg_oom_wake_function+0x700/0x700 [ 654.572651][T21016] Unknown ioctl -2145893024 [ 654.573815][T20997] ? _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 654.573910][T20997] ? cgroup_file_notify+0x140/0x1b0 [ 654.573933][T20997] memory_max_write+0x262/0x3a0 [ 654.594272][T20997] ? mem_cgroup_write+0x370/0x370 [ 654.599404][T20997] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 654.604896][T20997] cgroup_file_write+0x241/0x790 [ 654.609886][T20997] ? mem_cgroup_write+0x370/0x370 [ 654.614919][T20997] ? link_css_set+0x550/0x550 [ 654.619705][T20997] ? kernfs_ops+0x9f/0x120 [ 654.624166][T20997] ? kernfs_ops+0xbe/0x120 [ 654.628601][T20997] ? link_css_set+0x550/0x550 [ 654.633286][T20997] kernfs_fop_write+0x2b8/0x480 [ 654.638221][T20997] __vfs_write+0x8a/0x110 [ 654.642567][T20997] ? kernfs_fop_open+0xd80/0xd80 [ 654.647528][T20997] vfs_write+0x268/0x5d0 [ 654.651790][T20997] ksys_write+0x14f/0x290 [ 654.656147][T20997] ? __ia32_sys_read+0xb0/0xb0 [ 654.656167][T20997] ? do_syscall_64+0x26/0x790 [ 654.656184][T20997] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.656195][T20997] ? do_syscall_64+0x26/0x790 [ 654.656214][T20997] __x64_sys_write+0x73/0xb0 [ 654.665633][T20997] do_syscall_64+0xfa/0x790 [ 654.665657][T20997] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.665669][T20997] RIP: 0033:0x45a679 [ 654.665686][T20997] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.665695][T20997] RSP: 002b:00007f0ec2c66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 654.665709][T20997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 654.665718][T20997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 654.665727][T20997] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 654.665736][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0ec2c676d4 [ 654.665744][T20997] R13: 00000000004cb8f1 R14: 00000000004e5278 R15: 00000000ffffffff [ 654.738380][T20997] memory: usage 8812kB, limit 0kB, failcnt 2 [ 654.782202][T20997] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 654.791864][T20997] Memory cgroup stats for /syz1: [ 654.792425][T20997] anon 6610944 [ 654.792425][T20997] file 86016 [ 654.792425][T20997] kernel_stack 131072 [ 654.792425][T20997] slab 1867776 [ 654.792425][T20997] sock 32768 [ 654.792425][T20997] shmem 16384 [ 654.792425][T20997] file_mapped 0 [ 654.792425][T20997] file_dirty 135168 [ 654.792425][T20997] file_writeback 0 [ 654.792425][T20997] anon_thp 6291456 [ 654.792425][T20997] inactive_anon 0 [ 654.792425][T20997] active_anon 6610944 [ 654.792425][T20997] inactive_file 135168 [ 654.792425][T20997] active_file 135168 [ 654.792425][T20997] unevictable 0 [ 654.792425][T20997] slab_reclaimable 675840 [ 654.792425][T20997] slab_unreclaimable 1191936 [ 654.792425][T20997] pgfault 46002 [ 654.792425][T20997] pgmajfault 0 [ 654.792425][T20997] workingset_refault 0 [ 654.792425][T20997] workingset_activate 0 [ 654.792425][T20997] workingset_nodereclaim 0 [ 654.792425][T20997] pgrefill 35 [ 654.792425][T20997] pgscan 35 [ 654.792425][T20997] pgsteal 0 [ 654.886527][T20997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20972,uid=0 06:09:42 executing program 2: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x20000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) close(r1) 06:09:42 executing program 5: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r1, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x20000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) close(r1) [ 654.996923][T20997] Memory cgroup out of memory: Killed process 20972 (syz-executor.1) total-vm:72584kB, anon-rss:2188kB, file-rss:35828kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 06:09:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r2 = memfd_create(&(0x7f0000000040)='\x88\x9e\xd0)\x82+[\xf1,\x8e\xbd\x81\xaf\x80\x9d}\xfeINM\n\xaes\xf3\"\xe4QA5\xf5\x9c\xff\x8f\x1c\x96u\'\x88\xb8uw\xaa,z4-\xc1\x833\t-\xc2\x1c\x83L\xe6\x8b\x99\xfb\xe6@f\xf3\xffy\x0e\xeb\xd8eOM\x84~\xed\xd6\x14\x9f{\xc8U\xce\x87\x1c\xcc\xe0\x00\x00\x00\x00\xc8\xc2&\x1b$~\xab\x81\x82\xec\xfb{M\x9c\xcb\bR\xf88\xce2\xb7\x88f\xd5\xfc}\xc4\xdf\xfc\x02.o\x9b\x12G\x83\xe0\xbd\x8e,s\x1cm\x94f\xe9\xb8\xdfIF\xacF<\xf8H\x84\xe6\a6\x86\x1d\xe1bmM\xdf\x8c\a\x16\xd5\xa9', 0x5) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x4012, r2, 0x0) sendfile(r0, r1, 0x0, 0x320c) 06:09:43 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045005, &(0x7f0000000040)) [ 655.156889][ T1102] oom_reaper: reaped process 20972 (syz-executor.1), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 655.190549][T20994] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 655.300354][T20994] CPU: 1 PID: 20994 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 655.308846][T20994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.319449][T20994] Call Trace: [ 655.322765][T20994] dump_stack+0x197/0x210 [ 655.327125][T20994] dump_header+0x10b/0x82d [ 655.331561][T20994] ? oom_kill_process+0x94/0x450 [ 655.336518][T20994] oom_kill_process.cold+0x10/0x15 [ 655.341651][T20994] out_of_memory+0x334/0x13c0 [ 655.346456][T20994] ? lock_downgrade+0x920/0x920 [ 655.351325][T20994] ? oom_killer_disable+0x280/0x280 [ 655.356558][T20994] mem_cgroup_out_of_memory+0x1d8/0x240 [ 655.362121][T20994] ? memcg_oom_wake_function+0x700/0x700 [ 655.367780][T20994] ? do_raw_spin_unlock+0x178/0x270 [ 655.372991][T20994] ? _raw_spin_unlock+0x28/0x40 [ 655.377862][T20994] try_charge+0xf76/0x14d0 [ 655.382308][T20994] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 655.387862][T20994] ? rcu_read_unlock+0x2e/0x60 [ 655.392658][T20994] ? __mem_cgroup_largest_soft_limit_node+0x4f0/0x4f0 [ 655.399437][T20994] ? lock_downgrade+0x920/0x920 [ 655.404316][T20994] mem_cgroup_try_charge+0x136/0x590 [ 655.409625][T20994] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 655.415345][T20994] __handle_mm_fault+0x1e12/0x3f00 [ 655.420482][T20994] ? copy_page_range+0x2510/0x2510 [ 655.425615][T20994] ? handle_mm_fault+0x292/0xa50 [ 655.430576][T20994] ? handle_mm_fault+0x7a0/0xa50 [ 655.435608][T20994] ? __kasan_check_read+0x11/0x20 [ 655.440652][T20994] handle_mm_fault+0x3b2/0xa50 [ 655.445532][T20994] __do_page_fault+0x536/0xd80 [ 655.450354][T20994] do_page_fault+0x38/0x590 [ 655.454882][T20994] page_fault+0x39/0x40 [ 655.460176][T20994] RIP: 0033:0x411e6f [ 655.464082][T20994] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 655.483694][T20994] RSP: 002b:00007ffc262c2000 EFLAGS: 00010206 [ 655.489796][T20994] RAX: 00007f0ec2c26000 RBX: 0000000000020000 RCX: 000000000045a6ca 06:09:43 executing program 3: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffff9, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, 0x0, 0xfffffffffffffeef) [ 655.497773][T20994] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 655.505752][T20994] RBP: 00007ffc262c20e0 R08: ffffffffffffffff R09: 0000000000000000 [ 655.513909][T20994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc262c21d0 [ 655.513925][T20994] R13: 00007f0ec2c46700 R14: 0000000000000001 R15: 000000000075bfd4 [ 655.629546][T20994] memory: usage 6480kB, limit 0kB, failcnt 8 [ 655.649453][T20994] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 655.677850][T20994] Memory cgroup stats for /syz1: [ 655.678300][T20994] anon 4472832 [ 655.678300][T20994] file 86016 [ 655.678300][T20994] kernel_stack 131072 [ 655.678300][T20994] slab 1867776 [ 655.678300][T20994] sock 32768 [ 655.678300][T20994] shmem 16384 [ 655.678300][T20994] file_mapped 0 [ 655.678300][T20994] file_dirty 135168 [ 655.678300][T20994] file_writeback 0 [ 655.678300][T20994] anon_thp 4194304 [ 655.678300][T20994] inactive_anon 0 [ 655.678300][T20994] active_anon 4472832 [ 655.678300][T20994] inactive_file 135168 [ 655.678300][T20994] active_file 135168 [ 655.678300][T20994] unevictable 0 [ 655.678300][T20994] slab_reclaimable 675840 [ 655.678300][T20994] slab_unreclaimable 1191936 [ 655.678300][T20994] pgfault 46002 [ 655.678300][T20994] pgmajfault 0 [ 655.678300][T20994] workingset_refault 0 [ 655.678300][T20994] workingset_activate 0 [ 655.678300][T20994] workingset_nodereclaim 0 [ 655.678300][T20994] pgrefill 35 [ 655.678300][T20994] pgscan 35 [ 655.678300][T20994] pgsteal 0 [ 655.814379][T20994] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20955,uid=0 [ 655.863710][T20994] Memory cgroup out of memory: Killed process 20955 (syz-executor.1) total-vm:72588kB, anon-rss:2180kB, file-rss:35824kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 655.909921][T20997] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 655.939239][T20997] CPU: 1 PID: 20997 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 655.947626][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.957693][T20997] Call Trace: [ 655.960989][T20997] dump_stack+0x197/0x210 [ 655.965327][T20997] dump_header+0x10b/0x82d [ 655.969763][T20997] oom_kill_process.cold+0x10/0x15 [ 655.974896][T20997] out_of_memory+0x334/0x13c0 [ 655.979592][T20997] ? cgroup_file_notify+0x140/0x1b0 [ 655.984991][T20997] ? oom_killer_disable+0x280/0x280 [ 655.990211][T20997] mem_cgroup_out_of_memory+0x1d8/0x240 [ 655.995785][T20997] ? memcg_oom_wake_function+0x700/0x700 [ 656.001428][T20997] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 656.007245][T20997] ? cgroup_file_notify+0x140/0x1b0 [ 656.012466][T20997] memory_max_write+0x262/0x3a0 [ 656.017345][T20997] ? mem_cgroup_write+0x370/0x370 [ 656.022393][T20997] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 656.027877][T20997] cgroup_file_write+0x241/0x790 [ 656.032837][T20997] ? mem_cgroup_write+0x370/0x370 [ 656.037873][T20997] ? link_css_set+0x550/0x550 [ 656.042553][T20997] ? kernfs_ops+0x9f/0x120 [ 656.046983][T20997] ? kernfs_ops+0xbe/0x120 [ 656.051384][T20997] ? link_css_set+0x550/0x550 [ 656.056043][T20997] kernfs_fop_write+0x2b8/0x480 [ 656.060887][T20997] __vfs_write+0x8a/0x110 [ 656.065203][T20997] ? kernfs_fop_open+0xd80/0xd80 [ 656.070126][T20997] vfs_write+0x268/0x5d0 [ 656.074351][T20997] ksys_write+0x14f/0x290 [ 656.078671][T20997] ? __ia32_sys_read+0xb0/0xb0 [ 656.083655][T20997] ? do_syscall_64+0x26/0x790 [ 656.088443][T20997] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.094510][T20997] ? do_syscall_64+0x26/0x790 [ 656.099181][T20997] __x64_sys_write+0x73/0xb0 [ 656.103783][T20997] do_syscall_64+0xfa/0x790 [ 656.108276][T20997] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.114153][T20997] RIP: 0033:0x45a679 [ 656.118035][T20997] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.137641][T20997] RSP: 002b:00007f0ec2c66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 656.146066][T20997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 656.154031][T20997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 656.161993][T20997] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 656.169956][T20997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0ec2c676d4 [ 656.177911][T20997] R13: 00000000004cb8f1 R14: 00000000004e5278 R15: 00000000ffffffff [ 656.190435][T20997] memory: usage 4156kB, limit 0kB, failcnt 14 [ 656.196835][T20997] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 656.203686][T20997] Memory cgroup stats for /syz1: [ 656.203906][T20997] anon 2260992 [ 656.203906][T20997] file 86016 [ 656.203906][T20997] kernel_stack 65536 [ 656.203906][T20997] slab 1867776 [ 656.203906][T20997] sock 32768 [ 656.203906][T20997] shmem 16384 [ 656.203906][T20997] file_mapped 0 [ 656.203906][T20997] file_dirty 135168 [ 656.203906][T20997] file_writeback 0 [ 656.203906][T20997] anon_thp 2097152 [ 656.203906][T20997] inactive_anon 0 [ 656.203906][T20997] active_anon 2260992 [ 656.203906][T20997] inactive_file 135168 [ 656.203906][T20997] active_file 135168 [ 656.203906][T20997] unevictable 0 [ 656.203906][T20997] slab_reclaimable 675840 [ 656.203906][T20997] slab_unreclaimable 1191936 [ 656.203906][T20997] pgfault 46002 [ 656.203906][T20997] pgmajfault 0 [ 656.203906][T20997] workingset_refault 0 [ 656.203906][T20997] workingset_activate 0 [ 656.203906][T20997] workingset_nodereclaim 0 [ 656.203906][T20997] pgrefill 35 [ 656.203906][T20997] pgscan 35 [ 656.203906][T20997] pgsteal 0 06:09:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x400, 0x8}, 0xc) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) openat$cgroup_int(r2, &(0x7f0000000300)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r1, 0x0, 0x0) 06:09:44 executing program 5: getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/248}, {&(0x7f00000006c0)=""/266}, {&(0x7f0000000300)=""/39}, {&(0x7f00000004c0)=""/95}, {&(0x7f0000000540)=""/100}, {&(0x7f00000005c0)=""/115}], 0x10000000000002d5, 0x10400003) 06:09:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000004640)=[{{0x0, 0x37b, &(0x7f0000000180)=[{&(0x7f0000000080)=""/214, 0xd6}], 0x1}}], 0x3a7, 0x0, 0x0) 06:09:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) close(r0) 06:09:44 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045005, &(0x7f0000000040)) 06:09:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f9398fe2"}, 0x0, 0x0, @fd, 0x4}) [ 656.299188][T20997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20994,uid=0 [ 656.315786][T20997] Memory cgroup out of memory: Killed process 20994 (syz-executor.1) total-vm:72716kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 656.336154][ T1102] oom_reaper: reaped process 20994 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 06:09:44 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x400, 0x8}, 0xc) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) openat$cgroup_int(r2, &(0x7f0000000300)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r1, 0x0, 0x0) [ 656.422482][T20932] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 656.460043][T20932] CPU: 1 PID: 20932 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 656.468429][T20932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.478497][T20932] Call Trace: [ 656.481791][T20932] dump_stack+0x197/0x210 [ 656.486128][T20932] dump_header+0x10b/0x82d [ 656.490727][T20932] ? oom_kill_process+0x94/0x450 [ 656.495686][T20932] oom_kill_process.cold+0x10/0x15 [ 656.500822][T20932] out_of_memory+0x334/0x13c0 [ 656.505535][T20932] ? lock_downgrade+0x920/0x920 [ 656.510414][T20932] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 656.516229][T20932] ? oom_killer_disable+0x280/0x280 [ 656.521443][T20932] mem_cgroup_out_of_memory+0x1d8/0x240 [ 656.526993][T20932] ? memcg_oom_wake_function+0x700/0x700 [ 656.532641][T20932] ? do_raw_spin_unlock+0x178/0x270 [ 656.537858][T20932] ? _raw_spin_unlock+0x28/0x40 [ 656.542714][T20932] try_charge+0xf76/0x14d0 [ 656.547248][T20932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 656.553632][T20932] ? __lockdep_free_key_range+0x120/0x120 [ 656.559377][T20932] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 656.564930][T20932] ? __lockdep_free_key_range+0x120/0x120 [ 656.570667][T20932] ? cache_grow_begin+0x122/0xd00 [ 656.575710][T20932] ? find_held_lock+0x35/0x130 [ 656.580486][T20932] ? cache_grow_begin+0x122/0xd00 [ 656.585524][T20932] __memcg_kmem_charge_memcg+0x7c/0x130 [ 656.591114][T20932] ? lock_downgrade+0x920/0x920 [ 656.595961][T20932] ? memcg_kmem_put_cache+0x50/0x50 [ 656.595976][T20932] ? __kasan_check_read+0x11/0x20 [ 656.595995][T20932] cache_grow_begin+0x61a/0xd00 [ 656.596010][T20932] ? write_comp_data+0x61/0x70 [ 656.596022][T20932] ? mempolicy_slab_node+0x139/0x390 [ 656.596041][T20932] fallback_alloc+0x1f8/0x2d0 [ 656.625878][T20932] ____cache_alloc_node+0x1bc/0x1d0 [ 656.631198][T20932] ? trace_hardirqs_off+0x62/0x240 [ 656.636332][T20932] kmem_cache_alloc_node_trace+0xec/0x750 [ 656.642063][T20932] ? lock_downgrade+0x920/0x920 [ 656.646941][T20932] __kmalloc_node+0x3d/0x70 [ 656.651544][T20932] kvmalloc_node+0x68/0x100 [ 656.656140][T20932] xt_alloc_table_info+0x41/0xa0 [ 656.656198][T20932] do_ip6t_set_ctl+0x260/0x49e [ 656.665851][T20932] ? compat_do_ip6t_set_ctl+0x170/0x170 [ 656.671431][T20932] ? mutex_unlock+0x1b/0x30 [ 656.676048][T20932] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 656.676068][T20932] nf_setsockopt+0x77/0xd0 [ 656.688059][T20932] ipv6_setsockopt+0x13e/0x170 [ 656.692917][T20932] tcp_setsockopt+0x8f/0xe0 [ 656.697570][T20932] sock_common_setsockopt+0x94/0xd0 [ 656.702788][T20932] __sys_setsockopt+0x261/0x4c0 [ 656.707656][T20932] ? sock_create_kern+0x50/0x50 [ 656.712517][T20932] ? __sys_getsockopt+0x1b2/0x310 [ 656.717560][T20932] ? handle_mm_fault+0x4ab/0xa50 [ 656.722524][T20932] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 656.727980][T20932] ? do_syscall_64+0x26/0x790 [ 656.727996][T20932] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.728008][T20932] ? do_syscall_64+0x26/0x790 [ 656.728028][T20932] __x64_sys_setsockopt+0xbe/0x150 [ 656.738786][T20932] do_syscall_64+0xfa/0x790 [ 656.738808][T20932] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.760447][T20932] RIP: 0033:0x45d1aa [ 656.764354][T20932] Code: 49 89 ca b8 37 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 6a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 656.784147][T20932] RSP: 002b:00007ffc262c1b08 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 656.793787][T20932] RAX: ffffffffffffffda RBX: 00007ffc262c1b30 RCX: 000000000045d1aa [ 656.801768][T20932] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 656.809754][T20932] RBP: 0000000000716cc0 R08: 00000000000002e8 R09: 0000000000004000 06:09:44 executing program 5: getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/248}, {&(0x7f00000006c0)=""/266}, {&(0x7f0000000300)=""/39}, {&(0x7f00000004c0)=""/95}, {&(0x7f0000000540)=""/100}, {&(0x7f00000005c0)=""/115}], 0x10000000000002d5, 0x10400003) 06:09:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x06\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x7, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/544]}, 0x298) [ 656.817736][T20932] R10: 0000000000715fa0 R11: 0000000000000202 R12: 0000000000000003 [ 656.825720][T20932] R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000715f40 [ 656.838907][T20932] memory: usage 1732kB, limit 0kB, failcnt 27 [ 656.847620][T20932] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 656.855526][T20932] Memory cgroup stats for /syz1: [ 656.855909][T20932] anon 73728 [ 656.855909][T20932] file 86016 [ 656.855909][T20932] kernel_stack 0 [ 656.855909][T20932] slab 1867776 [ 656.855909][T20932] sock 32768 [ 656.855909][T20932] shmem 16384 [ 656.855909][T20932] file_mapped 0 [ 656.855909][T20932] file_dirty 135168 [ 656.855909][T20932] file_writeback 0 [ 656.855909][T20932] anon_thp 0 [ 656.855909][T20932] inactive_anon 0 [ 656.855909][T20932] active_anon 73728 [ 656.855909][T20932] inactive_file 135168 [ 656.855909][T20932] active_file 135168 [ 656.855909][T20932] unevictable 0 [ 656.855909][T20932] slab_reclaimable 675840 [ 656.855909][T20932] slab_unreclaimable 1191936 [ 656.855909][T20932] pgfault 46002 [ 656.855909][T20932] pgmajfault 0 [ 656.855909][T20932] workingset_refault 0 [ 656.855909][T20932] workingset_activate 0 [ 656.855909][T20932] workingset_nodereclaim 0 [ 656.855909][T20932] pgrefill 35 [ 656.855909][T20932] pgscan 35 [ 656.855909][T20932] pgsteal 0 [ 656.855909][T20932] pgactivate 33 [ 656.957563][T20932] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20932,uid=0 06:09:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000004640)=[{{0x0, 0x37b, &(0x7f0000000180)=[{&(0x7f0000000080)=""/214, 0xd6}], 0x1}}], 0x3a7, 0x0, 0x0) 06:09:44 executing program 5: getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/248}, {&(0x7f00000006c0)=""/266}, {&(0x7f0000000300)=""/39}, {&(0x7f00000004c0)=""/95}, {&(0x7f0000000540)=""/100}, {&(0x7f00000005c0)=""/115}], 0x10000000000002d5, 0x10400003) [ 657.026069][T20932] Memory cgroup out of memory: Killed process 20932 (syz-executor.1) total-vm:72452kB, anon-rss:96kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 06:09:45 executing program 0: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) [ 657.098582][T21066] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 657.144462][T21066] CPU: 0 PID: 21066 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 657.152837][T21066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.162906][T21066] Call Trace: [ 657.166213][T21066] dump_stack+0x197/0x210 [ 657.170565][T21066] dump_header+0x10b/0x82d [ 657.175006][T21066] oom_kill_process.cold+0x10/0x15 [ 657.180144][T21066] out_of_memory+0x334/0x13c0 [ 657.184853][T21066] ? oom_killer_disable+0x280/0x280 [ 657.190086][T21066] mem_cgroup_out_of_memory+0x1d8/0x240 [ 657.195656][T21066] ? memcg_oom_wake_function+0x700/0x700 [ 657.201322][T21066] ? _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 657.207143][T21066] ? cgroup_file_notify+0x140/0x1b0 [ 657.212373][T21066] memory_max_write+0x262/0x3a0 [ 657.217249][T21066] ? mem_cgroup_write+0x370/0x370 [ 657.222322][T21066] ? cgroup_file_write+0x86/0x790 [ 657.227365][T21066] cgroup_file_write+0x241/0x790 [ 657.232320][T21066] ? mem_cgroup_write+0x370/0x370 [ 657.237384][T21066] ? link_css_set+0x550/0x550 [ 657.242108][T21066] ? link_css_set+0x550/0x550 [ 657.246799][T21066] kernfs_fop_write+0x2b8/0x480 [ 657.251665][T21066] __vfs_write+0x8a/0x110 [ 657.256001][T21066] ? kernfs_fop_open+0xd80/0xd80 [ 657.256023][T21066] vfs_write+0x268/0x5d0 [ 657.256041][T21066] ksys_write+0x14f/0x290 [ 657.256056][T21066] ? __ia32_sys_read+0xb0/0xb0 [ 657.256080][T21066] ? do_syscall_64+0x26/0x790 [ 657.256095][T21066] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.256108][T21066] ? do_syscall_64+0x26/0x790 [ 657.256137][T21066] __x64_sys_write+0x73/0xb0 [ 657.256157][T21066] do_syscall_64+0xfa/0x790 [ 657.256175][T21066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.256185][T21066] RIP: 0033:0x45a679 [ 657.256199][T21066] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 657.279303][T21066] RSP: 002b:00007f81636f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 657.279324][T21066] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 657.279332][T21066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 657.279341][T21066] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 657.279350][T21066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81636f76d4 [ 657.279359][T21066] R13: 00000000004cb8f1 R14: 00000000004e5278 R15: 00000000ffffffff [ 657.291966][T21081] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 657.347411][T21066] memory: usage 65880kB, limit 0kB, failcnt 0 [ 657.405835][T21066] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 657.412777][T21066] Memory cgroup stats for /syz3: [ 657.416024][T21066] anon 57331712 [ 657.416024][T21066] file 45056 [ 657.416024][T21066] kernel_stack 720896 [ 657.416024][T21066] slab 5369856 [ 657.416024][T21066] sock 0 [ 657.416024][T21066] shmem 0 [ 657.416024][T21066] file_mapped 0 [ 657.416024][T21066] file_dirty 0 [ 657.416024][T21066] file_writeback 0 [ 657.416024][T21066] anon_thp 54525952 [ 657.416024][T21066] inactive_anon 0 [ 657.416024][T21066] active_anon 57253888 [ 657.416024][T21066] inactive_file 0 [ 657.416024][T21066] active_file 61440 [ 657.416024][T21066] unevictable 0 [ 657.416024][T21066] slab_reclaimable 1216512 [ 657.416024][T21066] slab_unreclaimable 4153344 [ 657.416024][T21066] pgfault 35541 [ 657.416024][T21066] pgmajfault 0 [ 657.416024][T21066] workingset_refault 0 [ 657.416024][T21066] workingset_activate 0 [ 657.416024][T21066] workingset_nodereclaim 0 [ 657.416024][T21066] pgrefill 90 [ 657.416024][T21066] pgscan 95 [ 657.416024][T21066] pgsteal 89 [ 657.416024][T21066] pgactivate 0 [ 657.740151][T21066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20854,uid=0 [ 657.780635][T21066] Memory cgroup out of memory: Killed process 20854 (syz-executor.3) total-vm:72852kB, anon-rss:4276kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 658.057323][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 658.071222][ T7] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 658.101326][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 658.110418][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.110497][ T9094] Call Trace: [ 658.110518][ T9094] dump_stack+0x197/0x210 [ 658.110540][ T9094] dump_header+0x10b/0x82d [ 658.110552][ T9094] ? oom_kill_process+0x94/0x450 [ 658.110570][ T9094] oom_kill_process.cold+0x10/0x15 [ 658.110588][ T9094] out_of_memory+0x334/0x13c0 [ 658.110602][ T9094] ? lock_downgrade+0x920/0x920 [ 658.110625][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 658.135452][ T9094] ? oom_killer_disable+0x280/0x280 [ 658.146695][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 658.146710][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 658.146731][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 658.146748][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 658.146766][ T9094] try_charge+0xf76/0x14d0 [ 658.158914][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 658.158934][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 658.158959][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 658.187112][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 658.211888][ T9094] ? cache_grow_begin+0x122/0xd00 [ 658.238750][ T9094] ? find_held_lock+0x35/0x130 [ 658.238847][T11936] device bridge_slave_1 left promiscuous mode [ 658.243617][ T9094] ? cache_grow_begin+0x122/0xd00 [ 658.257689][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 658.263237][ T9094] ? lock_downgrade+0x920/0x920 [ 658.268612][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 658.273911][ T9094] ? __kasan_check_read+0x11/0x20 [ 658.274475][T11936] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.279283][ T9094] cache_grow_begin+0x61a/0xd00 [ 658.291880][ T9094] ? write_comp_data+0x61/0x70 [ 658.296735][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 658.302026][ T9094] fallback_alloc+0x1f8/0x2d0 [ 658.306928][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 658.313904][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 658.319117][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 658.324749][ T9094] ? lock_downgrade+0x920/0x920 [ 658.329623][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 658.334798][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 658.340572][ T9094] ext4_alloc_inode+0x1f/0x640 [ 658.345972][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 658.352495][ T9094] alloc_inode+0x68/0x1e0 [ 658.357292][ T9094] iget_locked+0x1a6/0x4b0 [ 658.362026][ T9094] __ext4_iget+0x265/0x3e20 [ 658.366551][ T9094] ? ext4_get_projid+0x190/0x190 [ 658.374259][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 658.380106][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 658.386345][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 658.391980][ T9094] ext4_lookup+0x3b1/0x7a0 [ 658.398393][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 658.403690][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 658.408919][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 658.414184][ T9094] __lookup_slow+0x279/0x500 [ 658.418934][ T9094] ? vfs_unlink+0x620/0x620 [ 658.423811][ T9094] lookup_slow+0x58/0x80 [ 658.429131][ T9094] path_mountpoint+0x5d2/0x1e50 [ 658.434325][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 658.440702][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 658.446816][ T9094] ? path_openat+0x4710/0x4710 [ 658.452318][ T9094] filename_mountpoint+0x18e/0x390 [ 658.459020][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 658.465112][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 658.471264][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 658.478561][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 658.484479][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 658.490297][ T9094] ? __check_object_size+0x3d/0x437 [ 658.495646][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 658.500946][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 658.507651][ T9094] ? getname_flags+0x277/0x5b0 [ 658.512660][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 658.521431][ T9094] ksys_umount+0x164/0xef0 [ 658.526016][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 658.532287][ T9094] ? __detach_mounts+0x290/0x290 [ 658.537678][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 658.543307][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 658.548779][ T9094] ? do_syscall_64+0x26/0x790 [ 658.553456][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.559517][ T9094] ? do_syscall_64+0x26/0x790 [ 658.564792][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 658.572461][ T9094] __x64_sys_umount+0x54/0x80 [ 658.577148][ T9094] do_syscall_64+0xfa/0x790 [ 658.581667][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.587846][ T9094] RIP: 0033:0x45d0a7 [ 658.591893][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 658.611866][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 658.620285][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 658.628260][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 658.636363][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 658.644445][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 658.652591][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 658.666583][ T9094] memory: usage 58968kB, limit 0kB, failcnt 13 [ 658.673163][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 658.680465][ T9094] Memory cgroup stats for /syz3: [ 658.680905][ T9094] anon 50954240 [ 658.680905][ T9094] file 45056 [ 658.680905][ T9094] kernel_stack 720896 [ 658.680905][ T9094] slab 5369856 [ 658.680905][ T9094] sock 0 [ 658.680905][ T9094] shmem 0 [ 658.680905][ T9094] file_mapped 0 [ 658.680905][ T9094] file_dirty 0 [ 658.680905][ T9094] file_writeback 0 [ 658.680905][ T9094] anon_thp 48234496 [ 658.680905][ T9094] inactive_anon 0 [ 658.680905][ T9094] active_anon 50794496 [ 658.680905][ T9094] inactive_file 0 [ 658.680905][ T9094] active_file 61440 [ 658.680905][ T9094] unevictable 0 [ 658.680905][ T9094] slab_reclaimable 1216512 [ 658.680905][ T9094] slab_unreclaimable 4153344 [ 658.680905][ T9094] pgfault 35574 [ 658.680905][ T9094] pgmajfault 0 [ 658.680905][ T9094] workingset_refault 0 [ 658.680905][ T9094] workingset_activate 0 [ 658.680905][ T9094] workingset_nodereclaim 0 [ 658.680905][ T9094] pgrefill 90 [ 658.680905][ T9094] pgscan 95 [ 658.680905][ T9094] pgsteal 89 [ 658.680905][ T9094] pgactivate 0 [ 658.780964][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20995,uid=0 [ 658.800829][ T9094] Memory cgroup out of memory: Killed process 20995 (syz-executor.3) total-vm:72716kB, anon-rss:4268kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 658.831760][ T1102] oom_reaper: reaped process 20995 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 658.847626][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 658.862274][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 658.870682][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.880876][ T9094] Call Trace: [ 658.884173][ T9094] dump_stack+0x197/0x210 [ 658.888616][ T9094] dump_header+0x10b/0x82d [ 658.893017][ T9094] ? oom_kill_process+0x94/0x450 [ 658.897940][ T9094] oom_kill_process.cold+0x10/0x15 [ 658.903034][ T9094] out_of_memory+0x334/0x13c0 [ 658.907895][ T9094] ? lock_downgrade+0x920/0x920 [ 658.913452][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 658.919454][ T9094] ? oom_killer_disable+0x280/0x280 [ 658.924703][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 658.930383][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 658.936876][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 658.942146][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 658.947144][ T9094] try_charge+0xf76/0x14d0 [ 658.951634][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 658.957871][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 658.963741][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 658.969290][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 658.975129][ T9094] ? cache_grow_begin+0x122/0xd00 [ 658.980271][ T9094] ? find_held_lock+0x35/0x130 [ 658.985278][ T9094] ? cache_grow_begin+0x122/0xd00 [ 658.990322][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 658.995903][ T9094] ? lock_downgrade+0x920/0x920 [ 659.001032][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 659.006395][ T9094] ? __kasan_check_read+0x11/0x20 [ 659.011705][ T9094] cache_grow_begin+0x61a/0xd00 [ 659.016728][ T9094] ? write_comp_data+0x61/0x70 [ 659.021504][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 659.026807][ T9094] fallback_alloc+0x1f8/0x2d0 [ 659.031490][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 659.036676][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 659.041789][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 659.046653][ T9094] ? lock_downgrade+0x920/0x920 [ 659.051627][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 659.056583][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 659.061803][ T9094] ext4_alloc_inode+0x1f/0x640 [ 659.066560][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 659.071747][ T9094] alloc_inode+0x68/0x1e0 [ 659.076107][ T9094] iget_locked+0x1a6/0x4b0 [ 659.080509][ T9094] __ext4_iget+0x265/0x3e20 [ 659.085181][ T9094] ? ext4_get_projid+0x190/0x190 [ 659.090580][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 659.096908][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 659.103026][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 659.108172][ T9094] ext4_lookup+0x3b1/0x7a0 [ 659.112934][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 659.118367][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 659.123687][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 659.128826][ T9094] __lookup_slow+0x279/0x500 [ 659.133455][ T9094] ? vfs_unlink+0x620/0x620 [ 659.137982][ T9094] lookup_slow+0x58/0x80 [ 659.142236][ T9094] path_mountpoint+0x5d2/0x1e50 [ 659.147085][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 659.153216][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 659.159272][ T9094] ? path_openat+0x4710/0x4710 [ 659.164405][ T9094] filename_mountpoint+0x18e/0x390 [ 659.169549][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 659.175400][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 659.181847][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 659.188469][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 659.194282][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 659.200175][ T9094] ? __check_object_size+0x3d/0x437 [ 659.205709][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 659.211076][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.217555][ T9094] ? getname_flags+0x277/0x5b0 [ 659.222334][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 659.228090][ T9094] ksys_umount+0x164/0xef0 [ 659.232540][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.238952][ T9094] ? __detach_mounts+0x290/0x290 [ 659.244009][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 659.251508][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 659.257244][ T9094] ? do_syscall_64+0x26/0x790 [ 659.262269][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.268336][ T9094] ? do_syscall_64+0x26/0x790 [ 659.273008][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 659.278340][ T9094] __x64_sys_umount+0x54/0x80 [ 659.283304][ T9094] do_syscall_64+0xfa/0x790 [ 659.288732][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.294795][ T9094] RIP: 0033:0x45d0a7 [ 659.298695][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 659.318942][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 659.329028][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 659.337356][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 659.345318][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 659.353295][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 659.361264][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 659.373120][ T9094] memory: usage 54624kB, limit 0kB, failcnt 19 [ 659.379418][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 659.392473][ T9094] Memory cgroup stats for /syz3: [ 659.392608][ T9094] anon 46555136 [ 659.392608][ T9094] file 45056 [ 659.392608][ T9094] kernel_stack 720896 [ 659.392608][ T9094] slab 5369856 [ 659.392608][ T9094] sock 0 [ 659.392608][ T9094] shmem 0 [ 659.392608][ T9094] file_mapped 0 [ 659.392608][ T9094] file_dirty 0 [ 659.392608][ T9094] file_writeback 0 [ 659.392608][ T9094] anon_thp 44040192 [ 659.392608][ T9094] inactive_anon 0 [ 659.392608][ T9094] active_anon 46481408 [ 659.392608][ T9094] inactive_file 0 [ 659.392608][ T9094] active_file 61440 [ 659.392608][ T9094] unevictable 0 [ 659.392608][ T9094] slab_reclaimable 1216512 [ 659.392608][ T9094] slab_unreclaimable 4153344 [ 659.392608][ T9094] pgfault 35574 [ 659.392608][ T9094] pgmajfault 0 [ 659.392608][ T9094] workingset_refault 0 [ 659.392608][ T9094] workingset_activate 0 [ 659.392608][ T9094] workingset_nodereclaim 0 [ 659.392608][ T9094] pgrefill 90 [ 659.392608][ T9094] pgscan 95 [ 659.392608][ T9094] pgsteal 89 [ 659.392608][ T9094] pgactivate 0 [ 659.397687][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20919,uid=0 [ 659.520198][ T9094] Memory cgroup out of memory: Killed process 20919 (syz-executor.3) total-vm:72720kB, anon-rss:4268kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 659.586872][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 659.624313][ T9094] CPU: 0 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 659.632605][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.642657][ T9094] Call Trace: [ 659.645971][ T9094] dump_stack+0x197/0x210 [ 659.650305][ T9094] dump_header+0x10b/0x82d [ 659.655762][ T9094] ? oom_kill_process+0x94/0x450 [ 659.660714][ T9094] oom_kill_process.cold+0x10/0x15 [ 659.665828][ T9094] out_of_memory+0x334/0x13c0 [ 659.670504][ T9094] ? lock_downgrade+0x920/0x920 [ 659.675363][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 659.681174][ T9094] ? oom_killer_disable+0x280/0x280 [ 659.686395][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 659.691939][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 659.697580][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 659.702780][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 659.707637][ T9094] try_charge+0xf76/0x14d0 [ 659.712055][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.718302][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 659.724045][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 659.729594][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 659.735322][ T9094] ? cache_grow_begin+0x122/0xd00 [ 659.740358][ T9094] ? find_held_lock+0x35/0x130 [ 659.745121][ T9094] ? cache_grow_begin+0x122/0xd00 [ 659.750152][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 659.755700][ T9094] ? lock_downgrade+0x920/0x920 [ 659.760571][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 659.765779][ T9094] ? __kasan_check_read+0x11/0x20 [ 659.770811][ T9094] cache_grow_begin+0x61a/0xd00 [ 659.775661][ T9094] ? write_comp_data+0x61/0x70 [ 659.780420][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 659.785709][ T9094] fallback_alloc+0x1f8/0x2d0 [ 659.790522][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 659.795718][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 659.800834][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 659.805718][ T9094] ? lock_downgrade+0x920/0x920 [ 659.810748][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 659.815700][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 659.820903][ T9094] ext4_alloc_inode+0x1f/0x640 [ 659.825678][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 659.830879][ T9094] alloc_inode+0x68/0x1e0 [ 659.835221][ T9094] iget_locked+0x1a6/0x4b0 [ 659.839651][ T9094] __ext4_iget+0x265/0x3e20 [ 659.844173][ T9094] ? ext4_get_projid+0x190/0x190 [ 659.849121][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 659.854699][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 659.860700][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 659.865826][ T9094] ext4_lookup+0x3b1/0x7a0 [ 659.870251][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 659.875537][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 659.880575][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 659.885616][ T9094] __lookup_slow+0x279/0x500 [ 659.890469][ T9094] ? vfs_unlink+0x620/0x620 [ 659.895011][ T9094] lookup_slow+0x58/0x80 [ 659.899255][ T9094] path_mountpoint+0x5d2/0x1e50 [ 659.904106][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 659.909833][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 659.915825][ T9094] ? path_openat+0x4710/0x4710 [ 659.920604][ T9094] filename_mountpoint+0x18e/0x390 [ 659.925736][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 659.931459][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 659.937627][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 659.943871][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 659.948899][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 659.954659][ T9094] ? __check_object_size+0x3d/0x437 [ 659.959889][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 659.965001][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.971243][ T9094] ? getname_flags+0x277/0x5b0 [ 659.976033][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 659.981689][ T9094] ksys_umount+0x164/0xef0 [ 659.986112][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 659.992363][ T9094] ? __detach_mounts+0x290/0x290 [ 659.997308][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 660.002941][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 660.008399][ T9094] ? do_syscall_64+0x26/0x790 [ 660.013167][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.019229][ T9094] ? do_syscall_64+0x26/0x790 [ 660.023905][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 660.029200][ T9094] __x64_sys_umount+0x54/0x80 [ 660.034143][ T9094] do_syscall_64+0xfa/0x790 [ 660.038660][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.044546][ T9094] RIP: 0033:0x45d0a7 [ 660.048438][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 660.068153][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 660.076573][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 660.084542][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 660.092680][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 660.100762][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 660.109043][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 660.122153][ T9094] memory: usage 50232kB, limit 0kB, failcnt 25 [ 660.128515][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 660.135860][ T9094] Memory cgroup stats for /syz3: [ 660.135974][ T9094] anon 42221568 [ 660.135974][ T9094] file 45056 [ 660.135974][ T9094] kernel_stack 655360 [ 660.135974][ T9094] slab 5369856 [ 660.135974][ T9094] sock 0 [ 660.135974][ T9094] shmem 0 [ 660.135974][ T9094] file_mapped 0 [ 660.135974][ T9094] file_dirty 0 [ 660.135974][ T9094] file_writeback 0 [ 660.135974][ T9094] anon_thp 39845888 [ 660.135974][ T9094] inactive_anon 0 [ 660.135974][ T9094] active_anon 42147840 [ 660.135974][ T9094] inactive_file 0 [ 660.135974][ T9094] active_file 61440 [ 660.135974][ T9094] unevictable 0 [ 660.135974][ T9094] slab_reclaimable 1216512 [ 660.135974][ T9094] slab_unreclaimable 4153344 [ 660.135974][ T9094] pgfault 35574 [ 660.135974][ T9094] pgmajfault 0 [ 660.135974][ T9094] workingset_refault 0 [ 660.135974][ T9094] workingset_activate 0 [ 660.135974][ T9094] workingset_nodereclaim 0 [ 660.135974][ T9094] pgrefill 90 [ 660.135974][ T9094] pgscan 95 [ 660.135974][ T9094] pgsteal 89 [ 660.135974][ T9094] pgactivate 0 [ 660.237079][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20471,uid=0 [ 660.261502][ T9094] Memory cgroup out of memory: Killed process 20471 (syz-executor.3) total-vm:72716kB, anon-rss:4268kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 660.290084][ T1102] oom_reaper: reaped process 20471 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 660.305971][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 660.331240][ T9094] CPU: 0 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 660.339521][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.349578][ T9094] Call Trace: [ 660.352881][ T9094] dump_stack+0x197/0x210 [ 660.357532][ T9094] dump_header+0x10b/0x82d [ 660.361963][ T9094] ? oom_kill_process+0x94/0x450 [ 660.366925][ T9094] oom_kill_process.cold+0x10/0x15 [ 660.372072][ T9094] out_of_memory+0x334/0x13c0 [ 660.376778][ T9094] ? lock_downgrade+0x920/0x920 [ 660.381679][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 660.387518][ T9094] ? oom_killer_disable+0x280/0x280 [ 660.392752][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 660.398310][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 660.404089][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 660.409325][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 660.414229][ T9094] try_charge+0xf76/0x14d0 [ 660.418666][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 660.425038][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 660.430792][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 660.436366][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 660.442303][ T9094] ? cache_grow_begin+0x122/0xd00 [ 660.447351][ T9094] ? find_held_lock+0x35/0x130 [ 660.452146][ T9094] ? cache_grow_begin+0x122/0xd00 [ 660.457448][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 660.463178][ T9094] ? lock_downgrade+0x920/0x920 [ 660.468089][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 660.473346][ T9094] ? __kasan_check_read+0x11/0x20 [ 660.478434][ T9094] cache_grow_begin+0x61a/0xd00 [ 660.484828][ T9094] ? write_comp_data+0x61/0x70 [ 660.489609][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 660.494997][ T9094] fallback_alloc+0x1f8/0x2d0 [ 660.500055][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 660.505313][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 660.510445][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 660.515314][ T9094] ? lock_downgrade+0x920/0x920 [ 660.520363][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 660.525637][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 660.530856][ T9094] ext4_alloc_inode+0x1f/0x640 [ 660.535632][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 660.540847][ T9094] alloc_inode+0x68/0x1e0 [ 660.545196][ T9094] iget_locked+0x1a6/0x4b0 [ 660.549621][ T9094] __ext4_iget+0x265/0x3e20 [ 660.554183][ T9094] ? ext4_get_projid+0x190/0x190 [ 660.559140][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 660.564848][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 660.570892][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 660.576034][ T9094] ext4_lookup+0x3b1/0x7a0 [ 660.580691][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 660.585997][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 660.591034][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 660.596076][ T9094] __lookup_slow+0x279/0x500 [ 660.600676][ T9094] ? vfs_unlink+0x620/0x620 [ 660.605221][ T9094] lookup_slow+0x58/0x80 [ 660.609593][ T9094] path_mountpoint+0x5d2/0x1e50 [ 660.614500][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 660.620391][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 660.626595][ T9094] ? path_openat+0x4710/0x4710 [ 660.631502][ T9094] filename_mountpoint+0x18e/0x390 [ 660.636655][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 660.642412][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 660.648618][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 660.655136][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 660.660187][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 660.665946][ T9094] ? __check_object_size+0x3d/0x437 [ 660.671171][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 660.676332][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 660.682586][ T9094] ? getname_flags+0x277/0x5b0 [ 660.687463][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 660.692778][ T9094] ksys_umount+0x164/0xef0 [ 660.697390][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 660.703691][ T9094] ? __detach_mounts+0x290/0x290 [ 660.708834][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 660.714311][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 660.719850][ T9094] ? do_syscall_64+0x26/0x790 [ 660.724556][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.730663][ T9094] ? do_syscall_64+0x26/0x790 [ 660.736330][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 660.741631][ T9094] __x64_sys_umount+0x54/0x80 [ 660.746321][ T9094] do_syscall_64+0xfa/0x790 [ 660.750840][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.756741][ T9094] RIP: 0033:0x45d0a7 [ 660.760638][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 660.780254][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 660.788674][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 660.796660][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 660.804870][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 660.812867][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 660.820964][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 660.832022][ T9094] memory: usage 45420kB, limit 0kB, failcnt 32 [ 660.838346][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 660.845830][ T9094] Memory cgroup stats for /syz3: [ 660.845945][ T9094] anon 37838848 [ 660.845945][ T9094] file 45056 [ 660.845945][ T9094] kernel_stack 589824 [ 660.845945][ T9094] slab 5369856 [ 660.845945][ T9094] sock 0 [ 660.845945][ T9094] shmem 0 [ 660.845945][ T9094] file_mapped 0 [ 660.845945][ T9094] file_dirty 0 [ 660.845945][ T9094] file_writeback 0 [ 660.845945][ T9094] anon_thp 35651584 [ 660.845945][ T9094] inactive_anon 0 [ 660.845945][ T9094] active_anon 37842944 [ 660.845945][ T9094] inactive_file 0 [ 660.845945][ T9094] active_file 61440 [ 660.845945][ T9094] unevictable 0 [ 660.845945][ T9094] slab_reclaimable 1216512 [ 660.845945][ T9094] slab_unreclaimable 4153344 [ 660.845945][ T9094] pgfault 35574 [ 660.845945][ T9094] pgmajfault 0 [ 660.845945][ T9094] workingset_refault 0 [ 660.845945][ T9094] workingset_activate 0 [ 660.845945][ T9094] workingset_nodereclaim 0 [ 660.845945][ T9094] pgrefill 90 [ 660.845945][ T9094] pgscan 95 [ 660.845945][ T9094] pgsteal 89 [ 660.845945][ T9094] pgactivate 0 [ 660.944090][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20423,uid=0 [ 660.968688][ T9094] Memory cgroup out of memory: Killed process 20423 (syz-executor.3) total-vm:72716kB, anon-rss:4268kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 660.990859][ T1102] oom_reaper: reaped process 20423 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 661.005362][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 661.019027][ T9094] CPU: 0 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 661.027447][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.037974][ T9094] Call Trace: [ 661.041325][ T9094] dump_stack+0x197/0x210 [ 661.045682][ T9094] dump_header+0x10b/0x82d [ 661.050104][ T9094] ? oom_kill_process+0x94/0x450 [ 661.055059][ T9094] oom_kill_process.cold+0x10/0x15 [ 661.060179][ T9094] out_of_memory+0x334/0x13c0 [ 661.064874][ T9094] ? lock_downgrade+0x920/0x920 [ 661.069736][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 661.075559][ T9094] ? oom_killer_disable+0x280/0x280 [ 661.080777][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 661.086333][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 661.092003][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 661.097241][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 661.102143][ T9094] try_charge+0xf76/0x14d0 [ 661.106584][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.113289][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 661.119145][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 661.125090][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 661.131010][ T9094] ? cache_grow_begin+0x122/0xd00 [ 661.136058][ T9094] ? find_held_lock+0x35/0x130 [ 661.140918][ T9094] ? cache_grow_begin+0x122/0xd00 [ 661.145985][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 661.151603][ T9094] ? lock_downgrade+0x920/0x920 [ 661.156551][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 661.161956][ T9094] ? __kasan_check_read+0x11/0x20 [ 661.169800][ T9094] cache_grow_begin+0x61a/0xd00 [ 661.174685][ T9094] ? write_comp_data+0x61/0x70 [ 661.179634][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 661.185647][ T9094] fallback_alloc+0x1f8/0x2d0 [ 661.190348][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 661.195645][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 661.200776][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 661.205633][ T9094] ? lock_downgrade+0x920/0x920 [ 661.210494][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 661.215455][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 661.221545][ T9094] ext4_alloc_inode+0x1f/0x640 [ 661.226333][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 661.231545][ T9094] alloc_inode+0x68/0x1e0 [ 661.235905][ T9094] iget_locked+0x1a6/0x4b0 [ 661.240660][ T9094] __ext4_iget+0x265/0x3e20 [ 661.245199][ T9094] ? ext4_get_projid+0x190/0x190 [ 661.245216][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 661.245228][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 661.245244][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 661.245265][ T9094] ext4_lookup+0x3b1/0x7a0 [ 661.245280][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 661.245374][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 661.245397][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 661.245418][ T9094] __lookup_slow+0x279/0x500 [ 661.245434][ T9094] ? vfs_unlink+0x620/0x620 [ 661.245478][ T9094] lookup_slow+0x58/0x80 [ 661.245495][ T9094] path_mountpoint+0x5d2/0x1e50 [ 661.245516][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 661.245529][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 661.245549][ T9094] ? path_openat+0x4710/0x4710 [ 661.322064][ T9094] filename_mountpoint+0x18e/0x390 [ 661.328183][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 661.333906][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 661.340064][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 661.346310][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 661.351494][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 661.357375][ T9094] ? __check_object_size+0x3d/0x437 [ 661.362736][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 661.367863][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.374091][ T9094] ? getname_flags+0x277/0x5b0 [ 661.378843][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 661.384116][ T9094] ksys_umount+0x164/0xef0 [ 661.388533][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.394854][ T9094] ? __detach_mounts+0x290/0x290 [ 661.399796][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 661.405238][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 661.410803][ T9094] ? do_syscall_64+0x26/0x790 [ 661.415485][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.421554][ T9094] ? do_syscall_64+0x26/0x790 [ 661.426226][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 661.431504][ T9094] __x64_sys_umount+0x54/0x80 [ 661.436177][ T9094] do_syscall_64+0xfa/0x790 [ 661.440678][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.447121][ T9094] RIP: 0033:0x45d0a7 [ 661.451029][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.471066][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 661.479470][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 661.487429][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 661.495387][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 661.503349][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 661.511325][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 661.524238][ T9094] memory: usage 41024kB, limit 0kB, failcnt 38 [ 661.530422][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 661.537727][ T9094] Memory cgroup stats for /syz3: [ 661.537834][ T9094] anon 33509376 [ 661.537834][ T9094] file 45056 [ 661.537834][ T9094] kernel_stack 589824 [ 661.537834][ T9094] slab 5369856 [ 661.537834][ T9094] sock 0 [ 661.537834][ T9094] shmem 0 [ 661.537834][ T9094] file_mapped 0 [ 661.537834][ T9094] file_dirty 0 [ 661.537834][ T9094] file_writeback 0 [ 661.537834][ T9094] anon_thp 31457280 [ 661.537834][ T9094] inactive_anon 0 [ 661.537834][ T9094] active_anon 33513472 [ 661.537834][ T9094] inactive_file 0 [ 661.537834][ T9094] active_file 61440 [ 661.537834][ T9094] unevictable 0 [ 661.537834][ T9094] slab_reclaimable 1216512 [ 661.537834][ T9094] slab_unreclaimable 4153344 [ 661.537834][ T9094] pgfault 35574 [ 661.537834][ T9094] pgmajfault 0 [ 661.537834][ T9094] workingset_refault 0 [ 661.537834][ T9094] workingset_activate 0 [ 661.537834][ T9094] workingset_nodereclaim 0 [ 661.537834][ T9094] pgrefill 90 [ 661.537834][ T9094] pgscan 95 [ 661.537834][ T9094] pgsteal 89 [ 661.537834][ T9094] pgactivate 0 [ 661.642585][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20383,uid=0 [ 661.666780][ T9094] Memory cgroup out of memory: Killed process 20383 (syz-executor.3) total-vm:72716kB, anon-rss:4268kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 661.695300][ T1102] oom_reaper: reaped process 20383 (syz-executor.3), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 661.735643][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 661.748426][ T9094] CPU: 0 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 661.756678][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.766734][ T9094] Call Trace: [ 661.770032][ T9094] dump_stack+0x197/0x210 [ 661.774385][ T9094] dump_header+0x10b/0x82d [ 661.778804][ T9094] ? oom_kill_process+0x94/0x450 [ 661.783741][ T9094] oom_kill_process.cold+0x10/0x15 [ 661.788851][ T9094] out_of_memory+0x334/0x13c0 [ 661.793528][ T9094] ? lock_downgrade+0x920/0x920 [ 661.798391][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 661.804292][ T9094] ? oom_killer_disable+0x280/0x280 [ 661.809506][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 661.815052][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 661.820687][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 661.825887][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 661.830743][ T9094] try_charge+0xf76/0x14d0 [ 661.835163][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.841416][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 661.847154][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 661.852798][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 661.858574][ T9094] ? cache_grow_begin+0x122/0xd00 [ 661.863584][ T9094] ? find_held_lock+0x35/0x130 [ 661.868357][ T9094] ? cache_grow_begin+0x122/0xd00 [ 661.874235][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 661.880300][ T9094] ? lock_downgrade+0x920/0x920 [ 661.885151][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 661.890348][ T9094] ? __kasan_check_read+0x11/0x20 [ 661.895385][ T9094] cache_grow_begin+0x61a/0xd00 [ 661.900237][ T9094] ? write_comp_data+0x61/0x70 [ 661.905007][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 661.910980][ T9094] fallback_alloc+0x1f8/0x2d0 [ 661.915659][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 661.920847][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 661.925973][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 661.930829][ T9094] ? lock_downgrade+0x920/0x920 [ 661.935681][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 661.940641][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 661.945855][ T9094] ext4_alloc_inode+0x1f/0x640 [ 661.950636][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 661.955833][ T9094] alloc_inode+0x68/0x1e0 [ 661.960296][ T9094] iget_locked+0x1a6/0x4b0 [ 661.964739][ T9094] __ext4_iget+0x265/0x3e20 [ 661.969386][ T9094] ? ext4_get_projid+0x190/0x190 [ 661.974343][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 661.979913][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 661.985894][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 661.991018][ T9094] ext4_lookup+0x3b1/0x7a0 [ 661.995437][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 662.000829][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 662.005876][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 662.010912][ T9094] __lookup_slow+0x279/0x500 [ 662.015518][ T9094] ? vfs_unlink+0x620/0x620 [ 662.020051][ T9094] lookup_slow+0x58/0x80 [ 662.024310][ T9094] path_mountpoint+0x5d2/0x1e50 [ 662.029183][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 662.034923][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 662.040933][ T9094] ? path_openat+0x4710/0x4710 [ 662.045717][ T9094] filename_mountpoint+0x18e/0x390 [ 662.050828][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 662.056535][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 662.062699][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 662.068954][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 662.074022][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 662.079741][ T9094] ? __check_object_size+0x3d/0x437 [ 662.084951][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 662.090074][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 662.096319][ T9094] ? getname_flags+0x277/0x5b0 [ 662.101089][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 662.106369][ T9094] ksys_umount+0x164/0xef0 [ 662.110799][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 662.117036][ T9094] ? __detach_mounts+0x290/0x290 [ 662.122116][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 662.127595][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 662.133065][ T9094] ? do_syscall_64+0x26/0x790 [ 662.137857][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.143931][ T9094] ? do_syscall_64+0x26/0x790 [ 662.148627][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 662.153979][ T9094] __x64_sys_umount+0x54/0x80 [ 662.158658][ T9094] do_syscall_64+0xfa/0x790 [ 662.163316][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.169291][ T9094] RIP: 0033:0x45d0a7 [ 662.173192][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 662.192835][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 662.201246][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 662.209220][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 662.217210][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 662.225183][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 662.233147][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 662.243678][ T9094] memory: usage 35928kB, limit 0kB, failcnt 62 [ 662.250090][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 662.257334][ T9094] Memory cgroup stats for /syz3: [ 662.257450][ T9094] anon 29175808 [ 662.257450][ T9094] file 45056 [ 662.257450][ T9094] kernel_stack 524288 [ 662.257450][ T9094] slab 5087232 [ 662.257450][ T9094] sock 0 [ 662.257450][ T9094] shmem 0 [ 662.257450][ T9094] file_mapped 0 [ 662.257450][ T9094] file_dirty 0 [ 662.257450][ T9094] file_writeback 0 [ 662.257450][ T9094] anon_thp 27262976 [ 662.257450][ T9094] inactive_anon 0 [ 662.257450][ T9094] active_anon 29179904 [ 662.257450][ T9094] inactive_file 0 [ 662.257450][ T9094] active_file 61440 [ 662.257450][ T9094] unevictable 0 [ 662.257450][ T9094] slab_reclaimable 1216512 [ 662.257450][ T9094] slab_unreclaimable 3870720 [ 662.257450][ T9094] pgfault 35574 [ 662.257450][ T9094] pgmajfault 0 [ 662.257450][ T9094] workingset_refault 0 [ 662.257450][ T9094] workingset_activate 0 [ 662.257450][ T9094] workingset_nodereclaim 0 [ 662.257450][ T9094] pgrefill 90 [ 662.257450][ T9094] pgscan 95 [ 662.257450][ T9094] pgsteal 89 [ 662.257450][ T9094] pgactivate 0 [ 662.358137][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16090,uid=0 [ 662.374379][ T9094] Memory cgroup out of memory: Killed process 16090 (syz-executor.3) total-vm:72584kB, anon-rss:2208kB, file-rss:35864kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 662.394487][ T1102] oom_reaper: reaped process 16090 (syz-executor.3), now anon-rss:0kB, file-rss:34904kB, shmem-rss:0kB [ 662.408772][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 662.421340][ T9094] CPU: 0 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 662.429721][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.439782][ T9094] Call Trace: [ 662.443236][ T9094] dump_stack+0x197/0x210 [ 662.447591][ T9094] dump_header+0x10b/0x82d [ 662.452121][ T9094] ? oom_kill_process+0x94/0x450 [ 662.457090][ T9094] oom_kill_process.cold+0x10/0x15 [ 662.462645][ T9094] out_of_memory+0x334/0x13c0 [ 662.467378][ T9094] ? lock_downgrade+0x920/0x920 [ 662.473727][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 662.479683][ T9094] ? oom_killer_disable+0x280/0x280 [ 662.484922][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 662.490526][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 662.496516][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 662.501744][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 662.506633][ T9094] try_charge+0xf76/0x14d0 [ 662.511273][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 662.517539][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 662.523398][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 662.528968][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 662.534798][ T9094] ? cache_grow_begin+0x122/0xd00 [ 662.539853][ T9094] ? find_held_lock+0x35/0x130 [ 662.544721][ T9094] ? cache_grow_begin+0x122/0xd00 [ 662.549818][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 662.555361][ T9094] ? lock_downgrade+0x920/0x920 [ 662.560309][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 662.565515][ T9094] ? __kasan_check_read+0x11/0x20 [ 662.570651][ T9094] cache_grow_begin+0x61a/0xd00 [ 662.575503][ T9094] ? write_comp_data+0x61/0x70 [ 662.580264][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 662.585590][ T9094] fallback_alloc+0x1f8/0x2d0 [ 662.590479][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 662.595688][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 662.600813][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 662.606418][ T9094] ? lock_downgrade+0x920/0x920 [ 662.611631][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 662.616800][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 662.622885][ T9094] ext4_alloc_inode+0x1f/0x640 [ 662.627678][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 662.632879][ T9094] alloc_inode+0x68/0x1e0 [ 662.637298][ T9094] iget_locked+0x1a6/0x4b0 [ 662.641712][ T9094] __ext4_iget+0x265/0x3e20 [ 662.646205][ T9094] ? ext4_get_projid+0x190/0x190 [ 662.651135][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 662.657551][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 662.663557][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 662.668669][ T9094] ext4_lookup+0x3b1/0x7a0 [ 662.673075][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 662.678360][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 662.683380][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 662.688392][ T9094] __lookup_slow+0x279/0x500 [ 662.692961][ T9094] ? vfs_unlink+0x620/0x620 [ 662.697496][ T9094] lookup_slow+0x58/0x80 [ 662.701834][ T9094] path_mountpoint+0x5d2/0x1e50 [ 662.706676][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 662.712386][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 662.718382][ T9094] ? path_openat+0x4710/0x4710 [ 662.723155][ T9094] filename_mountpoint+0x18e/0x390 [ 662.728259][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 662.733970][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 662.741808][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 662.748035][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 662.753042][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 662.758758][ T9094] ? __check_object_size+0x3d/0x437 [ 662.763965][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 662.769066][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 662.775296][ T9094] ? getname_flags+0x277/0x5b0 [ 662.780081][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 662.785370][ T9094] ksys_umount+0x164/0xef0 [ 662.789779][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 662.796045][ T9094] ? __detach_mounts+0x290/0x290 [ 662.800989][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 662.806545][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 662.811985][ T9094] ? do_syscall_64+0x26/0x790 [ 662.816662][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.822719][ T9094] ? do_syscall_64+0x26/0x790 [ 662.827400][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 662.832695][ T9094] __x64_sys_umount+0x54/0x80 [ 662.837381][ T9094] do_syscall_64+0xfa/0x790 [ 662.841882][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.847778][ T9094] RIP: 0033:0x45d0a7 [ 662.851667][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 662.871257][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 662.880459][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 662.888567][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 662.897094][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 662.905164][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 662.913148][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 662.926787][ T9094] memory: usage 33604kB, limit 0kB, failcnt 68 [ 662.933918][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 662.941212][ T9094] Memory cgroup stats for /syz3: [ 662.941315][ T9094] anon 26951680 [ 662.941315][ T9094] file 45056 [ 662.941315][ T9094] kernel_stack 458752 [ 662.941315][ T9094] slab 5087232 [ 662.941315][ T9094] sock 0 [ 662.941315][ T9094] shmem 0 [ 662.941315][ T9094] file_mapped 0 [ 662.941315][ T9094] file_dirty 0 [ 662.941315][ T9094] file_writeback 0 [ 662.941315][ T9094] anon_thp 25165824 [ 662.941315][ T9094] inactive_anon 0 [ 662.941315][ T9094] active_anon 26955776 [ 662.941315][ T9094] inactive_file 0 [ 662.941315][ T9094] active_file 61440 [ 662.941315][ T9094] unevictable 0 [ 662.941315][ T9094] slab_reclaimable 1216512 [ 662.941315][ T9094] slab_unreclaimable 3870720 [ 662.941315][ T9094] pgfault 35574 [ 662.941315][ T9094] pgmajfault 0 [ 662.941315][ T9094] workingset_refault 0 [ 662.941315][ T9094] workingset_activate 0 [ 662.941315][ T9094] workingset_nodereclaim 0 [ 662.941315][ T9094] pgrefill 90 [ 662.941315][ T9094] pgscan 95 [ 662.941315][ T9094] pgsteal 89 [ 662.941315][ T9094] pgactivate 0 [ 663.038202][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14476,uid=0 [ 663.054269][ T9094] Memory cgroup out of memory: Killed process 14476 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 663.092918][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 663.105814][ T9094] CPU: 0 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 663.114059][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.124114][ T9094] Call Trace: [ 663.127443][ T9094] dump_stack+0x197/0x210 [ 663.131779][ T9094] dump_header+0x10b/0x82d [ 663.136195][ T9094] ? oom_kill_process+0x94/0x450 [ 663.141136][ T9094] oom_kill_process.cold+0x10/0x15 [ 663.146294][ T9094] out_of_memory+0x334/0x13c0 [ 663.150972][ T9094] ? lock_downgrade+0x920/0x920 [ 663.157388][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 663.164237][ T9094] ? oom_killer_disable+0x280/0x280 [ 663.169459][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 663.175003][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 663.180641][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 663.185845][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 663.190707][ T9094] try_charge+0xf76/0x14d0 [ 663.195132][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 663.201388][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 663.207116][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 663.212674][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 663.218425][ T9094] ? cache_grow_begin+0x122/0xd00 [ 663.223449][ T9094] ? find_held_lock+0x35/0x130 [ 663.228214][ T9094] ? cache_grow_begin+0x122/0xd00 [ 663.233246][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 663.238797][ T9094] ? lock_downgrade+0x920/0x920 [ 663.243653][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 663.248851][ T9094] ? __kasan_check_read+0x11/0x20 [ 663.253921][ T9094] cache_grow_begin+0x61a/0xd00 [ 663.258884][ T9094] ? write_comp_data+0x61/0x70 [ 663.263646][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 663.268933][ T9094] fallback_alloc+0x1f8/0x2d0 [ 663.273615][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 663.278808][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 663.283926][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 663.288794][ T9094] ? lock_downgrade+0x920/0x920 [ 663.293651][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 663.298606][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 663.303808][ T9094] ext4_alloc_inode+0x1f/0x640 [ 663.308582][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 663.313780][ T9094] alloc_inode+0x68/0x1e0 [ 663.318127][ T9094] iget_locked+0x1a6/0x4b0 [ 663.322589][ T9094] __ext4_iget+0x265/0x3e20 [ 663.327119][ T9094] ? ext4_get_projid+0x190/0x190 [ 663.332079][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 663.337637][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 663.343624][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 663.348748][ T9094] ext4_lookup+0x3b1/0x7a0 [ 663.353170][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 663.358457][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 663.363492][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 663.368527][ T9094] __lookup_slow+0x279/0x500 [ 663.373116][ T9094] ? vfs_unlink+0x620/0x620 [ 663.377673][ T9094] lookup_slow+0x58/0x80 [ 663.381919][ T9094] path_mountpoint+0x5d2/0x1e50 [ 663.386771][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 663.392489][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 663.398486][ T9094] ? path_openat+0x4710/0x4710 [ 663.403269][ T9094] filename_mountpoint+0x18e/0x390 [ 663.408386][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 663.414317][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 663.420511][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 663.426774][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 663.431817][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 663.438608][ T9094] ? __check_object_size+0x3d/0x437 [ 663.443950][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 663.449267][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 663.455528][ T9094] ? getname_flags+0x277/0x5b0 [ 663.460304][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 663.465596][ T9094] ksys_umount+0x164/0xef0 [ 663.470884][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 663.477134][ T9094] ? __detach_mounts+0x290/0x290 [ 663.482089][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 663.487560][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 663.493017][ T9094] ? do_syscall_64+0x26/0x790 [ 663.497702][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.503768][ T9094] ? do_syscall_64+0x26/0x790 [ 663.508451][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 663.513738][ T9094] __x64_sys_umount+0x54/0x80 [ 663.518417][ T9094] do_syscall_64+0xfa/0x790 [ 663.522924][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.528819][ T9094] RIP: 0033:0x45d0a7 [ 663.532835][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 663.553142][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 663.561569][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 663.569543][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 663.577525][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 663.585497][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 663.593468][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 663.605848][ T9094] memory: usage 31280kB, limit 0kB, failcnt 74 [ 663.612031][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 663.619634][ T9094] Memory cgroup stats for /syz3: [ 663.619743][ T9094] anon 24739840 [ 663.619743][ T9094] file 45056 [ 663.619743][ T9094] kernel_stack 458752 [ 663.619743][ T9094] slab 5087232 [ 663.619743][ T9094] sock 0 [ 663.619743][ T9094] shmem 0 [ 663.619743][ T9094] file_mapped 0 [ 663.619743][ T9094] file_dirty 0 [ 663.619743][ T9094] file_writeback 0 [ 663.619743][ T9094] anon_thp 23068672 [ 663.619743][ T9094] inactive_anon 0 [ 663.619743][ T9094] active_anon 24743936 [ 663.619743][ T9094] inactive_file 0 [ 663.619743][ T9094] active_file 61440 [ 663.619743][ T9094] unevictable 0 [ 663.619743][ T9094] slab_reclaimable 1216512 [ 663.619743][ T9094] slab_unreclaimable 3870720 [ 663.619743][ T9094] pgfault 35574 [ 663.619743][ T9094] pgmajfault 0 [ 663.619743][ T9094] workingset_refault 0 [ 663.619743][ T9094] workingset_activate 0 [ 663.619743][ T9094] workingset_nodereclaim 0 [ 663.619743][ T9094] pgrefill 90 [ 663.619743][ T9094] pgscan 95 [ 663.619743][ T9094] pgsteal 89 [ 663.619743][ T9094] pgactivate 0 [ 663.716441][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14425,uid=0 [ 663.732388][ T9094] Memory cgroup out of memory: Killed process 14425 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 663.770195][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 663.782739][ T9094] CPU: 0 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 663.791235][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.801290][ T9094] Call Trace: [ 663.804592][ T9094] dump_stack+0x197/0x210 [ 663.808950][ T9094] dump_header+0x10b/0x82d [ 663.813371][ T9094] ? oom_kill_process+0x94/0x450 [ 663.818323][ T9094] oom_kill_process.cold+0x10/0x15 [ 663.823442][ T9094] out_of_memory+0x334/0x13c0 [ 663.828206][ T9094] ? lock_downgrade+0x920/0x920 [ 663.833056][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 663.839037][ T9094] ? oom_killer_disable+0x280/0x280 [ 663.844249][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 663.849799][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 663.858391][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 663.863596][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 663.868448][ T9094] try_charge+0xf76/0x14d0 [ 663.872978][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 663.879285][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 663.885028][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 663.890587][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 663.896319][ T9094] ? cache_grow_begin+0x122/0xd00 [ 663.901527][ T9094] ? find_held_lock+0x35/0x130 [ 663.906491][ T9094] ? cache_grow_begin+0x122/0xd00 [ 663.911536][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 663.917100][ T9094] ? lock_downgrade+0x920/0x920 [ 663.921998][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 663.927212][ T9094] ? __kasan_check_read+0x11/0x20 [ 663.932245][ T9094] cache_grow_begin+0x61a/0xd00 [ 663.937112][ T9094] ? write_comp_data+0x61/0x70 [ 663.941891][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 663.947198][ T9094] fallback_alloc+0x1f8/0x2d0 [ 663.952017][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 663.957240][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 663.962366][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 663.967242][ T9094] ? lock_downgrade+0x920/0x920 [ 663.972100][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 663.977051][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 663.982284][ T9094] ext4_alloc_inode+0x1f/0x640 [ 663.987770][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 663.993109][ T9094] alloc_inode+0x68/0x1e0 [ 663.997464][ T9094] iget_locked+0x1a6/0x4b0 [ 664.001912][ T9094] __ext4_iget+0x265/0x3e20 [ 664.006583][ T9094] ? ext4_get_projid+0x190/0x190 [ 664.011546][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 664.017098][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 664.023342][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 664.028589][ T9094] ext4_lookup+0x3b1/0x7a0 [ 664.033015][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 664.038343][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 664.043406][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 664.048445][ T9094] __lookup_slow+0x279/0x500 [ 664.053058][ T9094] ? vfs_unlink+0x620/0x620 [ 664.057630][ T9094] lookup_slow+0x58/0x80 [ 664.061880][ T9094] path_mountpoint+0x5d2/0x1e50 [ 664.066748][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 664.072478][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 664.078479][ T9094] ? path_openat+0x4710/0x4710 [ 664.083374][ T9094] filename_mountpoint+0x18e/0x390 [ 664.088683][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 664.094522][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 664.100699][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 664.106948][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 664.112008][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 664.117741][ T9094] ? __check_object_size+0x3d/0x437 [ 664.122971][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 664.128101][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.134488][ T9094] ? getname_flags+0x277/0x5b0 [ 664.139369][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 664.144683][ T9094] ksys_umount+0x164/0xef0 [ 664.149223][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.155490][ T9094] ? __detach_mounts+0x290/0x290 [ 664.160439][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 664.165910][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 664.171462][ T9094] ? do_syscall_64+0x26/0x790 [ 664.176228][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.182296][ T9094] ? do_syscall_64+0x26/0x790 [ 664.186974][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 664.192289][ T9094] __x64_sys_umount+0x54/0x80 [ 664.196970][ T9094] do_syscall_64+0xfa/0x790 [ 664.201571][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.207489][ T9094] RIP: 0033:0x45d0a7 [ 664.211386][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.230994][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 664.239674][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 664.247650][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 664.255635][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 664.263611][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 664.271581][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 664.283554][ T9094] memory: usage 28956kB, limit 0kB, failcnt 80 [ 664.289907][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 664.298655][ T9094] Memory cgroup stats for /syz3: [ 664.298835][ T9094] anon 22523904 [ 664.298835][ T9094] file 45056 [ 664.298835][ T9094] kernel_stack 393216 [ 664.298835][ T9094] slab 5087232 [ 664.298835][ T9094] sock 0 [ 664.298835][ T9094] shmem 0 [ 664.298835][ T9094] file_mapped 0 [ 664.298835][ T9094] file_dirty 0 [ 664.298835][ T9094] file_writeback 0 [ 664.298835][ T9094] anon_thp 20971520 [ 664.298835][ T9094] inactive_anon 0 [ 664.298835][ T9094] active_anon 22528000 [ 664.298835][ T9094] inactive_file 0 [ 664.298835][ T9094] active_file 61440 [ 664.298835][ T9094] unevictable 0 [ 664.298835][ T9094] slab_reclaimable 1216512 [ 664.298835][ T9094] slab_unreclaimable 3870720 [ 664.298835][ T9094] pgfault 35574 [ 664.298835][ T9094] pgmajfault 0 [ 664.298835][ T9094] workingset_refault 0 [ 664.298835][ T9094] workingset_activate 0 [ 664.298835][ T9094] workingset_nodereclaim 0 [ 664.298835][ T9094] pgrefill 90 [ 664.298835][ T9094] pgscan 95 [ 664.298835][ T9094] pgsteal 89 [ 664.298835][ T9094] pgactivate 0 [ 664.397815][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14368,uid=0 [ 664.414981][ T9094] Memory cgroup out of memory: Killed process 14368 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 664.452728][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 664.465410][ T9094] CPU: 0 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 664.473647][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.483973][ T9094] Call Trace: [ 664.487271][ T9094] dump_stack+0x197/0x210 [ 664.491646][ T9094] dump_header+0x10b/0x82d [ 664.496080][ T9094] ? oom_kill_process+0x94/0x450 [ 664.501190][ T9094] oom_kill_process.cold+0x10/0x15 [ 664.506327][ T9094] out_of_memory+0x334/0x13c0 [ 664.511013][ T9094] ? lock_downgrade+0x920/0x920 [ 664.515879][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 664.521691][ T9094] ? oom_killer_disable+0x280/0x280 [ 664.526914][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 664.532464][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 664.538108][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 664.543306][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 664.548159][ T9094] try_charge+0xf76/0x14d0 [ 664.552663][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.558922][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 664.565536][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 664.565552][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 664.565571][ T9094] ? cache_grow_begin+0x122/0xd00 [ 664.565587][ T9094] ? find_held_lock+0x35/0x130 [ 664.565602][ T9094] ? cache_grow_begin+0x122/0xd00 [ 664.565622][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 664.565637][ T9094] ? lock_downgrade+0x920/0x920 [ 664.576875][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 664.576890][ T9094] ? __kasan_check_read+0x11/0x20 [ 664.576909][ T9094] cache_grow_begin+0x61a/0xd00 [ 664.576924][ T9094] ? write_comp_data+0x61/0x70 [ 664.576937][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 664.576956][ T9094] fallback_alloc+0x1f8/0x2d0 [ 664.576979][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 664.576994][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 664.577013][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 664.577025][ T9094] ? lock_downgrade+0x920/0x920 [ 664.577042][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 664.586792][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 664.597316][ T9094] ext4_alloc_inode+0x1f/0x640 [ 664.597330][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 664.597345][ T9094] alloc_inode+0x68/0x1e0 [ 664.597361][ T9094] iget_locked+0x1a6/0x4b0 [ 664.597380][ T9094] __ext4_iget+0x265/0x3e20 [ 664.597413][ T9094] ? ext4_get_projid+0x190/0x190 [ 664.612429][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 664.622003][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 664.637102][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 664.637129][ T9094] ext4_lookup+0x3b1/0x7a0 [ 664.637147][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 664.637167][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 664.637188][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 664.647374][ T9094] __lookup_slow+0x279/0x500 [ 664.647392][ T9094] ? vfs_unlink+0x620/0x620 [ 664.647438][ T9094] lookup_slow+0x58/0x80 [ 664.647456][ T9094] path_mountpoint+0x5d2/0x1e50 [ 664.647476][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 664.647489][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 664.647510][ T9094] ? path_openat+0x4710/0x4710 [ 664.647537][ T9094] filename_mountpoint+0x18e/0x390 [ 664.662458][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 664.672371][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 664.672398][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 664.786617][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 664.791639][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 664.797363][ T9094] ? __check_object_size+0x3d/0x437 [ 664.802581][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 664.807698][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.813935][ T9094] ? getname_flags+0x277/0x5b0 [ 664.818706][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 664.824001][ T9094] ksys_umount+0x164/0xef0 [ 664.828430][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 664.834686][ T9094] ? __detach_mounts+0x290/0x290 [ 664.839627][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 664.845095][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 664.850641][ T9094] ? do_syscall_64+0x26/0x790 [ 664.855316][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.861384][ T9094] ? do_syscall_64+0x26/0x790 [ 664.866150][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 664.871443][ T9094] __x64_sys_umount+0x54/0x80 [ 664.876133][ T9094] do_syscall_64+0xfa/0x790 [ 664.880645][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.886542][ T9094] RIP: 0033:0x45d0a7 [ 664.890434][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.910209][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 664.918634][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 664.926604][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 664.934573][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 664.942543][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 664.950516][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 664.962524][ T9094] memory: usage 26620kB, limit 0kB, failcnt 86 [ 664.968777][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 664.976077][ T9094] Memory cgroup stats for /syz3: [ 664.976195][ T9094] anon 20295680 [ 664.976195][ T9094] file 45056 [ 664.976195][ T9094] kernel_stack 393216 [ 664.976195][ T9094] slab 5087232 [ 664.976195][ T9094] sock 0 [ 664.976195][ T9094] shmem 0 [ 664.976195][ T9094] file_mapped 0 [ 664.976195][ T9094] file_dirty 0 [ 664.976195][ T9094] file_writeback 0 [ 664.976195][ T9094] anon_thp 18874368 [ 664.976195][ T9094] inactive_anon 0 [ 664.976195][ T9094] active_anon 20299776 [ 664.976195][ T9094] inactive_file 0 [ 664.976195][ T9094] active_file 61440 [ 664.976195][ T9094] unevictable 0 [ 664.976195][ T9094] slab_reclaimable 1216512 [ 664.976195][ T9094] slab_unreclaimable 3870720 [ 664.976195][ T9094] pgfault 35574 [ 664.976195][ T9094] pgmajfault 0 [ 664.976195][ T9094] workingset_refault 0 [ 664.976195][ T9094] workingset_activate 0 [ 664.976195][ T9094] workingset_nodereclaim 0 [ 664.976195][ T9094] pgrefill 90 [ 664.976195][ T9094] pgscan 95 [ 664.976195][ T9094] pgsteal 89 [ 664.976195][ T9094] pgactivate 0 [ 665.072653][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18551,uid=0 [ 665.097633][ T9094] Memory cgroup out of memory: Killed process 18551 (syz-executor.3) total-vm:72848kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 665.126534][ T1102] oom_reaper: reaped process 18551 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 665.149912][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 665.167966][ T9094] CPU: 0 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 665.176268][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.186780][ T9094] Call Trace: [ 665.190109][ T9094] dump_stack+0x197/0x210 [ 665.194556][ T9094] dump_header+0x10b/0x82d [ 665.198994][ T9094] ? oom_kill_process+0x94/0x450 [ 665.204203][ T9094] oom_kill_process.cold+0x10/0x15 [ 665.210784][ T9094] out_of_memory+0x334/0x13c0 [ 665.216426][ T9094] ? lock_downgrade+0x920/0x920 [ 665.221654][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 665.227551][ T9094] ? oom_killer_disable+0x280/0x280 [ 665.232937][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 665.238825][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 665.244505][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 665.249900][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 665.254776][ T9094] try_charge+0xf76/0x14d0 [ 665.259409][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.269594][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 665.275459][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 665.281096][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 665.287788][ T9094] ? cache_grow_begin+0x122/0xd00 [ 665.292902][ T9094] ? find_held_lock+0x35/0x130 [ 665.297671][ T9094] ? cache_grow_begin+0x122/0xd00 [ 665.303841][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 665.309477][ T9094] ? lock_downgrade+0x920/0x920 [ 665.314429][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 665.320009][ T9094] ? __kasan_check_read+0x11/0x20 [ 665.325073][ T9094] cache_grow_begin+0x61a/0xd00 [ 665.330488][ T9094] ? write_comp_data+0x61/0x70 [ 665.335627][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 665.340935][ T9094] fallback_alloc+0x1f8/0x2d0 [ 665.345633][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 665.351193][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 665.356673][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 665.361746][ T9094] ? lock_downgrade+0x920/0x920 [ 665.366822][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 665.372220][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 665.377995][ T9094] ext4_alloc_inode+0x1f/0x640 [ 665.383402][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 665.388793][ T9094] alloc_inode+0x68/0x1e0 [ 665.393145][ T9094] iget_locked+0x1a6/0x4b0 [ 665.397569][ T9094] __ext4_iget+0x265/0x3e20 [ 665.403331][ T9094] ? ext4_get_projid+0x190/0x190 [ 665.408537][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 665.415564][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 665.423033][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 665.429823][ T9094] ext4_lookup+0x3b1/0x7a0 [ 665.434931][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 665.440308][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 665.445771][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 665.450994][ T9094] __lookup_slow+0x279/0x500 [ 665.455781][ T9094] ? vfs_unlink+0x620/0x620 [ 665.460418][ T9094] lookup_slow+0x58/0x80 [ 665.465033][ T9094] path_mountpoint+0x5d2/0x1e50 [ 665.469984][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 665.475736][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 665.482709][ T9094] ? path_openat+0x4710/0x4710 [ 665.487954][ T9094] filename_mountpoint+0x18e/0x390 [ 665.493256][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 665.499839][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 665.506321][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 665.512587][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 665.517622][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 665.523554][ T9094] ? __check_object_size+0x3d/0x437 [ 665.528946][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 665.534065][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.540407][ T9094] ? getname_flags+0x277/0x5b0 [ 665.545284][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 665.550580][ T9094] ksys_umount+0x164/0xef0 [ 665.555629][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.561990][ T9094] ? __detach_mounts+0x290/0x290 [ 665.567180][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 665.572681][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 665.578166][ T9094] ? do_syscall_64+0x26/0x790 [ 665.582860][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.589188][ T9094] ? do_syscall_64+0x26/0x790 [ 665.593866][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 665.599155][ T9094] __x64_sys_umount+0x54/0x80 [ 665.603827][ T9094] do_syscall_64+0xfa/0x790 [ 665.608345][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.614244][ T9094] RIP: 0033:0x45d0a7 [ 665.618324][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.638450][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 665.646999][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 665.654976][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 665.663048][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 665.671060][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 665.679144][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 665.688369][ T9094] memory: usage 23892kB, limit 0kB, failcnt 92 [ 665.699822][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 665.708067][ T9094] Memory cgroup stats for /syz3: [ 665.708139][ T9094] anon 18096128 [ 665.708139][ T9094] file 45056 [ 665.708139][ T9094] kernel_stack 393216 [ 665.708139][ T9094] slab 4616192 [ 665.708139][ T9094] sock 0 [ 665.708139][ T9094] shmem 0 [ 665.708139][ T9094] file_mapped 0 [ 665.708139][ T9094] file_dirty 0 [ 665.708139][ T9094] file_writeback 0 [ 665.708139][ T9094] anon_thp 16777216 [ 665.708139][ T9094] inactive_anon 0 [ 665.708139][ T9094] active_anon 18100224 [ 665.708139][ T9094] inactive_file 0 [ 665.708139][ T9094] active_file 61440 [ 665.708139][ T9094] unevictable 0 [ 665.708139][ T9094] slab_reclaimable 1216512 [ 665.708139][ T9094] slab_unreclaimable 3399680 [ 665.708139][ T9094] pgfault 35574 [ 665.708139][ T9094] pgmajfault 0 [ 665.708139][ T9094] workingset_refault 0 [ 665.708139][ T9094] workingset_activate 0 [ 665.708139][ T9094] workingset_nodereclaim 0 [ 665.708139][ T9094] pgrefill 90 [ 665.708139][ T9094] pgscan 95 [ 665.708139][ T9094] pgsteal 89 [ 665.708139][ T9094] pgactivate 0 [ 665.807128][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18667,uid=0 [ 665.823722][ T9094] Memory cgroup out of memory: Killed process 18667 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 665.844025][ T1102] oom_reaper: reaped process 18667 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 665.845777][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 665.868336][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 665.877118][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.887552][ T9094] Call Trace: [ 665.890880][ T9094] dump_stack+0x197/0x210 [ 665.895216][ T9094] dump_header+0x10b/0x82d [ 665.899638][ T9094] ? oom_kill_process+0x94/0x450 [ 665.904585][ T9094] oom_kill_process.cold+0x10/0x15 [ 665.909701][ T9094] out_of_memory+0x334/0x13c0 [ 665.914380][ T9094] ? lock_downgrade+0x920/0x920 [ 665.919242][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 665.925053][ T9094] ? oom_killer_disable+0x280/0x280 [ 665.930262][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 665.935895][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 665.941532][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 665.946773][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 665.951626][ T9094] try_charge+0xf76/0x14d0 [ 665.956057][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 665.962304][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 665.968033][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 665.974562][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 665.980292][ T9094] ? cache_grow_begin+0x122/0xd00 [ 665.985320][ T9094] ? find_held_lock+0x35/0x130 [ 665.990088][ T9094] ? cache_grow_begin+0x122/0xd00 [ 665.995129][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 666.000682][ T9094] ? lock_downgrade+0x920/0x920 [ 666.005545][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 666.010873][ T9094] ? __kasan_check_read+0x11/0x20 [ 666.015905][ T9094] cache_grow_begin+0x61a/0xd00 [ 666.020757][ T9094] ? write_comp_data+0x61/0x70 [ 666.025525][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 666.030814][ T9094] fallback_alloc+0x1f8/0x2d0 [ 666.035506][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 666.040807][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 666.045907][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 666.050734][ T9094] ? lock_downgrade+0x920/0x920 [ 666.055784][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 666.060861][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 666.066061][ T9094] ext4_alloc_inode+0x1f/0x640 [ 666.070816][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 666.076007][ T9094] alloc_inode+0x68/0x1e0 [ 666.080321][ T9094] iget_locked+0x1a6/0x4b0 [ 666.084809][ T9094] __ext4_iget+0x265/0x3e20 [ 666.089299][ T9094] ? ext4_get_projid+0x190/0x190 [ 666.094225][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 666.099763][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 666.105748][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 666.110862][ T9094] ext4_lookup+0x3b1/0x7a0 [ 666.115497][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 666.121155][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 666.126367][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 666.131425][ T9094] __lookup_slow+0x279/0x500 [ 666.136018][ T9094] ? vfs_unlink+0x620/0x620 [ 666.140523][ T9094] lookup_slow+0x58/0x80 [ 666.144749][ T9094] path_mountpoint+0x5d2/0x1e50 [ 666.149608][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 666.155327][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 666.161290][ T9094] ? path_openat+0x4710/0x4710 [ 666.166053][ T9094] filename_mountpoint+0x18e/0x390 [ 666.171163][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 666.176883][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 666.183160][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 666.189666][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 666.194700][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 666.201224][ T9094] ? __check_object_size+0x3d/0x437 [ 666.206425][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 666.211606][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.217856][ T9094] ? getname_flags+0x277/0x5b0 [ 666.222673][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 666.227970][ T9094] ksys_umount+0x164/0xef0 [ 666.232485][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.238743][ T9094] ? __detach_mounts+0x290/0x290 [ 666.243763][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 666.249442][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 666.254885][ T9094] ? do_syscall_64+0x26/0x790 [ 666.259555][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.265723][ T9094] ? do_syscall_64+0x26/0x790 [ 666.270422][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 666.275702][ T9094] __x64_sys_umount+0x54/0x80 [ 666.280382][ T9094] do_syscall_64+0xfa/0x790 [ 666.284883][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.290780][ T9094] RIP: 0033:0x45d0a7 [ 666.294664][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.314394][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 666.323233][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 666.331198][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 666.339160][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 666.347467][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 666.355418][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 666.370320][ T9094] memory: usage 21540kB, limit 0kB, failcnt 98 [ 666.377670][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 666.384684][ T9094] Memory cgroup stats for /syz3: [ 666.384841][ T9094] anon 15859712 [ 666.384841][ T9094] file 45056 [ 666.384841][ T9094] kernel_stack 327680 [ 666.384841][ T9094] slab 4616192 [ 666.384841][ T9094] sock 0 [ 666.384841][ T9094] shmem 0 [ 666.384841][ T9094] file_mapped 0 [ 666.384841][ T9094] file_dirty 0 [ 666.384841][ T9094] file_writeback 0 [ 666.384841][ T9094] anon_thp 14680064 [ 666.384841][ T9094] inactive_anon 0 [ 666.384841][ T9094] active_anon 15863808 [ 666.384841][ T9094] inactive_file 0 [ 666.384841][ T9094] active_file 61440 [ 666.384841][ T9094] unevictable 0 [ 666.384841][ T9094] slab_reclaimable 1216512 [ 666.384841][ T9094] slab_unreclaimable 3399680 [ 666.384841][ T9094] pgfault 35574 [ 666.384841][ T9094] pgmajfault 0 [ 666.384841][ T9094] workingset_refault 0 [ 666.384841][ T9094] workingset_activate 0 [ 666.384841][ T9094] workingset_nodereclaim 0 [ 666.384841][ T9094] pgrefill 90 [ 666.384841][ T9094] pgscan 95 [ 666.384841][ T9094] pgsteal 89 [ 666.384841][ T9094] pgactivate 0 [ 666.481191][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18634,uid=0 [ 666.498984][ T9094] Memory cgroup out of memory: Killed process 18634 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 666.520398][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 666.525678][ T1102] oom_reaper: reaped process 18634 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 666.532917][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 666.544151][T11936] device hsr_slave_0 left promiscuous mode [ 666.552150][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.552156][ T9094] Call Trace: [ 666.552181][ T9094] dump_stack+0x197/0x210 [ 666.552202][ T9094] dump_header+0x10b/0x82d [ 666.580428][ T9094] ? oom_kill_process+0x94/0x450 [ 666.585383][ T9094] oom_kill_process.cold+0x10/0x15 [ 666.590494][ T9094] out_of_memory+0x334/0x13c0 [ 666.595155][ T9094] ? lock_downgrade+0x920/0x920 [ 666.600599][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 666.606395][ T9094] ? oom_killer_disable+0x280/0x280 [ 666.611587][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 666.617112][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 666.622726][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 666.627905][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 666.632734][ T9094] try_charge+0xf76/0x14d0 [ 666.637147][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.643402][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 666.649132][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 666.654674][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 666.660432][ T9094] ? cache_grow_begin+0x122/0xd00 [ 666.665448][ T9094] ? find_held_lock+0x35/0x130 [ 666.670204][ T9094] ? cache_grow_begin+0x122/0xd00 [ 666.675222][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 666.680850][ T9094] ? lock_downgrade+0x920/0x920 [ 666.685699][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 666.690878][ T9094] ? __kasan_check_read+0x11/0x20 [ 666.695887][ T9094] cache_grow_begin+0x61a/0xd00 [ 666.700719][ T9094] ? write_comp_data+0x61/0x70 [ 666.705487][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 666.710764][ T9094] fallback_alloc+0x1f8/0x2d0 [ 666.715426][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 666.720601][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 666.725705][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 666.730533][ T9094] ? lock_downgrade+0x920/0x920 [ 666.735382][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 666.740388][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 666.746062][ T9094] ext4_alloc_inode+0x1f/0x640 [ 666.750960][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 666.756140][ T9094] alloc_inode+0x68/0x1e0 [ 666.760495][ T9094] iget_locked+0x1a6/0x4b0 [ 666.765000][ T9094] __ext4_iget+0x265/0x3e20 [ 666.769502][ T9094] ? ext4_get_projid+0x190/0x190 [ 666.774427][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 666.779951][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 666.785910][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 666.791007][ T9094] ext4_lookup+0x3b1/0x7a0 [ 666.795423][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 666.800711][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 666.805740][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 666.810852][ T9094] __lookup_slow+0x279/0x500 [ 666.816386][ T9094] ? vfs_unlink+0x620/0x620 [ 666.820885][ T9094] lookup_slow+0x58/0x80 [ 666.825109][ T9094] path_mountpoint+0x5d2/0x1e50 [ 666.830731][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 666.836430][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 666.842827][ T9094] ? path_openat+0x4710/0x4710 [ 666.847828][ T9094] filename_mountpoint+0x18e/0x390 [ 666.852952][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 666.858677][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 666.864834][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 666.871062][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 666.876108][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 666.881818][ T9094] ? __check_object_size+0x3d/0x437 [ 666.887010][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 666.892103][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.898336][ T9094] ? getname_flags+0x277/0x5b0 [ 666.903091][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 666.908394][ T9094] ksys_umount+0x164/0xef0 [ 666.912902][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 666.919148][ T9094] ? __detach_mounts+0x290/0x290 [ 666.924076][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 666.929525][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 666.934966][ T9094] ? do_syscall_64+0x26/0x790 [ 666.939623][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.945687][ T9094] ? do_syscall_64+0x26/0x790 [ 666.950358][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 666.955630][ T9094] __x64_sys_umount+0x54/0x80 [ 666.960284][ T9094] do_syscall_64+0xfa/0x790 [ 666.964767][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.970634][ T9094] RIP: 0033:0x45d0a7 [ 666.974529][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.994246][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 667.002673][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 667.010624][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 667.018587][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 667.026549][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 667.034505][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 667.054439][T11936] device hsr_slave_1 left promiscuous mode [ 667.058045][ T9094] memory: usage 19208kB, limit 0kB, failcnt 104 [ 667.066712][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 667.073549][ T9094] Memory cgroup stats for /syz3: [ 667.073622][ T9094] anon 13627392 [ 667.073622][ T9094] file 45056 [ 667.073622][ T9094] kernel_stack 327680 [ 667.073622][ T9094] slab 4616192 [ 667.073622][ T9094] sock 0 [ 667.073622][ T9094] shmem 0 [ 667.073622][ T9094] file_mapped 0 [ 667.073622][ T9094] file_dirty 0 [ 667.073622][ T9094] file_writeback 0 [ 667.073622][ T9094] anon_thp 12582912 [ 667.073622][ T9094] inactive_anon 0 [ 667.073622][ T9094] active_anon 13631488 [ 667.073622][ T9094] inactive_file 0 [ 667.073622][ T9094] active_file 61440 [ 667.073622][ T9094] unevictable 0 [ 667.073622][ T9094] slab_reclaimable 1216512 [ 667.073622][ T9094] slab_unreclaimable 3399680 [ 667.073622][ T9094] pgfault 35574 [ 667.073622][ T9094] pgmajfault 0 [ 667.073622][ T9094] workingset_refault 0 [ 667.073622][ T9094] workingset_activate 0 [ 667.073622][ T9094] workingset_nodereclaim 0 [ 667.073622][ T9094] pgrefill 90 [ 667.073622][ T9094] pgscan 95 [ 667.073622][ T9094] pgsteal 89 [ 667.073622][ T9094] pgactivate 0 [ 667.173390][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18598,uid=0 [ 667.189676][ T9094] Memory cgroup out of memory: Killed process 18598 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 667.210740][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 667.223862][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 667.223875][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.233727][ T1102] oom_reaper: reaped process 18598 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 667.242162][ T9094] Call Trace: [ 667.242186][ T9094] dump_stack+0x197/0x210 [ 667.242204][ T9094] dump_header+0x10b/0x82d [ 667.242214][ T9094] ? oom_kill_process+0x94/0x450 [ 667.242231][ T9094] oom_kill_process.cold+0x10/0x15 [ 667.265259][ T9094] out_of_memory+0x334/0x13c0 [ 667.265273][ T9094] ? lock_downgrade+0x920/0x920 [ 667.265292][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 667.265306][ T9094] ? oom_killer_disable+0x280/0x280 [ 667.265329][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 667.275721][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 667.275745][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 667.275762][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 667.275778][ T9094] try_charge+0xf76/0x14d0 [ 667.275797][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.285294][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 667.285314][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 667.285331][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 667.296481][ T9094] ? cache_grow_begin+0x122/0xd00 [ 667.296497][ T9094] ? find_held_lock+0x35/0x130 [ 667.296517][ T9094] ? cache_grow_begin+0x122/0xd00 [ 667.322093][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 667.334812][ T9094] ? lock_downgrade+0x920/0x920 [ 667.334832][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 667.334848][ T9094] ? __kasan_check_read+0x11/0x20 [ 667.334866][ T9094] cache_grow_begin+0x61a/0xd00 [ 667.334885][ T9094] ? write_comp_data+0x61/0x70 [ 667.346126][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 667.346147][ T9094] fallback_alloc+0x1f8/0x2d0 [ 667.346169][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 667.346182][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 667.346201][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 667.355951][ T9094] ? lock_downgrade+0x920/0x920 [ 667.355967][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 667.355985][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 667.355998][ T9094] ext4_alloc_inode+0x1f/0x640 [ 667.356015][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 667.366546][ T9094] alloc_inode+0x68/0x1e0 [ 667.366564][ T9094] iget_locked+0x1a6/0x4b0 [ 667.366583][ T9094] __ext4_iget+0x265/0x3e20 [ 667.366611][ T9094] ? ext4_get_projid+0x190/0x190 [ 667.378078][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 667.387943][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 667.387961][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 667.387986][ T9094] ext4_lookup+0x3b1/0x7a0 [ 667.388004][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 667.388019][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 667.388038][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 667.388061][ T9094] __lookup_slow+0x279/0x500 [ 667.398580][ T9094] ? vfs_unlink+0x620/0x620 [ 667.408930][ T9094] lookup_slow+0x58/0x80 [ 667.408950][ T9094] path_mountpoint+0x5d2/0x1e50 [ 667.408970][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 667.408984][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 667.409003][ T9094] ? path_openat+0x4710/0x4710 [ 667.409028][ T9094] filename_mountpoint+0x18e/0x390 [ 667.419024][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 667.428809][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 667.428838][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 667.428853][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 667.428864][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 667.428879][ T9094] ? __check_object_size+0x3d/0x437 [ 667.428900][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 667.428917][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.428938][ T9094] ? getname_flags+0x277/0x5b0 [ 667.438935][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 667.448481][ T9094] ksys_umount+0x164/0xef0 [ 667.448502][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.448518][ T9094] ? __detach_mounts+0x290/0x290 [ 667.448534][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 667.448548][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 667.448559][ T9094] ? do_syscall_64+0x26/0x790 [ 667.448581][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.457687][ T9094] ? do_syscall_64+0x26/0x790 [ 667.468884][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 667.468907][ T9094] __x64_sys_umount+0x54/0x80 [ 667.468926][ T9094] do_syscall_64+0xfa/0x790 [ 667.468947][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.468959][ T9094] RIP: 0033:0x45d0a7 [ 667.468975][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 667.468982][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 667.480930][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 667.490614][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 667.501182][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 667.501197][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 667.510303][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 667.512602][ T9094] memory: usage 16884kB, limit 0kB, failcnt 110 [ 667.537871][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 667.537878][ T9094] Memory cgroup stats for /syz3: [ 667.537994][ T9094] anon 11403264 [ 667.537994][ T9094] file 45056 [ 667.537994][ T9094] kernel_stack 262144 [ 667.537994][ T9094] slab 4616192 [ 667.537994][ T9094] sock 0 [ 667.537994][ T9094] shmem 0 [ 667.537994][ T9094] file_mapped 0 [ 667.537994][ T9094] file_dirty 0 [ 667.537994][ T9094] file_writeback 0 [ 667.537994][ T9094] anon_thp 10485760 [ 667.537994][ T9094] inactive_anon 0 [ 667.537994][ T9094] active_anon 11407360 [ 667.537994][ T9094] inactive_file 0 [ 667.537994][ T9094] active_file 61440 [ 667.537994][ T9094] unevictable 0 [ 667.537994][ T9094] slab_reclaimable 1216512 [ 667.537994][ T9094] slab_unreclaimable 3399680 [ 667.537994][ T9094] pgfault 35574 [ 667.537994][ T9094] pgmajfault 0 [ 667.537994][ T9094] workingset_refault 0 [ 667.537994][ T9094] workingset_activate 0 [ 667.537994][ T9094] workingset_nodereclaim 0 [ 667.537994][ T9094] pgrefill 90 [ 667.537994][ T9094] pgscan 95 [ 667.537994][ T9094] pgsteal 89 [ 667.537994][ T9094] pgactivate 0 [ 667.538014][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18530,uid=0 [ 667.549039][ T9094] Memory cgroup out of memory: Killed process 18530 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 667.603768][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 667.611663][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 667.623168][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.623185][ T9094] Call Trace: [ 667.633563][ T9094] dump_stack+0x197/0x210 [ 667.644684][ T9094] dump_header+0x10b/0x82d [ 667.644698][ T9094] ? oom_kill_process+0x94/0x450 [ 667.644713][ T9094] oom_kill_process.cold+0x10/0x15 [ 667.644728][ T9094] out_of_memory+0x334/0x13c0 [ 667.644741][ T9094] ? lock_downgrade+0x920/0x920 [ 667.644760][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 667.644779][ T9094] ? oom_killer_disable+0x280/0x280 [ 667.654802][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 667.654820][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 667.654847][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 667.654866][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 667.654891][ T9094] try_charge+0xf76/0x14d0 [ 667.665338][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.665358][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 667.665379][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 667.665397][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 667.690019][ T9094] ? cache_grow_begin+0x122/0xd00 [ 667.690040][ T9094] ? find_held_lock+0x35/0x130 [ 667.690054][ T9094] ? cache_grow_begin+0x122/0xd00 [ 667.690077][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 667.690090][ T9094] ? lock_downgrade+0x920/0x920 [ 667.690110][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 667.706670][ T9094] ? __kasan_check_read+0x11/0x20 [ 667.706692][ T9094] cache_grow_begin+0x61a/0xd00 [ 667.706707][ T9094] ? write_comp_data+0x61/0x70 [ 667.706721][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 667.706737][ T9094] fallback_alloc+0x1f8/0x2d0 [ 667.706756][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 667.706779][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 667.723652][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 667.740529][ T9094] ? lock_downgrade+0x920/0x920 [ 667.740551][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 667.740568][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 667.740580][ T9094] ext4_alloc_inode+0x1f/0x640 [ 667.740604][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 667.740627][ T9094] alloc_inode+0x68/0x1e0 [ 667.753843][ T9094] iget_locked+0x1a6/0x4b0 [ 667.849467][ T9094] __ext4_iget+0x265/0x3e20 [ 667.849493][ T9094] ? ext4_get_projid+0x190/0x190 [ 667.849509][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 667.849521][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 667.849538][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 667.849561][ T9094] ext4_lookup+0x3b1/0x7a0 [ 667.849583][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 667.882820][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 667.882843][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 667.882866][ T9094] __lookup_slow+0x279/0x500 [ 667.882882][ T9094] ? vfs_unlink+0x620/0x620 [ 667.882928][ T9094] lookup_slow+0x58/0x80 [ 667.903920][ T9094] path_mountpoint+0x5d2/0x1e50 [ 667.917290][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 667.926054][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 667.926080][ T9094] ? path_openat+0x4710/0x4710 [ 667.926104][ T9094] filename_mountpoint+0x18e/0x390 [ 667.926121][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 667.926135][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 667.926162][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 667.936346][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 667.936363][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 667.936381][ T9094] ? __check_object_size+0x3d/0x437 [ 667.936402][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 667.936417][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.936439][ T9094] ? getname_flags+0x277/0x5b0 [ 667.945983][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 667.946001][ T9094] ksys_umount+0x164/0xef0 [ 667.946017][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.946032][ T9094] ? __detach_mounts+0x290/0x290 [ 667.946055][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 667.957600][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 667.957618][ T9094] ? do_syscall_64+0x26/0x790 [ 667.957635][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.957647][ T9094] ? do_syscall_64+0x26/0x790 [ 667.957662][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 667.957702][ T9094] __x64_sys_umount+0x54/0x80 [ 667.969001][ T9094] do_syscall_64+0xfa/0x790 [ 667.979079][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.989877][ T9094] RIP: 0033:0x45d0a7 [ 667.989893][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 667.989900][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 667.989912][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 667.989920][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 667.989927][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 667.989935][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 667.989942][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 668.008405][ T9094] memory: usage 14544kB, limit 0kB, failcnt 116 [ 668.033742][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 668.041671][ T9094] Memory cgroup stats for /syz3: [ 668.041801][ T9094] anon 9162752 [ 668.041801][ T9094] file 45056 [ 668.041801][ T9094] kernel_stack 196608 [ 668.041801][ T9094] slab 4616192 [ 668.041801][ T9094] sock 0 [ 668.041801][ T9094] shmem 0 [ 668.041801][ T9094] file_mapped 0 [ 668.041801][ T9094] file_dirty 0 [ 668.041801][ T9094] file_writeback 0 [ 668.041801][ T9094] anon_thp 8388608 [ 668.041801][ T9094] inactive_anon 0 [ 668.041801][ T9094] active_anon 9162752 [ 668.041801][ T9094] inactive_file 0 [ 668.041801][ T9094] active_file 61440 [ 668.041801][ T9094] unevictable 0 [ 668.041801][ T9094] slab_reclaimable 1216512 [ 668.041801][ T9094] slab_unreclaimable 3399680 [ 668.041801][ T9094] pgfault 35574 [ 668.041801][ T9094] pgmajfault 0 [ 668.041801][ T9094] workingset_refault 0 [ 668.041801][ T9094] workingset_activate 0 [ 668.041801][ T9094] workingset_nodereclaim 0 [ 668.041801][ T9094] pgrefill 90 [ 668.041801][ T9094] pgscan 95 [ 668.041801][ T9094] pgsteal 89 [ 668.041801][ T9094] pgactivate 0 [ 668.050335][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15075,uid=0 [ 668.072949][ T9094] Memory cgroup out of memory: Killed process 15075 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 668.551841][T11936] team0 (unregistering): Port device team_slave_1 removed [ 668.567795][T11936] team0 (unregistering): Port device team_slave_0 removed [ 668.582325][T11936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.595416][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 668.608567][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 668.616808][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.626843][ T9094] Call Trace: [ 668.630129][ T9094] dump_stack+0x197/0x210 [ 668.634457][ T9094] dump_header+0x10b/0x82d [ 668.638861][ T9094] ? oom_kill_process+0x94/0x450 [ 668.643777][ T9094] oom_kill_process.cold+0x10/0x15 [ 668.648878][ T9094] out_of_memory+0x334/0x13c0 [ 668.653535][ T9094] ? lock_downgrade+0x920/0x920 [ 668.658468][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 668.664263][ T9094] ? oom_killer_disable+0x280/0x280 [ 668.669445][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 668.674971][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 668.680601][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 668.685781][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 668.690618][ T9094] try_charge+0xf76/0x14d0 [ 668.695030][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.701266][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 668.706968][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 668.712585][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 668.718290][ T9094] ? cache_grow_begin+0x122/0xd00 [ 668.723298][ T9094] ? find_held_lock+0x35/0x130 [ 668.728246][ T9094] ? cache_grow_begin+0x122/0xd00 [ 668.733465][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 668.739029][ T9094] ? lock_downgrade+0x920/0x920 [ 668.743885][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 668.749174][ T9094] ? __kasan_check_read+0x11/0x20 [ 668.755207][ T9094] cache_grow_begin+0x61a/0xd00 [ 668.760160][ T9094] ? write_comp_data+0x61/0x70 [ 668.764912][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 668.770198][ T9094] fallback_alloc+0x1f8/0x2d0 [ 668.774890][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 668.780068][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 668.785257][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 668.790099][ T9094] ? lock_downgrade+0x920/0x920 [ 668.794928][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 668.800567][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 668.805776][ T9094] ext4_alloc_inode+0x1f/0x640 [ 668.810548][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 668.815733][ T9094] alloc_inode+0x68/0x1e0 [ 668.820061][ T9094] iget_locked+0x1a6/0x4b0 [ 668.824473][ T9094] __ext4_iget+0x265/0x3e20 [ 668.828971][ T9094] ? ext4_get_projid+0x190/0x190 [ 668.833901][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 668.839703][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 668.845765][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 668.851336][ T9094] ext4_lookup+0x3b1/0x7a0 [ 668.856620][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 668.862837][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 668.868400][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 668.874348][ T9094] __lookup_slow+0x279/0x500 [ 668.879120][ T9094] ? vfs_unlink+0x620/0x620 [ 668.884001][ T9094] lookup_slow+0x58/0x80 [ 668.888320][ T9094] path_mountpoint+0x5d2/0x1e50 [ 668.895545][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 668.901276][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 668.907439][ T9094] ? path_openat+0x4710/0x4710 [ 668.914955][ T9094] filename_mountpoint+0x18e/0x390 [ 668.920236][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 668.925955][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 668.935280][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 668.942836][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 668.948920][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 668.955838][ T9094] ? __check_object_size+0x3d/0x437 [ 668.962145][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 668.969439][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.975781][ T9094] ? getname_flags+0x277/0x5b0 [ 668.981082][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 668.986678][ T9094] ksys_umount+0x164/0xef0 [ 668.991217][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.997647][ T9094] ? __detach_mounts+0x290/0x290 [ 669.002712][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 669.008172][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 669.014950][ T9094] ? do_syscall_64+0x26/0x790 [ 669.020614][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.026922][ T9094] ? do_syscall_64+0x26/0x790 [ 669.031581][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 669.036847][ T9094] __x64_sys_umount+0x54/0x80 [ 669.041502][ T9094] do_syscall_64+0xfa/0x790 [ 669.045987][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.051855][ T9094] RIP: 0033:0x45d0a7 [ 669.055727][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 669.075311][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 669.083702][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 669.091668][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 669.099620][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 669.107657][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 669.115625][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 669.134649][ T9094] memory: usage 12228kB, limit 0kB, failcnt 122 [ 669.140994][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 669.147921][ T9094] Memory cgroup stats for /syz3: [ 669.148024][ T9094] anon 6946816 [ 669.148024][ T9094] file 45056 [ 669.148024][ T9094] kernel_stack 196608 [ 669.148024][ T9094] slab 4616192 [ 669.148024][ T9094] sock 0 [ 669.148024][ T9094] shmem 0 [ 669.148024][ T9094] file_mapped 0 [ 669.148024][ T9094] file_dirty 0 [ 669.148024][ T9094] file_writeback 0 [ 669.148024][ T9094] anon_thp 6291456 [ 669.148024][ T9094] inactive_anon 0 [ 669.148024][ T9094] active_anon 6946816 [ 669.148024][ T9094] inactive_file 0 [ 669.148024][ T9094] active_file 61440 [ 669.148024][ T9094] unevictable 0 [ 669.148024][ T9094] slab_reclaimable 1216512 [ 669.148024][ T9094] slab_unreclaimable 3399680 [ 669.148024][ T9094] pgfault 35574 [ 669.148024][ T9094] pgmajfault 0 [ 669.148024][ T9094] workingset_refault 0 [ 669.148024][ T9094] workingset_activate 0 [ 669.148024][ T9094] workingset_nodereclaim 0 [ 669.148024][ T9094] pgrefill 90 [ 669.148024][ T9094] pgscan 95 [ 669.148024][ T9094] pgsteal 89 [ 669.148024][ T9094] pgactivate 0 [ 669.152971][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15037,uid=0 [ 669.260880][ T9094] Memory cgroup out of memory: Killed process 15037 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 669.279637][T11936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.297124][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 669.309921][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 669.318445][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.328498][ T9094] Call Trace: [ 669.331798][ T9094] dump_stack+0x197/0x210 [ 669.336116][ T9094] dump_header+0x10b/0x82d [ 669.340512][ T9094] ? oom_kill_process+0x94/0x450 [ 669.345448][ T9094] oom_kill_process.cold+0x10/0x15 [ 669.350560][ T9094] out_of_memory+0x334/0x13c0 [ 669.355217][ T9094] ? lock_downgrade+0x920/0x920 [ 669.360047][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 669.365843][ T9094] ? oom_killer_disable+0x280/0x280 [ 669.371033][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 669.376558][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 669.382182][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 669.387469][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 669.392304][ T9094] try_charge+0xf76/0x14d0 [ 669.396715][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.402947][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 669.408726][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 669.414281][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 669.420000][ T9094] ? cache_grow_begin+0x122/0xd00 [ 669.425021][ T9094] ? find_held_lock+0x35/0x130 [ 669.429782][ T9094] ? cache_grow_begin+0x122/0xd00 [ 669.434791][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 669.440315][ T9094] ? lock_downgrade+0x920/0x920 [ 669.445156][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 669.450344][ T9094] ? __kasan_check_read+0x11/0x20 [ 669.455349][ T9094] cache_grow_begin+0x61a/0xd00 [ 669.460191][ T9094] ? write_comp_data+0x61/0x70 [ 669.464933][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 669.470204][ T9094] fallback_alloc+0x1f8/0x2d0 [ 669.474958][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 669.480670][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 669.485762][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 669.490611][ T9094] ? lock_downgrade+0x920/0x920 [ 669.495617][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 669.500534][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 669.505711][ T9094] ext4_alloc_inode+0x1f/0x640 [ 669.510456][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 669.515649][ T9094] alloc_inode+0x68/0x1e0 [ 669.519970][ T9094] iget_locked+0x1a6/0x4b0 [ 669.524501][ T9094] __ext4_iget+0x265/0x3e20 [ 669.529029][ T9094] ? ext4_get_projid+0x190/0x190 [ 669.533957][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 669.539581][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 669.545547][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 669.551579][ T9094] ext4_lookup+0x3b1/0x7a0 [ 669.556264][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 669.561542][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 669.566553][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 669.571563][ T9094] __lookup_slow+0x279/0x500 [ 669.576138][ T9094] ? vfs_unlink+0x620/0x620 [ 669.580638][ T9094] lookup_slow+0x58/0x80 [ 669.584861][ T9094] path_mountpoint+0x5d2/0x1e50 [ 669.589691][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 669.595386][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 669.601354][ T9094] ? path_openat+0x4710/0x4710 [ 669.606104][ T9094] filename_mountpoint+0x18e/0x390 [ 669.611194][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 669.616900][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 669.623037][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 669.629268][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 669.634277][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 669.639972][ T9094] ? __check_object_size+0x3d/0x437 [ 669.645162][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 669.650249][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.658144][ T9094] ? getname_flags+0x277/0x5b0 [ 669.662899][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 669.668173][ T9094] ksys_umount+0x164/0xef0 [ 669.672567][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.678788][ T9094] ? __detach_mounts+0x290/0x290 [ 669.683719][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 669.689167][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 669.694645][ T9094] ? do_syscall_64+0x26/0x790 [ 669.699320][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.707458][ T9094] ? do_syscall_64+0x26/0x790 [ 669.712120][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 669.717399][ T9094] __x64_sys_umount+0x54/0x80 [ 669.723098][ T9094] do_syscall_64+0xfa/0x790 [ 669.727583][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.733565][ T9094] RIP: 0033:0x45d0a7 [ 669.737441][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 669.757036][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 669.765439][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 669.773450][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 669.781415][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 669.789377][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 669.797338][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 669.807918][ T9094] memory: usage 9912kB, limit 0kB, failcnt 128 [ 669.814383][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 669.821289][ T9094] Memory cgroup stats for /syz3: [ 669.821419][ T9094] anon 4726784 [ 669.821419][ T9094] file 45056 [ 669.821419][ T9094] kernel_stack 196608 [ 669.821419][ T9094] slab 4616192 [ 669.821419][ T9094] sock 0 [ 669.821419][ T9094] shmem 0 [ 669.821419][ T9094] file_mapped 0 [ 669.821419][ T9094] file_dirty 0 [ 669.821419][ T9094] file_writeback 0 [ 669.821419][ T9094] anon_thp 4194304 [ 669.821419][ T9094] inactive_anon 0 [ 669.821419][ T9094] active_anon 4726784 [ 669.821419][ T9094] inactive_file 0 [ 669.821419][ T9094] active_file 61440 [ 669.821419][ T9094] unevictable 0 [ 669.821419][ T9094] slab_reclaimable 1216512 [ 669.821419][ T9094] slab_unreclaimable 3399680 [ 669.821419][ T9094] pgfault 35574 [ 669.821419][ T9094] pgmajfault 0 [ 669.821419][ T9094] workingset_refault 0 [ 669.821419][ T9094] workingset_activate 0 [ 669.821419][ T9094] workingset_nodereclaim 0 [ 669.821419][ T9094] pgrefill 90 [ 669.821419][ T9094] pgscan 95 [ 669.821419][ T9094] pgsteal 89 [ 669.821419][ T9094] pgactivate 0 [ 669.932173][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14992,uid=0 [ 669.956551][ T9094] Memory cgroup out of memory: Killed process 14992 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 669.983622][ T1102] oom_reaper: reaped process 14992 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 669.985337][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 670.014978][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 670.023253][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.033311][ T9094] Call Trace: [ 670.033332][ T9094] dump_stack+0x197/0x210 [ 670.033352][ T9094] dump_header+0x10b/0x82d [ 670.033362][ T9094] ? oom_kill_process+0x94/0x450 [ 670.033378][ T9094] oom_kill_process.cold+0x10/0x15 [ 670.033393][ T9094] out_of_memory+0x334/0x13c0 [ 670.033406][ T9094] ? lock_downgrade+0x920/0x920 [ 670.033426][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 670.033442][ T9094] ? oom_killer_disable+0x280/0x280 [ 670.033468][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 670.033482][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 670.033504][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 670.033523][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 670.033542][ T9094] try_charge+0xf76/0x14d0 [ 670.033556][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.033575][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 670.050500][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 670.060348][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 670.071578][ T9094] ? cache_grow_begin+0x122/0xd00 [ 670.082290][ T9094] ? find_held_lock+0x35/0x130 [ 670.093077][ T9094] ? cache_grow_begin+0x122/0xd00 [ 670.102317][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 670.102330][ T9094] ? lock_downgrade+0x920/0x920 [ 670.102348][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 670.114380][ T9094] ? __kasan_check_read+0x11/0x20 [ 670.114402][ T9094] cache_grow_begin+0x61a/0xd00 [ 670.114417][ T9094] ? write_comp_data+0x61/0x70 [ 670.114435][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 670.125784][ T9094] fallback_alloc+0x1f8/0x2d0 [ 670.125809][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 670.125825][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 670.125847][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 670.135601][ T9094] ? lock_downgrade+0x920/0x920 [ 670.135616][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 670.135633][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 670.135649][ T9094] ext4_alloc_inode+0x1f/0x640 [ 670.146269][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 670.146285][ T9094] alloc_inode+0x68/0x1e0 [ 670.146307][ T9094] iget_locked+0x1a6/0x4b0 [ 670.156540][ T9094] __ext4_iget+0x265/0x3e20 [ 670.156567][ T9094] ? ext4_get_projid+0x190/0x190 [ 670.156582][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 670.156595][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 670.156615][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 670.166519][ T9094] ext4_lookup+0x3b1/0x7a0 [ 670.166539][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 670.166554][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 670.166578][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 670.176608][ T9094] __lookup_slow+0x279/0x500 [ 670.176625][ T9094] ? vfs_unlink+0x620/0x620 [ 670.176668][ T9094] lookup_slow+0x58/0x80 [ 670.186475][ T9094] path_mountpoint+0x5d2/0x1e50 [ 670.186495][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 670.186514][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 670.196445][ T9094] ? path_openat+0x4710/0x4710 [ 670.196473][ T9094] filename_mountpoint+0x18e/0x390 [ 670.196489][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 670.196508][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 670.206350][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 670.206365][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 670.206377][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 670.206398][ T9094] ? __check_object_size+0x3d/0x437 [ 670.216340][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 670.216359][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.216379][ T9094] ? getname_flags+0x277/0x5b0 [ 670.226806][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 670.226826][ T9094] ksys_umount+0x164/0xef0 [ 670.226841][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.226862][ T9094] ? __detach_mounts+0x290/0x290 [ 670.235800][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.235816][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 670.235830][ T9094] ? do_syscall_64+0x26/0x790 [ 670.235846][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.235864][ T9094] ? do_syscall_64+0x26/0x790 [ 670.246467][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 670.246488][ T9094] __x64_sys_umount+0x54/0x80 [ 670.246506][ T9094] do_syscall_64+0xfa/0x790 [ 670.246526][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.246541][ T9094] RIP: 0033:0x45d0a7 [ 670.257636][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 670.257644][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 670.257657][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 670.257664][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 670.257671][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 670.257683][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 670.267344][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 670.284595][ T9094] memory: usage 7596kB, limit 0kB, failcnt 134 [ 670.291513][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 670.309666][ T9094] Memory cgroup stats for /syz3: [ 670.309778][ T9094] anon 2510848 [ 670.309778][ T9094] file 45056 [ 670.309778][ T9094] kernel_stack 131072 [ 670.309778][ T9094] slab 4616192 [ 670.309778][ T9094] sock 0 [ 670.309778][ T9094] shmem 0 [ 670.309778][ T9094] file_mapped 0 [ 670.309778][ T9094] file_dirty 0 [ 670.309778][ T9094] file_writeback 0 [ 670.309778][ T9094] anon_thp 2097152 [ 670.309778][ T9094] inactive_anon 0 [ 670.309778][ T9094] active_anon 2510848 [ 670.309778][ T9094] inactive_file 0 [ 670.309778][ T9094] active_file 61440 [ 670.309778][ T9094] unevictable 0 [ 670.309778][ T9094] slab_reclaimable 1216512 [ 670.309778][ T9094] slab_unreclaimable 3399680 [ 670.309778][ T9094] pgfault 35574 [ 670.309778][ T9094] pgmajfault 0 [ 670.309778][ T9094] workingset_refault 0 [ 670.309778][ T9094] workingset_activate 0 [ 670.309778][ T9094] workingset_nodereclaim 0 [ 670.309778][ T9094] pgrefill 90 [ 670.309778][ T9094] pgscan 95 [ 670.309778][ T9094] pgsteal 89 [ 670.309778][ T9094] pgactivate 0 [ 670.319976][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14938,uid=0 [ 670.338941][ T9094] Memory cgroup out of memory: Killed process 14938 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 670.667746][ T1102] oom_reaper: reaped process 14938 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 670.671187][ T9094] syz-executor.3 invoked oom-killer: gfp_mask=0x40c50(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 670.692049][ T9094] CPU: 1 PID: 9094 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 670.700299][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.700305][ T9094] Call Trace: [ 670.700332][ T9094] dump_stack+0x197/0x210 [ 670.700351][ T9094] dump_header+0x10b/0x82d [ 670.700361][ T9094] ? oom_kill_process+0x94/0x450 [ 670.700376][ T9094] oom_kill_process.cold+0x10/0x15 [ 670.700390][ T9094] out_of_memory+0x334/0x13c0 [ 670.700404][ T9094] ? lock_downgrade+0x920/0x920 [ 670.700423][ T9094] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 670.700440][ T9094] ? oom_killer_disable+0x280/0x280 [ 670.714123][ T9094] mem_cgroup_out_of_memory+0x1d8/0x240 [ 670.723222][ T9094] ? memcg_oom_wake_function+0x700/0x700 [ 670.733918][ T9094] ? do_raw_spin_unlock+0x178/0x270 [ 670.743429][ T9094] ? _raw_spin_unlock+0x28/0x40 [ 670.754508][ T9094] try_charge+0xf76/0x14d0 [ 670.754529][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.754550][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 670.754574][ T9094] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 670.765752][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 670.765775][ T9094] ? cache_grow_begin+0x122/0xd00 [ 670.765790][ T9094] ? find_held_lock+0x35/0x130 [ 670.765804][ T9094] ? cache_grow_begin+0x122/0xd00 [ 670.765830][ T9094] __memcg_kmem_charge_memcg+0x7c/0x130 [ 670.775868][ T9094] ? lock_downgrade+0x920/0x920 [ 670.775889][ T9094] ? memcg_kmem_put_cache+0x50/0x50 [ 670.775905][ T9094] ? __kasan_check_read+0x11/0x20 [ 670.775924][ T9094] cache_grow_begin+0x61a/0xd00 [ 670.775944][ T9094] ? write_comp_data+0x61/0x70 [ 670.786729][ T9094] ? mempolicy_slab_node+0x139/0x390 [ 670.786749][ T9094] fallback_alloc+0x1f8/0x2d0 [ 670.786771][ T9094] ____cache_alloc_node+0x1bc/0x1d0 [ 670.786792][ T9094] ? trace_hardirqs_off+0x62/0x240 [ 670.798070][ T9094] kmem_cache_alloc+0x1ef/0x710 [ 670.809497][ T9094] ? lock_downgrade+0x920/0x920 [ 670.809516][ T9094] ? rwlock_bug.part.0+0x90/0x90 [ 670.809532][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 670.809545][ T9094] ext4_alloc_inode+0x1f/0x640 [ 670.809556][ T9094] ? ratelimit_state_init+0xb0/0xb0 [ 670.809572][ T9094] alloc_inode+0x68/0x1e0 [ 670.809588][ T9094] iget_locked+0x1a6/0x4b0 [ 670.809606][ T9094] __ext4_iget+0x265/0x3e20 [ 670.809632][ T9094] ? ext4_get_projid+0x190/0x190 [ 670.819580][ T9094] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 670.829987][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 670.840206][ T9094] ? d_alloc_parallel+0xa6e/0x1c00 [ 670.849998][ T9094] ext4_lookup+0x3b1/0x7a0 [ 670.860648][ T9094] ? ext4_cross_rename+0x1490/0x1490 [ 670.871828][ T9094] ? __lock_acquire+0x16f2/0x4a00 [ 670.881707][ T9094] ? lockdep_init_map+0x1be/0x6d0 [ 670.892309][ T9094] __lookup_slow+0x279/0x500 [ 670.902485][ T9094] ? vfs_unlink+0x620/0x620 [ 670.911409][ T9094] lookup_slow+0x58/0x80 [ 670.920812][ T9094] path_mountpoint+0x5d2/0x1e50 [ 670.932473][ T9094] ? __lockdep_free_key_range+0x120/0x120 [ 670.942451][ T9094] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 670.953817][ T9094] ? path_openat+0x4710/0x4710 [ 670.964543][ T9094] filename_mountpoint+0x18e/0x390 [ 670.964562][ T9094] ? filename_parentat.isra.0+0x410/0x410 [ 670.964578][ T9094] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 670.964603][ T9094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 670.964617][ T9094] ? __phys_addr_symbol+0x30/0x70 [ 670.964637][ T9094] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 670.973398][ T9094] ? __check_object_size+0x3d/0x437 [ 670.984157][ T9094] ? strncpy_from_user+0x2b4/0x400 [ 670.994920][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.994939][ T9094] ? getname_flags+0x277/0x5b0 [ 670.994957][ T9094] user_path_mountpoint_at+0x3a/0x50 [ 670.994975][ T9094] ksys_umount+0x164/0xef0 [ 670.994993][ T9094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 671.005848][ T9094] ? __detach_mounts+0x290/0x290 [ 671.005868][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 671.005880][ T9094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 671.005893][ T9094] ? do_syscall_64+0x26/0x790 [ 671.005920][ T9094] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.005932][ T9094] ? do_syscall_64+0x26/0x790 [ 671.005953][ T9094] ? lockdep_hardirqs_on+0x421/0x5e0 [ 671.018570][ T9094] __x64_sys_umount+0x54/0x80 [ 671.018593][ T9094] do_syscall_64+0xfa/0x790 [ 671.018614][ T9094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.018626][ T9094] RIP: 0033:0x45d0a7 [ 671.018652][ T9094] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 671.029538][ T9094] RSP: 002b:00007fff715ddcf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 671.040012][ T9094] RAX: ffffffffffffffda RBX: 00000000000a0962 RCX: 000000000045d0a7 [ 671.050968][ T9094] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007fff715ddda0 [ 671.050981][ T9094] RBP: 000000000000053b R08: 0000000000000000 R09: 000000000000000c [ 671.060658][ T9094] R10: 0000000000000006 R11: 0000000000000206 R12: 00007fff715dee30 [ 671.060671][ T9094] R13: 00000000010eb940 R14: 0000000000000000 R15: 00007fff715dee30 [ 671.196621][ T9094] memory: usage 5252kB, limit 0kB, failcnt 140 [ 671.202796][ T9094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 671.209763][ T9094] Memory cgroup stats for /syz3: [ 671.209904][ T9094] anon 331776 [ 671.209904][ T9094] file 45056 [ 671.209904][ T9094] kernel_stack 65536 [ 671.209904][ T9094] slab 4616192 [ 671.209904][ T9094] sock 0 [ 671.209904][ T9094] shmem 0 [ 671.209904][ T9094] file_mapped 0 [ 671.209904][ T9094] file_dirty 0 [ 671.209904][ T9094] file_writeback 0 [ 671.209904][ T9094] anon_thp 0 [ 671.209904][ T9094] inactive_anon 0 [ 671.209904][ T9094] active_anon 331776 [ 671.209904][ T9094] inactive_file 0 [ 671.209904][ T9094] active_file 61440 [ 671.209904][ T9094] unevictable 0 [ 671.209904][ T9094] slab_reclaimable 1216512 [ 671.209904][ T9094] slab_unreclaimable 3399680 [ 671.209904][ T9094] pgfault 35574 [ 671.209904][ T9094] pgmajfault 0 [ 671.209904][ T9094] workingset_refault 0 [ 671.209904][ T9094] workingset_activate 0 [ 671.209904][ T9094] workingset_nodereclaim 0 [ 671.209904][ T9094] pgrefill 90 [ 671.209904][ T9094] pgscan 95 [ 671.209904][ T9094] pgsteal 89 [ 671.209904][ T9094] pgactivate 0 [ 671.305229][ T9094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9094,uid=0 [ 671.321380][ T9094] Memory cgroup out of memory: Killed process 9094 (syz-executor.3) total-vm:72452kB, anon-rss:116kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 671.341214][ T1102] oom_reaper: reaped process 9094 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 671.442524][T11936] bond0 (unregistering): Released all slaves 06:09:59 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x400, 0x8}, 0xc) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) openat$cgroup_int(r2, &(0x7f0000000300)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r1, 0x0, 0x0) 06:09:59 executing program 5: getpid() sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/248}, {&(0x7f00000006c0)=""/266}, {&(0x7f0000000300)=""/39}, {&(0x7f00000004c0)=""/95}, {&(0x7f0000000540)=""/100}, {&(0x7f00000005c0)=""/115}], 0x10000000000002d5, 0x10400003) 06:09:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000004640)=[{{0x0, 0x37b, &(0x7f0000000180)=[{&(0x7f0000000080)=""/214, 0xd6}], 0x1}}], 0x3a7, 0x0, 0x0) 06:09:59 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e21, @loopback}, {0x1127bb6743fa1ec7, @dev}, 0x10, {0x2, 0x4e23, @remote}, 'nr0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = dup(r1) sendmsg$kcm(r2, 0x0, 0x10) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 06:09:59 executing program 0: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:09:59 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x400, 0x8}, 0xc) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) openat$cgroup_int(r2, &(0x7f0000000300)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r1, 0x0, 0x0) 06:09:59 executing program 5: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:09:59 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x400, 0x8}, 0xc) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) openat$cgroup_int(r2, &(0x7f0000000300)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r1, 0x0, 0x0) [ 672.083102][T21110] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 06:10:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000004640)=[{{0x0, 0x37b, &(0x7f0000000180)=[{&(0x7f0000000080)=""/214, 0xd6}], 0x1}}], 0x3a7, 0x0, 0x0) 06:10:00 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e21, @loopback}, {0x1127bb6743fa1ec7, @dev}, 0x10, {0x2, 0x4e23, @remote}, 'nr0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = dup(r1) sendmsg$kcm(r2, 0x0, 0x10) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 06:10:00 executing program 0: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:00 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x400, 0x8}, 0xc) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) openat$cgroup_int(r2, &(0x7f0000000300)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x100000001, 0x12) write$cgroup_int(r1, 0x0, 0x0) 06:10:00 executing program 2: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:00 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e21, @loopback}, {0x1127bb6743fa1ec7, @dev}, 0x10, {0x2, 0x4e23, @remote}, 'nr0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = dup(r1) sendmsg$kcm(r2, 0x0, 0x10) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 06:10:01 executing program 3: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) [ 673.353881][T21236] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 06:10:01 executing program 5: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:01 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e21, @loopback}, {0x1127bb6743fa1ec7, @dev}, 0x10, {0x2, 0x4e23, @remote}, 'nr0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = dup(r1) sendmsg$kcm(r2, 0x0, 0x10) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 06:10:01 executing program 4: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:02 executing program 0: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) [ 674.268912][T21334] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 675.611752][T21380] IPVS: ftp: loaded support on port[0] = 21 [ 675.850910][T21380] chnl_net:caif_netlink_parms(): no params data found [ 675.904144][T21380] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.912989][T21380] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.921436][T21380] device bridge_slave_0 entered promiscuous mode [ 675.931493][T21380] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.938723][T21380] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.946975][T21380] device bridge_slave_1 entered promiscuous mode [ 675.967954][T21380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.978975][T21380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.002815][T21380] team0: Port device team_slave_0 added [ 676.013895][T21380] team0: Port device team_slave_1 added [ 676.098172][T21380] device hsr_slave_0 entered promiscuous mode [ 676.155823][T21380] device hsr_slave_1 entered promiscuous mode [ 676.194402][T21380] debugfs: Directory 'hsr0' with parent '/' already present! [ 676.217383][T21380] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.224584][T21380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.231908][T21380] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.239017][T21380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.287515][T21380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.300803][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.312582][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.321280][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.332136][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 676.347987][T21380] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.360276][T11605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 676.369611][T11605] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.376733][T11605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.396660][T18940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 676.406103][T18940] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.413181][T18940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.435779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 676.452855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 676.462318][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 676.471700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 676.487085][T21380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.499656][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 676.510317][T18940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 676.531730][T18940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.542241][T18940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.556095][T21380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.628422][T21389] IPVS: ftp: loaded support on port[0] = 21 [ 676.763965][T21389] chnl_net:caif_netlink_parms(): no params data found [ 676.811947][T21389] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.819245][T21389] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.828699][T21389] device bridge_slave_0 entered promiscuous mode [ 676.834050][ T489] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 676.841316][ T324] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 676.883403][T21389] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.903782][T21396] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 676.919053][T21396] CPU: 1 PID: 21396 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 676.927400][T21396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.931968][T21389] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.937459][T21396] Call Trace: [ 676.937487][T21396] dump_stack+0x197/0x210 [ 676.937508][T21396] dump_header+0x10b/0x82d [ 676.937526][T21396] oom_kill_process.cold+0x10/0x15 [ 676.937547][T21396] out_of_memory+0x334/0x13c0 [ 676.937570][T21396] ? __sched_text_start+0x8/0x8 [ 676.947870][T21396] ? oom_killer_disable+0x280/0x280 [ 676.947901][T21396] mem_cgroup_out_of_memory+0x1d8/0x240 [ 676.947919][T21396] ? memcg_oom_wake_function+0x700/0x700 [ 676.953244][T21389] device bridge_slave_1 entered promiscuous mode [ 676.956646][T21396] ? _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 676.956666][T21396] ? cgroup_file_notify+0x140/0x1b0 [ 676.956687][T21396] memory_max_write+0x262/0x3a0 [ 676.956705][T21396] ? mem_cgroup_write+0x370/0x370 [ 676.956717][T21396] ? lock_acquire+0x190/0x410 [ 676.956737][T21396] ? kernfs_fop_write+0x227/0x480 [ 676.966505][T21396] cgroup_file_write+0x241/0x790 [ 676.966525][T21396] ? mem_cgroup_write+0x370/0x370 [ 676.966542][T21396] ? link_css_set+0x550/0x550 [ 676.976570][T21396] ? link_css_set+0x550/0x550 [ 676.976588][T21396] kernfs_fop_write+0x2b8/0x480 [ 676.976608][T21396] __vfs_write+0x8a/0x110 [ 676.976621][T21396] ? kernfs_fop_open+0xd80/0xd80 [ 676.976637][T21396] vfs_write+0x268/0x5d0 [ 676.976657][T21396] ksys_write+0x14f/0x290 [ 676.987884][T21396] ? __ia32_sys_read+0xb0/0xb0 [ 676.987906][T21396] ? do_syscall_64+0x26/0x790 [ 676.987928][T21396] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.000143][T21396] ? do_syscall_64+0x26/0x790 [ 677.000167][T21396] __x64_sys_write+0x73/0xb0 [ 677.000188][T21396] do_syscall_64+0xfa/0x790 [ 677.010203][T21396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.010217][T21396] RIP: 0033:0x45a679 [ 677.010237][T21396] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.019883][T21396] RSP: 002b:00007fb948830c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.019898][T21396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 677.019907][T21396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 677.019916][T21396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 677.019923][T21396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb9488316d4 [ 677.019937][T21396] R13: 00000000004cb8f1 R14: 00000000004e5278 R15: 00000000ffffffff [ 677.134600][T21396] memory: usage 3376kB, limit 0kB, failcnt 28 [ 677.154433][T21396] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 677.193964][T21396] Memory cgroup stats for /syz1: [ 677.196072][T21396] anon 2236416 [ 677.196072][T21396] file 86016 [ 677.196072][T21396] kernel_stack 65536 [ 677.196072][T21396] slab 1187840 [ 677.196072][T21396] sock 32768 [ 677.196072][T21396] shmem 16384 [ 677.196072][T21396] file_mapped 0 [ 677.196072][T21396] file_dirty 135168 [ 677.196072][T21396] file_writeback 0 [ 677.196072][T21396] anon_thp 2097152 [ 677.196072][T21396] inactive_anon 0 [ 677.196072][T21396] active_anon 2236416 [ 677.196072][T21396] inactive_file 135168 [ 677.196072][T21396] active_file 135168 [ 677.196072][T21396] unevictable 0 [ 677.196072][T21396] slab_reclaimable 540672 [ 677.196072][T21396] slab_unreclaimable 647168 [ 677.196072][T21396] pgfault 46068 [ 677.196072][T21396] pgmajfault 0 [ 677.196072][T21396] workingset_refault 0 [ 677.196072][T21396] workingset_activate 0 [ 677.196072][T21396] workingset_nodereclaim 0 [ 677.196072][T21396] pgrefill 35 [ 677.196072][T21396] pgscan 35 [ 677.196072][T21396] pgsteal 0 [ 677.201288][T21396] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21395,uid=0 [ 677.310125][T21396] Memory cgroup out of memory: Killed process 21395 (syz-executor.1) total-vm:72588kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 677.334653][ T1102] oom_reaper: reaped process 21395 (syz-executor.1), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 677.393409][T21389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.421486][T21389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 06:10:05 executing program 1: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:05 executing program 2: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:05 executing program 5: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:05 executing program 0: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:05 executing program 4: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) [ 677.542464][T21389] team0: Port device team_slave_0 added [ 677.550236][T21380] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 677.618463][T21389] team0: Port device team_slave_1 added [ 677.726513][T21380] CPU: 1 PID: 21380 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 677.734889][T21380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.745187][T21380] Call Trace: [ 677.748528][T21380] dump_stack+0x197/0x210 [ 677.753762][T21380] dump_header+0x10b/0x82d [ 677.758219][T21380] ? oom_kill_process+0x94/0x450 [ 677.763201][T21380] oom_kill_process.cold+0x10/0x15 [ 677.768339][T21380] out_of_memory+0x334/0x13c0 [ 677.773132][T21380] ? lock_downgrade+0x920/0x920 [ 677.780849][T21380] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 677.786698][T21380] ? oom_killer_disable+0x280/0x280 [ 677.791947][T21380] mem_cgroup_out_of_memory+0x1d8/0x240 [ 677.797544][T21380] ? memcg_oom_wake_function+0x700/0x700 [ 677.803234][T21380] ? do_raw_spin_unlock+0x178/0x270 [ 677.809343][T21380] ? _raw_spin_unlock+0x28/0x40 [ 677.814252][T21380] try_charge+0xf76/0x14d0 [ 677.818718][T21380] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 677.824289][T21380] ? rcu_read_unlock+0x2e/0x60 [ 677.829093][T21380] ? __mem_cgroup_largest_soft_limit_node+0x4f0/0x4f0 [ 677.836037][T21380] mem_cgroup_try_charge+0x136/0x590 [ 677.842116][T21380] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 677.847814][T21380] wp_page_copy+0x407/0x1780 [ 677.852432][T21380] ? do_wp_page+0x53b/0x15c0 [ 677.857066][T21380] ? find_held_lock+0x35/0x130 [ 677.861869][T21380] ? follow_pfn+0x2a0/0x2a0 [ 677.866397][T21380] ? lock_downgrade+0x920/0x920 [ 677.871757][T21380] ? swp_swapcount+0x540/0x540 [ 677.876582][T21380] ? do_raw_spin_unlock+0x178/0x270 [ 677.881823][T21380] do_wp_page+0x543/0x15c0 [ 677.886285][T21380] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 677.891707][T21380] __handle_mm_fault+0x22ce/0x3f00 [ 677.896868][T21380] ? copy_page_range+0x2510/0x2510 [ 677.902024][T21380] ? handle_mm_fault+0x292/0xa50 [ 677.907014][T21380] ? handle_mm_fault+0x7a0/0xa50 [ 677.911998][T21380] ? __kasan_check_read+0x11/0x20 [ 677.917309][T21380] handle_mm_fault+0x3b2/0xa50 [ 677.922242][T21380] __do_page_fault+0x536/0xd80 [ 677.927313][T21380] do_page_fault+0x38/0x590 [ 677.931834][T21380] page_fault+0x39/0x40 [ 677.936156][T21380] RIP: 0033:0x431756 [ 677.940065][T21380] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 96 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 ec 59 64 00 85 c0 0f 84 [ 677.959691][T21380] RSP: 002b:00007ffc412265e0 EFLAGS: 00010206 [ 677.965788][T21380] RAX: 0000000000019691 RBX: 0000000000719640 RCX: 0000000000008041 [ 677.973789][T21380] RDX: 000000000256e930 RSI: 0000000002576970 RDI: 0000000000000003 [ 677.981783][T21380] RBP: 0000000000008041 R08: 0000000000000001 R09: 000000000256d940 [ 677.989782][T21380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000719698 [ 677.997778][T21380] R13: 0000000000719698 R14: 0000000000000000 R15: 0000000000002710 [ 678.148707][T21389] device hsr_slave_0 entered promiscuous mode [ 678.184547][T21380] memory: usage 1036kB, limit 0kB, failcnt 38 [ 678.194603][T21380] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 678.235360][T21380] Memory cgroup stats for /syz1: [ 678.235480][T21380] anon 126976 [ 678.235480][T21380] file 86016 [ 678.235480][T21380] kernel_stack 0 [ 678.235480][T21380] slab 1187840 [ 678.235480][T21380] sock 32768 [ 678.235480][T21380] shmem 16384 [ 678.235480][T21380] file_mapped 0 [ 678.235480][T21380] file_dirty 135168 [ 678.235480][T21380] file_writeback 0 [ 678.235480][T21380] anon_thp 0 [ 678.235480][T21380] inactive_anon 0 [ 678.235480][T21380] active_anon 126976 [ 678.235480][T21380] inactive_file 135168 [ 678.235480][T21380] active_file 135168 [ 678.235480][T21380] unevictable 0 [ 678.235480][T21380] slab_reclaimable 540672 [ 678.235480][T21380] slab_unreclaimable 647168 [ 678.235480][T21380] pgfault 46068 [ 678.235480][T21380] pgmajfault 0 [ 678.235480][T21380] workingset_refault 0 [ 678.235480][T21380] workingset_activate 0 [ 678.235480][T21380] workingset_nodereclaim 0 [ 678.235480][T21380] pgrefill 68 [ 678.235480][T21380] pgscan 68 [ 678.235480][T21380] pgsteal 0 [ 678.235480][T21380] pgactivate 33 [ 678.236057][T21389] device hsr_slave_1 entered promiscuous mode [ 678.262939][T21380] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21380,uid=0 [ 678.763448][T21380] Memory cgroup out of memory: Killed process 21380 (syz-executor.1) total-vm:72456kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 678.875004][T21389] debugfs: Directory 'hsr0' with parent '/' already present! [ 678.906089][ T1102] oom_reaper: reaped process 21380 (syz-executor.1), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 06:10:07 executing program 0: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) [ 680.163597][T21389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.226796][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 680.244986][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 680.257688][T21389] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.285049][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 680.295725][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 680.310886][T10681] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.318026][T10681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.327093][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 680.336811][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 680.360466][T10681] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.368770][T10681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.378539][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 680.401392][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 680.419185][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 680.429256][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 680.439351][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.497219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 680.515545][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 680.535825][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.555447][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 680.564138][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 680.591596][T21389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.607225][T21389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 680.620823][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 680.630938][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 680.662494][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 680.671193][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 680.687767][T21389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.002376][T21648] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 06:10:09 executing program 3: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:09 executing program 4: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r0, ':chain\x00'}) 06:10:09 executing program 2: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:09 executing program 1: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:09 executing program 0: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r0, ':chain\x00'}) 06:10:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r0, ':chain\x00'}) 06:10:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r0, ':chain\x00'}) 06:10:11 executing program 5: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xb) 06:10:11 executing program 3: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000780)=0x1, 0x5a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1b) 06:10:11 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000a16000)=""/71, 0x47) 06:10:12 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:10:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') sendfile(r0, r3, &(0x7f0000000040)=0x81, 0x3f8ffc14) 06:10:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x1cc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) [ 684.337076][T21820] device syz_tun entered promiscuous mode [ 684.391178][T21817] device syz_tun left promiscuous mode [ 684.515352][T21820] device syz_tun entered promiscuous mode [ 684.522042][T21817] device syz_tun left promiscuous mode [ 685.757098][T21838] IPVS: ftp: loaded support on port[0] = 21 [ 685.840723][T21838] chnl_net:caif_netlink_parms(): no params data found [ 685.882024][T21838] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.890126][T21838] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.898919][T21838] device bridge_slave_0 entered promiscuous mode [ 685.908406][T21838] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.916082][T21838] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.923948][T21838] device bridge_slave_1 entered promiscuous mode [ 685.946326][T21838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.059210][T21838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.087645][T21838] team0: Port device team_slave_0 added [ 686.095937][T21838] team0: Port device team_slave_1 added [ 686.166622][T21838] device hsr_slave_0 entered promiscuous mode [ 686.204939][T21838] device hsr_slave_1 entered promiscuous mode [ 686.254437][T21838] debugfs: Directory 'hsr0' with parent '/' already present! [ 686.373295][T21838] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.380626][T21838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.388096][T21838] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.395241][T21838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.453948][T21838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.469767][ T489] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 686.472870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 686.492552][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.503857][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.514134][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 686.535246][T21838] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.557553][ T9104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 686.567934][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.575214][ T9104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.596205][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 686.606142][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.613447][ T9143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.640414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 686.649789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 686.672086][T21838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.684024][T21838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.696860][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 686.706097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 686.715483][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 686.747011][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 686.791893][T18940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 686.804707][T18940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 686.822307][T21838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.996568][T11936] tipc: TX() has been purged, node left! [ 687.145206][T11936] tipc: TX() has been purged, node left! [ 687.249648][T21869] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 687.259738][T11936] tipc: TX() has been purged, node left! 06:10:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') sendfile(r0, r3, &(0x7f0000000040)=0x81, 0x3f8ffc14) 06:10:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r3) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0xe2, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r5, 0x5, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x2, 0x0, @mcast1={0xff, 0x2, [0x0, 0xc202]}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) 06:10:16 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:10:16 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:10:16 executing program 1: r0 = socket$inet6(0xa, 0xe, 0xffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r2 = fcntl$getown(r0, 0x9) r3 = getpgid(r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x101}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffa}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7f) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f00000000c0)) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r6, 0x0, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r7, 0x0, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000000c0)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r8, 0x0, 0x0) ioctl(r5, 0x1000000000005a, &(0x7f0000000780)="47ca8baecfbe4d684bc70000a3e43324dac2f4a902d7c3129fa281ff3edb4ac020d3404d3c28fea4ffffe44c5d2af969da7c6746ab620600"/73) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000640)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f00000006c0)="eb3c130105a4874e97bfeb58906d6b66732e6461740002", 0x17, 0x2000000000}], 0x1010802, 0x0) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64=r2]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x8000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, r3) capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000580)={0xc, 0x2, 0x89, 0x3, 0xca, 0xca2c}) r11 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff00000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e, 0x0, 0x0, 0x4}, 0x0, 0x0, r10, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2080000000, 0xfffffffffefffc01, 0x9}, 0xfffffffffffffe5f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000540)='threaded\x00', 0x399) mkdirat(r9, &(0x7f00000004c0)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x44) fchdir(r11) fstatfs(r9, &(0x7f0000000400)=""/128) 06:10:16 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:10:16 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) [ 688.644643][T11951] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 06:10:16 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:10:16 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:10:17 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 06:10:17 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) [ 689.700215][T21989] FAT-fs (loop2): Directory bread(block 45489) failed [ 689.734743][T21989] FAT-fs (loop2): Directory bread(block 45490) failed [ 689.754580][T21989] FAT-fs (loop2): Directory bread(block 45491) failed [ 689.805324][T21989] FAT-fs (loop2): Directory bread(block 45492) failed [ 689.901489][T21989] FAT-fs (loop2): Directory bread(block 45493) failed [ 689.977280][T21989] FAT-fs (loop2): Directory bread(block 45494) failed [ 690.016578][T22020] FAT-fs (loop3): Directory bread(block 45489) failed [ 690.068577][T22020] FAT-fs (loop3): Directory bread(block 45490) failed [ 690.074684][T21989] FAT-fs (loop2): Directory bread(block 45495) failed [ 690.103188][T22020] FAT-fs (loop3): Directory bread(block 45491) failed [ 690.118860][T21989] FAT-fs (loop2): Directory bread(block 45496) failed [ 690.160084][T21989] FAT-fs (loop2): Directory bread(block 45497) failed [ 690.168384][T22020] FAT-fs (loop3): Directory bread(block 45492) failed [ 690.204823][T21989] FAT-fs (loop2): Directory bread(block 45498) failed [ 690.236185][T21989] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 690.247749][T22026] FAT-fs (loop4): Directory bread(block 45489) failed [ 690.255630][T22026] FAT-fs (loop4): Directory bread(block 45490) failed [ 690.263196][T22026] FAT-fs (loop4): Directory bread(block 45491) failed [ 690.272614][T22026] FAT-fs (loop4): Directory bread(block 45492) failed [ 690.280604][T22026] FAT-fs (loop4): Directory bread(block 45493) failed [ 690.288084][T22026] FAT-fs (loop4): Directory bread(block 45494) failed [ 690.296692][T22026] FAT-fs (loop4): Directory bread(block 45495) failed [ 690.305604][T22026] FAT-fs (loop4): Directory bread(block 45496) failed [ 690.311128][T22020] FAT-fs (loop3): Directory bread(block 45493) failed [ 690.313085][T22026] FAT-fs (loop4): Directory bread(block 45497) failed [ 690.330196][T22026] FAT-fs (loop4): Directory bread(block 45498) failed [ 690.349005][T22026] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. 06:10:18 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x8}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/251) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8002600}, 0xc) getsockname(r2, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x39) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280)="eb3c906d6b66732e666174000204010002000270f7f8d858e945d090105b422976c51ece6c75a960b624ad10aacc9156b99e699ce1f818861f365f3557351e5da919107cd4f4e16921b9704e80f83d61c35668744167d56a84", 0x59}], 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000001c0)=""/159) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x5) connect$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) [ 690.492309][T22020] FAT-fs (loop3): Directory bread(block 45494) failed [ 690.537573][T22020] FAT-fs (loop3): Directory bread(block 45495) failed [ 690.625688][T22020] FAT-fs (loop3): Directory bread(block 45496) failed [ 690.654481][T22020] FAT-fs (loop3): Directory bread(block 45497) failed [ 690.679394][T22020] FAT-fs (loop3): Directory bread(block 45498) failed [ 690.717087][T22020] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. 06:10:19 executing program 4: unshare(0x400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}}, 0x0) 06:10:19 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, 0x0, 0x0) 06:10:19 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c9243fbf0322168078aba9d7ae45b0052772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b", 0xc3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:10:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') sendfile(r0, r3, &(0x7f0000000040)=0x81, 0x3f8ffc14) 06:10:19 executing program 5: socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) 06:10:19 executing program 2: syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1008040, 0x0) [ 691.594916][T21887] tipc: Started in network mode [ 691.600145][T21887] tipc: Own node identity ff020002000000000000000000000001, cluster identity 4711 [ 691.614936][T21887] tipc: Enabling of bearer rejected, failed to enable media 06:10:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\x00\x00i\"\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) 06:10:19 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000180), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 06:10:19 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, 0x0, 0x0) 06:10:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') sendfile(r0, r3, &(0x7f0000000040)=0x81, 0x3f8ffc14) 06:10:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\x00\x00i\"\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) 06:10:19 executing program 5: r0 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 06:10:20 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, 0x0, 0x0) 06:10:20 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x1000000000000a) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xd, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) [ 692.934505][ T489] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 06:10:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c9243fbf0322168078aba9d7ae45b0052772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b", 0xc3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:10:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\x00\x00i\"\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) 06:10:22 executing program 5: personality(0xffffffffffffffff) 06:10:22 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, 0x0, 0x0) 06:10:22 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f000000010841e20c050054a8c984ca029b189f1b882de4e41a0e982de47a", 0x1f) [ 694.763440][T22112] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 697.261542][T11936] bridge0: port 3(gretap0) entered disabled state [ 697.366018][T11936] device gretap0 left promiscuous mode [ 697.371806][T11936] bridge0: port 3(gretap0) entered disabled state [ 701.374372][T11936] device bridge_slave_1 left promiscuous mode [ 701.380729][T11936] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.435310][T11936] device bridge_slave_0 left promiscuous mode [ 701.441543][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.496489][T11936] device bridge_slave_1 left promiscuous mode [ 701.502681][T11936] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.566471][T11936] device bridge_slave_0 left promiscuous mode [ 701.572757][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.607039][T11936] device bridge_slave_1 left promiscuous mode [ 701.613305][T11936] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.665675][T11936] device bridge_slave_0 left promiscuous mode [ 701.671954][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.406272][T11936] device hsr_slave_0 left promiscuous mode [ 709.454603][T11936] device hsr_slave_1 left promiscuous mode [ 709.536671][T11936] team0 (unregistering): Port device team_slave_1 removed [ 709.551787][T11936] team0 (unregistering): Port device team_slave_0 removed [ 709.564032][T11936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.624012][T11936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.764860][T11936] bond0 (unregistering): Released all slaves [ 709.961899][T11936] bond7 (unregistering): Released all slaves [ 710.010301][T11936] bond6 (unregistering): Released all slaves [ 710.071290][T11936] bond5 (unregistering): Released all slaves [ 710.144091][T11936] bond4 (unregistering): Released all slaves [ 710.215252][T11936] bond3 (unregistering): Released all slaves [ 710.270659][T11936] bond2 (unregistering): Released all slaves [ 710.336413][T11936] bond1 (unregistering): Released all slaves [ 710.484870][T11936] device hsr_slave_0 left promiscuous mode [ 710.524486][T11936] device hsr_slave_1 left promiscuous mode [ 710.607292][T11936] team0 (unregistering): Port device team_slave_1 removed [ 710.622416][T11936] team0 (unregistering): Port device team_slave_0 removed [ 710.638840][T11936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.680822][T11936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.820204][T11936] bond0 (unregistering): Released all slaves [ 711.015627][T11936] device hsr_slave_0 left promiscuous mode [ 711.084431][T11936] device hsr_slave_1 left promiscuous mode [ 711.172921][T11936] team0 (unregistering): Port device team_slave_1 removed [ 711.193082][T11936] team0 (unregistering): Port device team_slave_0 removed [ 711.207258][T11936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.272093][T11936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.373663][T11936] bond0 (unregistering): Released all slaves 06:10:59 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0xff, 0x10000, 0xff}, 0x1c) dup3(r0, r1, 0x0) 06:10:59 executing program 5: r0 = memfd_create(&(0x7f0000000080)='4(eth0vboxnet0:n\x05\x00ev[\b\x00\x00\x00\x00\x00\x00\x00!(em0]$+*\b', 0x4) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) rt_sigaction(0x0, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000040)) 06:10:59 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f000000010841e20c050054a8c984ca029b189f1b882de4e41a0e982de47a", 0x1f) 06:10:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\x00\x00i\"\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) 06:10:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d77c41cb69d952f41bdd2ac8bb8c43", 0x281}, {&(0x7f0000000000)="aa1d484e2400000000000000007704a71e023a27b2da9426f40100c0000000000000000000000000000070fa401e6fd4f0d687edf81936fb", 0x38}], 0x2) 06:10:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c9243fbf0322168078aba9d7ae45b0052772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b", 0xc3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 732.010467][T22119] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. 06:10:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c9243fbf0322168078aba9d7ae45b0052772a9567bb821942ce72590f1bf41d20d4c000000279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0410a966da6a254b", 0xc3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:10:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="1c0000001e0081dc68b70f002189c609020000000000000000000800", 0x1c}], 0x1}, 0x0) 06:10:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d77c41cb69d952f41bdd2ac8bb8c43", 0x281}, {&(0x7f0000000000)="aa1d484e2400000000000000007704a71e023a27b2da9426f40100c0000000000000000000000000000070fa401e6fd4f0d687edf81936fb", 0x38}], 0x2) 06:11:00 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x1, 0x7ab0715dca68fab7, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "51d5205e4ca4b888d40047c37321760319cfff34bdfeff767c815dad738690b20cf465f6ef18683b77224a9922dd0c52d6f5d97258d9a57813477b6fc92af87b"}}, 0x80}}, 0x0) 06:11:00 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f000000010841e20c050054a8c984ca029b189f1b882de4e41a0e982de47a", 0x1f) 06:11:00 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x3, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) [ 732.310090][T22153] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000000c0)={'stack ', '.em0cgroup@wla~1proc//&\'+\x00'}, 0x20) 06:11:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d77c41cb69d952f41bdd2ac8bb8c43", 0x281}, {&(0x7f0000000000)="aa1d484e2400000000000000007704a71e023a27b2da9426f40100c0000000000000000000000000000070fa401e6fd4f0d687edf81936fb", 0x38}], 0x2) 06:11:00 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x1, 0x7ab0715dca68fab7, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "51d5205e4ca4b888d40047c37321760319cfff34bdfeff767c815dad738690b20cf465f6ef18683b77224a9922dd0c52d6f5d97258d9a57813477b6fc92af87b"}}, 0x80}}, 0x0) 06:11:00 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f000000010841e20c050054a8c984ca029b189f1b882de4e41a0e982de47a", 0x1f) [ 732.547861][T22167] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. 06:11:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d77c41cb69d952f41bdd2ac8bb8c43", 0x281}, {&(0x7f0000000000)="aa1d484e2400000000000000007704a71e023a27b2da9426f40100c0000000000000000000000000000070fa401e6fd4f0d687edf81936fb", 0x38}], 0x2) 06:11:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x6, 0x6, @scatter={0x0, 0x131, 0x0}, &(0x7f0000000000)="dd550280e696", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000}) [ 732.584695][ T25] audit: type=1400 audit(1575267060.443:133): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=".em0cgroup@wla~1proc//&'+" pid=22168 comm="syz-executor.2" 06:11:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone3(&(0x7f0000000480)={0xc3000200, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), 0x41, 0x0, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000380)=""/18}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0xff, 0x6, 0xe7, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x7, 0x6, 0x4, 0x0, 0x3, 0x8001}, r2, 0x3, r3, 0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x800, 0x10001, 0x1, 0x4, 0x4e01}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x23909abc3250e6ea) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000580)={0x40002, 0x0, [0x1, 0x4395b24, 0x2, 0x10000, 0x9, 0x7fffffff, 0x7, 0x5]}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000e710aed04ee5df74af27f4313210e67c8539f1b36703f2d6801e70b16a3b739a63c086ad4a626f99921382332f2f34e78d2e3d1e9411f02b0287fdece1913919852973953d34ce78dc8917b25c0c93f0dbfbbeeee1e02f5e6fc2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:11:03 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x1, 0x7ab0715dca68fab7, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "51d5205e4ca4b888d40047c37321760319cfff34bdfeff767c815dad738690b20cf465f6ef18683b77224a9922dd0c52d6f5d97258d9a57813477b6fc92af87b"}}, 0x80}}, 0x0) 06:11:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@delpolicy={0xc0, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@broadcast}}, [@sec_ctx={0x64, 0x8, {0x2c1, 0x8, 0x0, 0x0, 0xc, "ca294f44787ffd478a1ecb1c6388731eaac324cb74df8af85225c31b2a116071f6dc718844059a8d0a1545038612ab3d7bb2876d58ac5f024af1afb790a5e3a5eb12412fa4925fba3d15453f6f5991d2b59e955bb2d3bcbe"}}, @policy_type={0xc}]}, 0xc0}}, 0x0) 06:11:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000000c0)={'stack ', '.em0cgroup@wla~1proc//&\'+\x00'}, 0x20) 06:11:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x6, 0x6, @scatter={0x0, 0x131, 0x0}, &(0x7f0000000000)="dd550280e696", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000}) 06:11:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000080)) [ 735.292249][ T25] audit: type=1400 audit(1575267063.153:134): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=".em0cgroup@wla~1proc//&'+" pid=22182 comm="syz-executor.2" 06:11:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000000c0)={'stack ', '.em0cgroup@wla~1proc//&\'+\x00'}, 0x20) 06:11:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) sync() 06:11:03 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r5}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x1, 0x7ab0715dca68fab7, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "51d5205e4ca4b888d40047c37321760319cfff34bdfeff767c815dad738690b20cf465f6ef18683b77224a9922dd0c52d6f5d97258d9a57813477b6fc92af87b"}}, 0x80}}, 0x0) 06:11:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x6, 0x6, @scatter={0x0, 0x131, 0x0}, &(0x7f0000000000)="dd550280e696", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000}) 06:11:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000080)) 06:11:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000000c0)={'stack ', '.em0cgroup@wla~1proc//&\'+\x00'}, 0x20) [ 735.519726][ T25] audit: type=1400 audit(1575267063.383:135): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=".em0cgroup@wla~1proc//&'+" pid=22200 comm="syz-executor.2" 06:11:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone3(&(0x7f0000000480)={0xc3000200, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), 0x41, 0x0, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000380)=""/18}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0xff, 0x6, 0xe7, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x7, 0x6, 0x4, 0x0, 0x3, 0x8001}, r2, 0x3, r3, 0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x800, 0x10001, 0x1, 0x4, 0x4e01}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x23909abc3250e6ea) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000580)={0x40002, 0x0, [0x1, 0x4395b24, 0x2, 0x10000, 0x9, 0x7fffffff, 0x7, 0x5]}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000e710aed04ee5df74af27f4313210e67c8539f1b36703f2d6801e70b16a3b739a63c086ad4a626f99921382332f2f34e78d2e3d1e9411f02b0287fdece1913919852973953d34ce78dc8917b25c0c93f0dbfbbeeee1e02f5e6fc2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:11:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 06:11:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000080)) 06:11:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x6, 0x6, @scatter={0x0, 0x131, 0x0}, &(0x7f0000000000)="dd550280e696", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000}) [ 735.834005][ T25] audit: type=1400 audit(1575267063.693:136): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=".em0cgroup@wla~1proc//&'+" pid=22218 comm="syz-executor.2" 06:11:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone3(&(0x7f0000000480)={0xc3000200, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), 0x41, 0x0, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000380)=""/18}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0xff, 0x6, 0xe7, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x7, 0x6, 0x4, 0x0, 0x3, 0x8001}, r2, 0x3, r3, 0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x800, 0x10001, 0x1, 0x4, 0x4e01}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x23909abc3250e6ea) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000580)={0x40002, 0x0, [0x1, 0x4395b24, 0x2, 0x10000, 0x9, 0x7fffffff, 0x7, 0x5]}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000e710aed04ee5df74af27f4313210e67c8539f1b36703f2d6801e70b16a3b739a63c086ad4a626f99921382332f2f34e78d2e3d1e9411f02b0287fdece1913919852973953d34ce78dc8917b25c0c93f0dbfbbeeee1e02f5e6fc2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:11:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) sync() 06:11:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 06:11:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl(r0, 0xffffffffffffffad, &(0x7f0000000080)) 06:11:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) 06:11:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 06:11:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone3(&(0x7f0000000480)={0xc3000200, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), 0x41, 0x0, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000380)=""/18}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0xff, 0x6, 0xe7, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x7, 0x6, 0x4, 0x0, 0x3, 0x8001}, r2, 0x3, r3, 0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x800, 0x10001, 0x1, 0x4, 0x4e01}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x23909abc3250e6ea) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000580)={0x40002, 0x0, [0x1, 0x4395b24, 0x2, 0x10000, 0x9, 0x7fffffff, 0x7, 0x5]}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000e710aed04ee5df74af27f4313210e67c8539f1b36703f2d6801e70b16a3b739a63c086ad4a626f99921382332f2f34e78d2e3d1e9411f02b0287fdece1913919852973953d34ce78dc8917b25c0c93f0dbfbbeeee1e02f5e6fc2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:11:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) 06:11:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000f92000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:11:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) sync() 06:11:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone3(&(0x7f0000000480)={0xc3000200, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), 0x41, 0x0, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000380)=""/18}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0xff, 0x6, 0xe7, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x7, 0x6, 0x4, 0x0, 0x3, 0x8001}, r2, 0x3, r3, 0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x800, 0x10001, 0x1, 0x4, 0x4e01}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x23909abc3250e6ea) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000580)={0x40002, 0x0, [0x1, 0x4395b24, 0x2, 0x10000, 0x9, 0x7fffffff, 0x7, 0x5]}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000e710aed04ee5df74af27f4313210e67c8539f1b36703f2d6801e70b16a3b739a63c086ad4a626f99921382332f2f34e78d2e3d1e9411f02b0287fdece1913919852973953d34ce78dc8917b25c0c93f0dbfbbeeee1e02f5e6fc2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:11:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 06:11:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000f92000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:11:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) 06:11:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) sync() 06:11:04 executing program 4: pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:11:04 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000f92000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:11:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone3(&(0x7f0000000480)={0xc3000200, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), 0x41, 0x0, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000380)=""/18}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0xff, 0x6, 0xe7, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x7, 0x6, 0x4, 0x0, 0x3, 0x8001}, r2, 0x3, r3, 0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x800, 0x10001, 0x1, 0x4, 0x4e01}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x23909abc3250e6ea) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000580)={0x40002, 0x0, [0x1, 0x4395b24, 0x2, 0x10000, 0x9, 0x7fffffff, 0x7, 0x5]}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000e710aed04ee5df74af27f4313210e67c8539f1b36703f2d6801e70b16a3b739a63c086ad4a626f99921382332f2f34e78d2e3d1e9411f02b0287fdece1913919852973953d34ce78dc8917b25c0c93f0dbfbbeeee1e02f5e6fc2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:11:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000100)) 06:11:05 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000f92000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:11:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone3(&(0x7f0000000480)={0xc3000200, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), 0x41, 0x0, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000380)=""/18}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0xff, 0x6, 0xe7, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x7, 0x6, 0x4, 0x0, 0x3, 0x8001}, r2, 0x3, r3, 0x8) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x800, 0x10001, 0x1, 0x4, 0x4e01}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x23909abc3250e6ea) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000580)={0x40002, 0x0, [0x1, 0x4395b24, 0x2, 0x10000, 0x9, 0x7fffffff, 0x7, 0x5]}) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000e710aed04ee5df74af27f4313210e67c8539f1b36703f2d6801e70b16a3b739a63c086ad4a626f99921382332f2f34e78d2e3d1e9411f02b0287fdece1913919852973953d34ce78dc8917b25c0c93f0dbfbbeeee1e02f5e6fc2", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:11:05 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 06:11:05 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:05 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f00000015c0)="731247f8bf09abec01ced5d4dd6e92aa62aa7d935b7e32ca5c14d70409a996a1de1cf7f93a4586204c034bd8e4c941d69f646bd4ac73715023d30170e4da386060ff01c4", 0xb9, 0x8800, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x62, 0x0) 06:11:05 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x3, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') 06:11:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) [ 737.852602][T22320] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:11:05 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x881, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 06:11:06 executing program 4: pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:11:06 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f00000015c0)="731247f8bf09abec01ced5d4dd6e92aa62aa7d935b7e32ca5c14d70409a996a1de1cf7f93a4586204c034bd8e4c941d69f646bd4ac73715023d30170e4da386060ff01c4", 0xb9, 0x8800, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x62, 0x0) 06:11:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0xe9b038d1c8b8214d}, 0x14}}, 0x0) 06:11:06 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:06 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x881, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 06:11:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 06:11:06 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x881, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 06:11:06 executing program 2: pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:11:06 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f00000015c0)="731247f8bf09abec01ced5d4dd6e92aa62aa7d935b7e32ca5c14d70409a996a1de1cf7f93a4586204c034bd8e4c941d69f646bd4ac73715023d30170e4da386060ff01c4", 0xb9, 0x8800, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x62, 0x0) 06:11:06 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x881, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 06:11:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 06:11:06 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f00000015c0)="731247f8bf09abec01ced5d4dd6e92aa62aa7d935b7e32ca5c14d70409a996a1de1cf7f93a4586204c034bd8e4c941d69f646bd4ac73715023d30170e4da386060ff01c4", 0xb9, 0x8800, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x62, 0x0) 06:11:07 executing program 4: pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:11:07 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:07 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:07 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 06:11:07 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:08 executing program 2: pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:11:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x129}], 0x4, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:08 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:08 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:08 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:09 executing program 4: pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 06:11:09 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0xae3514424ac99fbd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) 06:11:09 executing program 5: r0 = memfd_create(&(0x7f0000000180)='systemsystemnodev\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf0c0079be7a2ce3c134108fe74950f9b93a5ea0cee7257225501bfbd9a2d7a0ec8c80000000f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d890a676ec576e6002c7cd466ebd35812a2d3e432b9ce919a2795c1a2104e3fef4bdc99f31d046a7036c13c8b86314219123c233beca408dd9f82c124c794f7091e2b1023e629b02cda6d3ae0359817c5ad0ff74ed7d8973841c157945f7ea2aeba908227b92e995eceb6039da1c82f59527a81bc3efc82e30d345cbc9a14e11dca36ea2ed921d3740210f66f32e73b897cca2b1550053d8a4cc76edbeb16e3e4fd678792d290e73cc1b159b8f5b678b7b5f65d1d1076cf0554d76c553a670f26f34d544f1dea25724c7f895d2f1f1669c902e24d6169d941fbee0d1c74de251424cf0baac37166fc1ef3c64b249ddeff686732645f8e47a52ee6663ab9ae502ad90d429744c6826ea129c26a2e3ace2307946037dc902227d065dac5697be68b4c20af648832af4867bcb32d90306e3b34680b7acc26c198a009a00f0e62b2e3c0d48c9eff319fc247a49fa0ad0525dc4d39f9c558cb87c0fe2515d5f75a8535c35f74933d1ec4a4c55469180dbd19dd95448e8d84083dd0d164b3bc585ea481f3fb071a6c195dcb5e758ab3f1729a59ebbcd10df4cc812e19d2fd31153ce0ebe9ec42ab1f8ff8d3e3637b20fe79624f3c70e7a18b15b255daec64e478df04744c4b14146f327f62e63fd491a86895baec19e17a17aeef55d6ac8cde8a4416"], 0x3c) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x7) r5 = gettid() tkill(r5, 0x3c) 06:11:09 executing program 2: pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 741.737176][T22634] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/3' not defined. 06:11:09 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x10000, @dev}], 0x1c) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x60, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1000}, 0x2c) 06:11:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 06:11:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 06:11:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad22780648c6394fb0124fc0010000b400c000200053582c137153e370900018025643000d1bd", 0x2e}], 0x1}, 0x0) [ 742.526195][T22753] ptrace attach of "/root/syz-executor.4"[9096] was attempted by "/root/syz-executor.4"[22753] [ 742.598418][T22756] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 742.654516][T22748] overlayfs: filesystem on './file0' not supported as upperdir [ 742.800665][T22756] device 00 entered promiscuous mode [ 742.834354][T22859] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 742.867213][T22859] device 10 entered promiscuous mode 06:11:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100000000000000075d2dd15b6210d53eed19bc0080000033270c6a98d91c22def1125d7b1e821039a85ad8b91cea336a1b57f45a0788e3aba04551e4a522e15c7ce71553059a5ef83c2ab06a52fcfce7c467c7e6260464a4770e41f0fa8ae7891e20e1780931f3faf450b02b83048c1a9efa4a7c790000cbdd7bcd17db6d80a0b70ce886da58", 0x129}], 0x4, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x50, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002800817ee45de087715082cf0400b0eb040028001600110a0586f9835b3f2f009148790028f85acc7c45", 0x2e}], 0x1}, 0x0) 06:11:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 06:11:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 06:11:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 06:11:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad22780648c6394fb0124fc0010000b400c000200053582c137153e370900018025643000d1bd", 0x2e}], 0x1}, 0x0) 06:11:11 executing program 5: r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000031c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@ptr={0x0, 0x0, 0x0, 0x9}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000003100)=""/179, 0x3a, 0xb3, 0x8}, 0x20) [ 743.552209][T22874] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 743.555240][T22866] overlayfs: conflicting lowerdir path [ 743.567478][T22873] ptrace attach of "/root/syz-executor.4"[9096] was attempted by "/root/syz-executor.4"[22873] [ 743.661473][T22880] BPF:[2] FUNC_PROTO (anon) 06:11:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) [ 743.690042][T22880] BPF:return=0 args=( [ 743.706484][T22880] BPF:1 (anon) [ 743.718081][T22880] BPF:) [ 743.735456][T22880] BPF: 06:11:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 743.744753][T22880] BPF:Invalid arg#1 [ 743.761362][T22880] BPF: [ 743.761362][T22880] 06:11:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad22780648c6394fb0124fc0010000b400c000200053582c137153e370900018025643000d1bd", 0x2e}], 0x1}, 0x0) [ 743.790409][T22884] ptrace attach of "/root/syz-executor.4"[9096] was attempted by "/root/syz-executor.4"[22884] [ 743.792340][T22885] BPF:[2] FUNC_PROTO (anon) 06:11:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 06:11:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) [ 743.900891][T22885] BPF:return=0 args=( [ 743.930228][T22885] BPF:1 (anon) [ 743.971415][T22893] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 743.981192][T22885] BPF:) [ 743.995319][T22885] BPF: [ 743.999210][T22894] ptrace attach of "/root/syz-executor.4"[9096] was attempted by "/root/syz-executor.4"[22894] [ 744.016042][T22885] BPF:Invalid arg#1 [ 744.036906][T22885] BPF: [ 744.036906][T22885] [ 744.052730][T22897] overlayfs: conflicting lowerdir path 06:11:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x129}], 0x4, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:14 executing program 5: r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 06:11:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 06:11:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 06:11:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad22780648c6394fb0124fc0010000b400c000200053582c137153e370900018025643000d1bd", 0x2e}], 0x1}, 0x0) 06:11:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 746.682907][T22906] overlayfs: conflicting lowerdir path [ 746.698054][T22916] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 746.722593][T22917] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 06:11:14 executing program 4: open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r0, r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 746.793149][T22913] overlayfs: conflicting lowerdir path [ 746.819990][T22917] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 06:11:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') dup2(r1, r2) 06:11:14 executing program 4: open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r0, r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:11:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @remote, 0x1c}]}, &(0x7f0000000180)=0x10) 06:11:14 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) 06:11:15 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff80, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"/562, @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 06:11:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x129}], 0x4, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') dup2(r1, r2) 06:11:17 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7fffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0xffff) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000300000000fcdbdf25028939e0aa7e6761fa00000014000900000000000000000000000000000500000000000000000000080003"], 0x3}, 0x1, 0x0, 0x0, 0x2000005}, 0x80) syz_genetlink_get_family_id$team(0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x3a) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x4, 0xfb89]) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[]}}, 0x40001) 06:11:17 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@caif=@dgm, 0xffffffffffffff67, 0x0, 0xfffffffffffffed9}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000580)='ip6_vti0\x00') 06:11:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x1, {0x0, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xf7509b2120d065a2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0xc0000080) inotify_rm_watch(0xffffffffffffffff, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x8000, 0x151801) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) preadv(r8, 0x0, 0x0, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/vmidi#\x00', 0x400000000040, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000000640)="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", 0x187, 0x0, 0x0, 0xffffffffffffff58) sendto$inet(r9, 0x0, 0x0, 0x4000002, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 06:11:17 executing program 4: open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r0, r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:11:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') dup2(r1, r2) 06:11:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:11:17 executing program 4: open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r0, r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 749.967984][T23020] usb usb7: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 06:11:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') dup2(r1, r2) 06:11:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:11:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd0e9f5a47009833063800"}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) pipe(0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x8001, 0x0, "36b482f83f619d4ce6324681eb8eb9cab4156767c087a52c0da3615266fb90cf22c9ed8cabb0dbcde7e2d8cf5e4ac3ab8b75377ec8c44dcd507d0aef2e1775b25962f7d8318942a64e57cbfc6df483da"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 750.263828][T23081] usb usb7: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 06:11:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x1, {0x0, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xf7509b2120d065a2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0xc0000080) inotify_rm_watch(0xffffffffffffffff, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x8000, 0x151801) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) preadv(r8, 0x0, 0x0, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/vmidi#\x00', 0x400000000040, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720034fac41f1de628e2a3166ec21e03c68a60708328e1606a83211bc78be79097861ce52747ac474593d76f9ec5cdd91725cb16e62b4bb027fbb96eab344de0401076c6345a7d32e9fe9ba1e68ac07081a7d1e0ed1eb9e96b41214af554f1831dfd8bd2b466789f4295317d17c138abe5fa9044a44792e9aecfb3f9130ff673786a8ef2b14c4999c29a5713c2fb5e35f2fae0d58b64355a697efd45e36528e57c68a62c6edc7879962e05419c7c5fa64ec92e670821df50d0f3a7312d2120f363954", 0x187, 0x0, 0x0, 0xffffffffffffff58) sendto$inet(r9, 0x0, 0x0, 0x4000002, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 06:11:20 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\x90\x92\xb3\xe6L\xc9l`w_G-\x18p\xffMG\x1c~\xefC\xb9\xf6Vr\x11x\x1d\x1dh\xe1[\xfa\xb4Y\\\xe0\xd3\xb0\xbd[W\x06#\x836\xd9\r>R\x1c\xca!MR\xbf\x93\xcc,P\x90\xdf\x8d^\xd4\xecW\xab\xdc!\x029\x82\xc1\xba5o\xa0{r\xb5v\xea\xd8\x05\xb0IC\xa3\xfa\xf8\x87\x1d\x06\x1d\xd9\x9aR\xe3\x036\xa3\n\xcb\xec\xa7; \xa1\xe1w\x0f~\xebw\xb3\x1a\xf2\x00\xf2\x97\xb2l?\x10M\xfc\xa7\xd3\xa5#-=\xf5\xf8\x10\x1f\xb2\xfe\x80\xb5s\x05gI\x9a\x1do\x15\x1f\xd8\x93Wb\xe48M\xd9') r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 06:11:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:11:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd0e9f5a47009833063800"}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) pipe(0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x8001, 0x0, "36b482f83f619d4ce6324681eb8eb9cab4156767c087a52c0da3615266fb90cf22c9ed8cabb0dbcde7e2d8cf5e4ac3ab8b75377ec8c44dcd507d0aef2e1775b25962f7d8318942a64e57cbfc6df483da"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:11:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x1, {0x0, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xf7509b2120d065a2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0xc0000080) inotify_rm_watch(0xffffffffffffffff, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x8000, 0x151801) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) preadv(r8, 0x0, 0x0, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/vmidi#\x00', 0x400000000040, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000000640)="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", 0x187, 0x0, 0x0, 0xffffffffffffff58) sendto$inet(r9, 0x0, 0x0, 0x4000002, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 06:11:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd0e9f5a47009833063800"}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) pipe(0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x8001, 0x0, "36b482f83f619d4ce6324681eb8eb9cab4156767c087a52c0da3615266fb90cf22c9ed8cabb0dbcde7e2d8cf5e4ac3ab8b75377ec8c44dcd507d0aef2e1775b25962f7d8318942a64e57cbfc6df483da"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 752.875823][T23300] usb usb7: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 06:11:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000011c0)=r1, 0x1) 06:11:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r1, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:11:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd0e9f5a47009833063800"}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) pipe(0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x8001, 0x0, "36b482f83f619d4ce6324681eb8eb9cab4156767c087a52c0da3615266fb90cf22c9ed8cabb0dbcde7e2d8cf5e4ac3ab8b75377ec8c44dcd507d0aef2e1775b25962f7d8318942a64e57cbfc6df483da"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:11:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x1, {0x0, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xf7509b2120d065a2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0xc0000080) inotify_rm_watch(0xffffffffffffffff, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x8000, 0x151801) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) preadv(r8, 0x0, 0x0, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/vmidi#\x00', 0x400000000040, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000000640)="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", 0x187, 0x0, 0x0, 0xffffffffffffff58) sendto$inet(r9, 0x0, 0x0, 0x4000002, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 06:11:21 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x31d) [ 753.236564][T23318] usb usb7: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 06:11:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x30, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}}, 0x0) 06:11:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd0e9f5a47009833063800"}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) pipe(0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x8001, 0x0, "36b482f83f619d4ce6324681eb8eb9cab4156767c087a52c0da3615266fb90cf22c9ed8cabb0dbcde7e2d8cf5e4ac3ab8b75377ec8c44dcd507d0aef2e1775b25962f7d8318942a64e57cbfc6df483da"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:11:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd0e9f5a47009833063800"}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) pipe(0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x8001, 0x0, "36b482f83f619d4ce6324681eb8eb9cab4156767c087a52c0da3615266fb90cf22c9ed8cabb0dbcde7e2d8cf5e4ac3ab8b75377ec8c44dcd507d0aef2e1775b25962f7d8318942a64e57cbfc6df483da"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:11:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000011c0)=r1, 0x1) 06:11:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x1, {0x0, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xf7509b2120d065a2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0xc0000080) inotify_rm_watch(0xffffffffffffffff, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x8000, 0x151801) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) preadv(r8, 0x0, 0x0, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/vmidi#\x00', 0x400000000040, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000000640)="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", 0x187, 0x0, 0x0, 0xffffffffffffff58) sendto$inet(r9, 0x0, 0x0, 0x4000002, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 06:11:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000011c0)=r1, 0x1) 06:11:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x1, {0x0, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xf7509b2120d065a2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0xc0000080) inotify_rm_watch(0xffffffffffffffff, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x8000, 0x151801) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) preadv(r8, 0x0, 0x0, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/vmidi#\x00', 0x400000000040, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000000640)="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", 0x187, 0x0, 0x0, 0xffffffffffffff58) sendto$inet(r9, 0x0, 0x0, 0x4000002, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 06:11:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000011c0)=r1, 0x1) 06:11:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0xaa, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x1d, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 06:11:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0xfe, 0x9, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200)}, 0x144, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) clock_gettime(0x2000000000000006, &(0x7f0000000300)) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={{0x0, 0x7530}, {0x77359400}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffe0d, 0xee68, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffefffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x1, r1, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x20) inotify_init1(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x10000000004053a, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff69) r7 = dup(r6) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffc}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0xd84161b7992131a) write$cgroup_type(r7, &(0x7f0000000100)='threaded\x00', 0xffea) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) 06:11:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000011c0)=r1, 0x1) 06:11:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd0e9f5a47009833063800"}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) pipe(0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x8001, 0x0, "36b482f83f619d4ce6324681eb8eb9cab4156767c087a52c0da3615266fb90cf22c9ed8cabb0dbcde7e2d8cf5e4ac3ab8b75377ec8c44dcd507d0aef2e1775b25962f7d8318942a64e57cbfc6df483da"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 06:11:22 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 06:11:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000011c0)=r1, 0x1) 06:11:22 executing program 4: r0 = socket$caif_stream(0x25, 0x1, 0x1) connect$caif(r0, &(0x7f0000000140), 0x18) 06:11:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000100)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000011c0)=r1, 0x1) 06:11:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x1, {0x0, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xf7509b2120d065a2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0xc0000080) inotify_rm_watch(0xffffffffffffffff, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x8000, 0x151801) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) preadv(r8, 0x0, 0x0, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @dev={[], 0xc}}, 0x14) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/vmidi#\x00', 0x400000000040, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000000640)="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", 0x187, 0x0, 0x0, 0xffffffffffffff58) sendto$inet(r9, 0x0, 0x0, 0x4000002, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 06:11:22 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40a104, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = getpgrp(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0x100000001, 0x0, 0x8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000140), 0x4) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000002c0)=0x100, 0x4) setpriority(0x0, r2, 0xffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000000140)={0x6, 0x6, 0x5, 0x5, 0x2, 0x3, 0x6}) socket$isdn(0x22, 0x3, 0x25) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000240000008000000024000000000100000100000087060000060000000600000006ffff7f00000000"]) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000001c0)={@broadcast, @local, @broadcast}, &(0x7f0000000200)=0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$DRM_IOCTL_AGP_ENABLE(r7, 0x40086432, &(0x7f0000000380)=0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r7, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000140), 0x4) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='eth1\x00'], &(0x7f0000000780)=[0x0, &(0x7f0000000100)='!\x00']) 06:11:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:22 executing program 3: r0 = fsopen(&(0x7f00000000c0)='gfs2meta\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x2000080001, 0x0) dup2(r4, r0) 06:11:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc4, &(0x7f0000000000)) 06:11:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") unshare(0x8000400) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) getsockopt$packet_buf(r3, 0x111, 0x2, &(0x7f0000000400)=""/162, &(0x7f0000000040)=0xa2) 06:11:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc4, &(0x7f0000000000)) 06:11:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r0, 0x0, 0x50, 0x0, &(0x7f0000000380)) 06:11:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc4, &(0x7f0000000000)) 06:11:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:23 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40a104, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = getpgrp(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0x100000001, 0x0, 0x8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000140), 0x4) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000002c0)=0x100, 0x4) setpriority(0x0, r2, 0xffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000000140)={0x6, 0x6, 0x5, 0x5, 0x2, 0x3, 0x6}) socket$isdn(0x22, 0x3, 0x25) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000240000008000000024000000000100000100000087060000060000000600000006ffff7f00000000"]) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000001c0)={@broadcast, @local, @broadcast}, &(0x7f0000000200)=0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$DRM_IOCTL_AGP_ENABLE(r7, 0x40086432, &(0x7f0000000380)=0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r7, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000140), 0x4) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='eth1\x00'], &(0x7f0000000780)=[0x0, &(0x7f0000000100)='!\x00']) 06:11:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc4, &(0x7f0000000000)) 06:11:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:24 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40a104, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = getpgrp(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0x100000001, 0x0, 0x8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000140), 0x4) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000002c0)=0x100, 0x4) setpriority(0x0, r2, 0xffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000000140)={0x6, 0x6, 0x5, 0x5, 0x2, 0x3, 0x6}) socket$isdn(0x22, 0x3, 0x25) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000240000008000000024000000000100000100000087060000060000000600000006ffff7f00000000"]) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000001c0)={@broadcast, @local, @broadcast}, &(0x7f0000000200)=0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$DRM_IOCTL_AGP_ENABLE(r7, 0x40086432, &(0x7f0000000380)=0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r7, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000140), 0x4) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='eth1\x00'], &(0x7f0000000780)=[0x0, &(0x7f0000000100)='!\x00']) 06:11:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:25 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40a104, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = getpgrp(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x20, 0x100000001, 0x0, 0x8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000380)=0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000140), 0x4) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000002c0)=0x100, 0x4) setpriority(0x0, r2, 0xffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000000140)={0x6, 0x6, 0x5, 0x5, 0x2, 0x3, 0x6}) socket$isdn(0x22, 0x3, 0x25) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000240000008000000024000000000100000100000087060000060000000600000006ffff7f00000000"]) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000001c0)={@broadcast, @local, @broadcast}, &(0x7f0000000200)=0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) ioctl$DRM_IOCTL_AGP_ENABLE(r7, 0x40086432, &(0x7f0000000380)=0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(r7, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000140), 0x4) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='eth1\x00'], &(0x7f0000000780)=[0x0, &(0x7f0000000100)='!\x00']) 06:11:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:25 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 06:11:25 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 06:11:25 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 06:11:25 executing program 2: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xf000, 0x0, 0x11, 0x0, @dev, @remote}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 06:11:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:26 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 06:11:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:26 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x0, 0x6}) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003c80), 0x38e, 0x62, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x8, 0x4) 06:11:26 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 06:11:26 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 06:11:26 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x0, 0x6}) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003c80), 0x38e, 0x62, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x8, 0x4) 06:11:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4000000004, &(0x7f0000000080)="441f06638d0000000000000e6d0000b69c14bbf1a236b160ba6b3abe0f", 0x1d) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f00000001c0)=0x9) 06:11:26 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 06:11:26 executing program 5: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2716, 0x0, &(0x7f0000000040)) 06:11:26 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x0, 0x6}) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003c80), 0x38e, 0x62, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x8, 0x4) 06:11:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x80000001, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000280)) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 06:11:26 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) 06:11:26 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 06:11:26 executing program 5: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2716, 0x0, &(0x7f0000000040)) 06:11:26 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:27 executing program 5: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2716, 0x0, &(0x7f0000000040)) 06:11:27 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x0, 0x6}) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003c80), 0x38e, 0x62, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x8, 0x4) 06:11:27 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:11:27 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) 06:11:27 executing program 2: r0 = socket(0x20000000000000a, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000001c0)=0x24c04635, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) 06:11:27 executing program 5: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2716, 0x0, &(0x7f0000000040)) 06:11:27 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) 06:11:27 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120000020000000042a3806fe76902bc3d85a31d47640472332fd0692d0902055409bdd405ce8ea39f30bed8349a9888ec86c0dd011861c4e80bd62256c289f663e82259db2c680cbf31ad5243568a1668021477b79b17d83f7f776aad8baa582cc4df6bd9eee413c307e104baea8a283d8a0f9f52d519bad3b78eb1122a34f1960875fe0916e16a2a2306fa7545e6788f5e7469707e89f64be84b2f04c378b1f87ad5f6878092fadd3996f92e32cf7819359f3dd4789e57e8595849fcb2964fd8a056ace0b44b5787"], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 06:11:27 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) mlock(&(0x7f000078d000/0x4000)=nil, 0x4000) 06:11:27 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRESDEC], 0x24}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f00000001c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="119061130600de880557ba988787e3ff8f411e1de0622bef823e088a20369139e869652fd87291402d65a9dbf09ff29647438f0e940b685b753938cc75e9c059556f882c134f0e71f03d59565bfa8d293d13d39b3ad33b01bcae221c2c"}, {&(0x7f0000000580)="88ac32811e88f69930b00ed39cdaf2014fae07ac44d6dfea321ef7ddcc78e19e059faa1563812d720dccc97f32cf16e9677f844aad0b586c9ef56042f76f20c0f9a040853ce9a6fb5d913ae8314072a2b87bb723de1fe49e3efe"}, {&(0x7f0000000600)="dba6cfef1aab15a7d17e7be6ac8b6c517e5760a0116ddb8f202e25455223dbca292477c55b20b67b58f3c2576917566834118e169a10ee639442f2e3880132ce911d2a99e2c061033f80423c6d04282ca20d47d8ec892aa2d431b980726955916e35c4c5be40c44ed0c9cd71859b9f7eac011ccd6dcecd7ff82fe145410ded6297fe4b51452356454016f2044b29cb6f16567e142a82747de8b6522bebf162df71c01572f857d365b5a548cdf9ed269a41814c3a9063540f6ae0cf032033c8"}], 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0x0, "8212861767aae67eee300791800256bca6f79e040de9989a99266c82d4c90bb53857ca10113fb7963a68c10deaa4229c1c36557c3fc52356f23625480dfb9d2ef3e0dfd3beaa10db08d676a38f0cbfbcee105a97387b7d22dd2667de666a638bceb198807bb47592e7a5df8852c8695dff3d7474c5e237049a19ff1957752ca40fa308bc8c730f0407855f5e395bca150f79856dc239ef882e511f1c9b04c89fc6ebdaeafaa10b12231c0203272c2d9508e7a4f06b0006775c3992ce2a81c6b7c7623b33fa7a083ef167c33cf35847f0fba76374670f753d89755c71bb"}, {0x0, 0x0, 0x0, "7a6ab59fc03bc7a1ab0d34acfc246859bd9a6510984983fd6c1ccea1d2526bd3df6dd63313923e3f7982bd"}, {0x0, 0x0, 0x0, "3e83eb27e22fca2598be7139b4c25e5a3d9ab3f538f62857cbedcdd09bc8160f7a2bf37bfa6cc17dd85d55253e8904e9b15bd53feebe2744feb800c8d0e87fd47c5ccba5823dd258791bf4facfd04cdae5e303528f3fb0162c41995ae3bafe9e585603fa64ea4ad8aba61f24abd9"}]}}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="edb37613c7b6"}, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="9793d70bb0e640cbd31554669a740fde9685e123d5ca93032d9877ec984850341c99233d77065d99973d07ecfed1c784b83ed1b212ea5a42f28238eea803d1bbe8c4e4ca305abe453b39ee2c7d148def58ff2a4c270ecbac4307303166460ab9e85ccc9942eacbdb5e2b94d47b3ecb4c99574c2891d38da1e98e608ec93d7d058c3efe687478560bb3689c911f68c7d1c80b81e424c65a0b57e9e2d158dec99db9b99b23bb8d5f7a69017d350b38ba597f59ce463bdc824601e9839d16e32d857c6b55f09bc701d5c9e08ebf95943cf4080c06c884320af50822835f0a7591089d727f5a81ff2b9070cb58c5960a6eafbe947baa8b149c", 0x374}, {&(0x7f0000000dc0)="edd05dcdb19fea816d43caca7b165b8fd613ecdb787ce0c2ff5c00d50ae22e31bce1c0e18d36bfc55a9f1f5ca18d28448e357f147c4ee572cc02ff166c601fdd820d359067efb88902e26e19a192f14ee72fc634e9766bccb90c1b9c9c333804d3fe07d4bd67c503e53ee3451fcab6a045e3f8d10491d489726375db0f7e7c5929fea5c04ae1ac29f7d122c8a89af4d218b499eeda36e9d9273fa31b94c7cab70e49e28b77a0c949deed56f4ab2e69d9ec41236369d5833a0682bdb53708daaee77efad39ef7e610760fe7702da8ade0882f35402840c444036e6e310e68027eb82f87d12ad94b7f7edaf4"}], 0x0, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, "798f19bc04b97d59bd9fe2ef1d49cc73ad64cc74bd8ec43bfb8ea1e1c8e1b9ac0e5d8f5f2afd248ea36cda1e28756ed54fcf178db2e6a7740260b4acf15f225ff6e2d559a077622e9d4f1e745ce2c9591336fba7d6a83acb56c5c7309af15c647cef96e52d6848afd6218a932c800942d769f25b6870498d6b6d7217b254eda726bb0977484d632e8cdd2b4806202af8c7ea69"}]}}], 0x3ffffffffffff4d, 0x0) 06:11:27 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) 06:11:28 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:28 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120000020000000042a3806fe76902bc3d85a31d47640472332fd0692d0902055409bdd405ce8ea39f30bed8349a9888ec86c0dd011861c4e80bd62256c289f663e82259db2c680cbf31ad5243568a1668021477b79b17d83f7f776aad8baa582cc4df6bd9eee413c307e104baea8a283d8a0f9f52d519bad3b78eb1122a34f1960875fe0916e16a2a2306fa7545e6788f5e7469707e89f64be84b2f04c378b1f87ad5f6878092fadd3996f92e32cf7819359f3dd4789e57e8595849fcb2964fd8a056ace0b44b5787"], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 06:11:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e666174020204010002000270fff8", 0xfffffffffffffd0b}], 0x0, 0x0) 06:11:28 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRESDEC], 0x24}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f00000001c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="119061130600de880557ba988787e3ff8f411e1de0622bef823e088a20369139e869652fd87291402d65a9dbf09ff29647438f0e940b685b753938cc75e9c059556f882c134f0e71f03d59565bfa8d293d13d39b3ad33b01bcae221c2c"}, {&(0x7f0000000580)="88ac32811e88f69930b00ed39cdaf2014fae07ac44d6dfea321ef7ddcc78e19e059faa1563812d720dccc97f32cf16e9677f844aad0b586c9ef56042f76f20c0f9a040853ce9a6fb5d913ae8314072a2b87bb723de1fe49e3efe"}, {&(0x7f0000000600)="dba6cfef1aab15a7d17e7be6ac8b6c517e5760a0116ddb8f202e25455223dbca292477c55b20b67b58f3c2576917566834118e169a10ee639442f2e3880132ce911d2a99e2c061033f80423c6d04282ca20d47d8ec892aa2d431b980726955916e35c4c5be40c44ed0c9cd71859b9f7eac011ccd6dcecd7ff82fe145410ded6297fe4b51452356454016f2044b29cb6f16567e142a82747de8b6522bebf162df71c01572f857d365b5a548cdf9ed269a41814c3a9063540f6ae0cf032033c8"}], 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0x0, "8212861767aae67eee300791800256bca6f79e040de9989a99266c82d4c90bb53857ca10113fb7963a68c10deaa4229c1c36557c3fc52356f23625480dfb9d2ef3e0dfd3beaa10db08d676a38f0cbfbcee105a97387b7d22dd2667de666a638bceb198807bb47592e7a5df8852c8695dff3d7474c5e237049a19ff1957752ca40fa308bc8c730f0407855f5e395bca150f79856dc239ef882e511f1c9b04c89fc6ebdaeafaa10b12231c0203272c2d9508e7a4f06b0006775c3992ce2a81c6b7c7623b33fa7a083ef167c33cf35847f0fba76374670f753d89755c71bb"}, {0x0, 0x0, 0x0, "7a6ab59fc03bc7a1ab0d34acfc246859bd9a6510984983fd6c1ccea1d2526bd3df6dd63313923e3f7982bd"}, {0x0, 0x0, 0x0, "3e83eb27e22fca2598be7139b4c25e5a3d9ab3f538f62857cbedcdd09bc8160f7a2bf37bfa6cc17dd85d55253e8904e9b15bd53feebe2744feb800c8d0e87fd47c5ccba5823dd258791bf4facfd04cdae5e303528f3fb0162c41995ae3bafe9e585603fa64ea4ad8aba61f24abd9"}]}}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="edb37613c7b6"}, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="9793d70bb0e640cbd31554669a740fde9685e123d5ca93032d9877ec984850341c99233d77065d99973d07ecfed1c784b83ed1b212ea5a42f28238eea803d1bbe8c4e4ca305abe453b39ee2c7d148def58ff2a4c270ecbac4307303166460ab9e85ccc9942eacbdb5e2b94d47b3ecb4c99574c2891d38da1e98e608ec93d7d058c3efe687478560bb3689c911f68c7d1c80b81e424c65a0b57e9e2d158dec99db9b99b23bb8d5f7a69017d350b38ba597f59ce463bdc824601e9839d16e32d857c6b55f09bc701d5c9e08ebf95943cf4080c06c884320af50822835f0a7591089d727f5a81ff2b9070cb58c5960a6eafbe947baa8b149c", 0x374}, {&(0x7f0000000dc0)="edd05dcdb19fea816d43caca7b165b8fd613ecdb787ce0c2ff5c00d50ae22e31bce1c0e18d36bfc55a9f1f5ca18d28448e357f147c4ee572cc02ff166c601fdd820d359067efb88902e26e19a192f14ee72fc634e9766bccb90c1b9c9c333804d3fe07d4bd67c503e53ee3451fcab6a045e3f8d10491d489726375db0f7e7c5929fea5c04ae1ac29f7d122c8a89af4d218b499eeda36e9d9273fa31b94c7cab70e49e28b77a0c949deed56f4ab2e69d9ec41236369d5833a0682bdb53708daaee77efad39ef7e610760fe7702da8ade0882f35402840c444036e6e310e68027eb82f87d12ad94b7f7edaf4"}], 0x0, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, "798f19bc04b97d59bd9fe2ef1d49cc73ad64cc74bd8ec43bfb8ea1e1c8e1b9ac0e5d8f5f2afd248ea36cda1e28756ed54fcf178db2e6a7740260b4acf15f225ff6e2d559a077622e9d4f1e745ce2c9591336fba7d6a83acb56c5c7309af15c647cef96e52d6848afd6218a932c800942d769f25b6870498d6b6d7217b254eda726bb0977484d632e8cdd2b4806202af8c7ea69"}]}}], 0x3ffffffffffff4d, 0x0) 06:11:28 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) mlock(&(0x7f000078d000/0x4000)=nil, 0x4000) 06:11:28 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 760.480924][ T25] audit: type=1800 audit(1575267088.343:137): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cpuacct.usage_sys" dev="sda1" ino=17087 res=0 06:11:28 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRESDEC], 0x24}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f00000001c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="119061130600de880557ba988787e3ff8f411e1de0622bef823e088a20369139e869652fd87291402d65a9dbf09ff29647438f0e940b685b753938cc75e9c059556f882c134f0e71f03d59565bfa8d293d13d39b3ad33b01bcae221c2c"}, {&(0x7f0000000580)="88ac32811e88f69930b00ed39cdaf2014fae07ac44d6dfea321ef7ddcc78e19e059faa1563812d720dccc97f32cf16e9677f844aad0b586c9ef56042f76f20c0f9a040853ce9a6fb5d913ae8314072a2b87bb723de1fe49e3efe"}, {&(0x7f0000000600)="dba6cfef1aab15a7d17e7be6ac8b6c517e5760a0116ddb8f202e25455223dbca292477c55b20b67b58f3c2576917566834118e169a10ee639442f2e3880132ce911d2a99e2c061033f80423c6d04282ca20d47d8ec892aa2d431b980726955916e35c4c5be40c44ed0c9cd71859b9f7eac011ccd6dcecd7ff82fe145410ded6297fe4b51452356454016f2044b29cb6f16567e142a82747de8b6522bebf162df71c01572f857d365b5a548cdf9ed269a41814c3a9063540f6ae0cf032033c8"}], 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0x0, "8212861767aae67eee300791800256bca6f79e040de9989a99266c82d4c90bb53857ca10113fb7963a68c10deaa4229c1c36557c3fc52356f23625480dfb9d2ef3e0dfd3beaa10db08d676a38f0cbfbcee105a97387b7d22dd2667de666a638bceb198807bb47592e7a5df8852c8695dff3d7474c5e237049a19ff1957752ca40fa308bc8c730f0407855f5e395bca150f79856dc239ef882e511f1c9b04c89fc6ebdaeafaa10b12231c0203272c2d9508e7a4f06b0006775c3992ce2a81c6b7c7623b33fa7a083ef167c33cf35847f0fba76374670f753d89755c71bb"}, {0x0, 0x0, 0x0, "7a6ab59fc03bc7a1ab0d34acfc246859bd9a6510984983fd6c1ccea1d2526bd3df6dd63313923e3f7982bd"}, {0x0, 0x0, 0x0, "3e83eb27e22fca2598be7139b4c25e5a3d9ab3f538f62857cbedcdd09bc8160f7a2bf37bfa6cc17dd85d55253e8904e9b15bd53feebe2744feb800c8d0e87fd47c5ccba5823dd258791bf4facfd04cdae5e303528f3fb0162c41995ae3bafe9e585603fa64ea4ad8aba61f24abd9"}]}}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="edb37613c7b6"}, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="9793d70bb0e640cbd31554669a740fde9685e123d5ca93032d9877ec984850341c99233d77065d99973d07ecfed1c784b83ed1b212ea5a42f28238eea803d1bbe8c4e4ca305abe453b39ee2c7d148def58ff2a4c270ecbac4307303166460ab9e85ccc9942eacbdb5e2b94d47b3ecb4c99574c2891d38da1e98e608ec93d7d058c3efe687478560bb3689c911f68c7d1c80b81e424c65a0b57e9e2d158dec99db9b99b23bb8d5f7a69017d350b38ba597f59ce463bdc824601e9839d16e32d857c6b55f09bc701d5c9e08ebf95943cf4080c06c884320af50822835f0a7591089d727f5a81ff2b9070cb58c5960a6eafbe947baa8b149c", 0x374}, {&(0x7f0000000dc0)="edd05dcdb19fea816d43caca7b165b8fd613ecdb787ce0c2ff5c00d50ae22e31bce1c0e18d36bfc55a9f1f5ca18d28448e357f147c4ee572cc02ff166c601fdd820d359067efb88902e26e19a192f14ee72fc634e9766bccb90c1b9c9c333804d3fe07d4bd67c503e53ee3451fcab6a045e3f8d10491d489726375db0f7e7c5929fea5c04ae1ac29f7d122c8a89af4d218b499eeda36e9d9273fa31b94c7cab70e49e28b77a0c949deed56f4ab2e69d9ec41236369d5833a0682bdb53708daaee77efad39ef7e610760fe7702da8ade0882f35402840c444036e6e310e68027eb82f87d12ad94b7f7edaf4"}], 0x0, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, "798f19bc04b97d59bd9fe2ef1d49cc73ad64cc74bd8ec43bfb8ea1e1c8e1b9ac0e5d8f5f2afd248ea36cda1e28756ed54fcf178db2e6a7740260b4acf15f225ff6e2d559a077622e9d4f1e745ce2c9591336fba7d6a83acb56c5c7309af15c647cef96e52d6848afd6218a932c800942d769f25b6870498d6b6d7217b254eda726bb0977484d632e8cdd2b4806202af8c7ea69"}]}}], 0x3ffffffffffff4d, 0x0) 06:11:28 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120000020000000042a3806fe76902bc3d85a31d47640472332fd0692d0902055409bdd405ce8ea39f30bed8349a9888ec86c0dd011861c4e80bd62256c289f663e82259db2c680cbf31ad5243568a1668021477b79b17d83f7f776aad8baa582cc4df6bd9eee413c307e104baea8a283d8a0f9f52d519bad3b78eb1122a34f1960875fe0916e16a2a2306fa7545e6788f5e7469707e89f64be84b2f04c378b1f87ad5f6878092fadd3996f92e32cf7819359f3dd4789e57e8595849fcb2964fd8a056ace0b44b5787"], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 06:11:28 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRESDEC], 0x24}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f00000001c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="119061130600de880557ba988787e3ff8f411e1de0622bef823e088a20369139e869652fd87291402d65a9dbf09ff29647438f0e940b685b753938cc75e9c059556f882c134f0e71f03d59565bfa8d293d13d39b3ad33b01bcae221c2c"}, {&(0x7f0000000580)="88ac32811e88f69930b00ed39cdaf2014fae07ac44d6dfea321ef7ddcc78e19e059faa1563812d720dccc97f32cf16e9677f844aad0b586c9ef56042f76f20c0f9a040853ce9a6fb5d913ae8314072a2b87bb723de1fe49e3efe"}, {&(0x7f0000000600)="dba6cfef1aab15a7d17e7be6ac8b6c517e5760a0116ddb8f202e25455223dbca292477c55b20b67b58f3c2576917566834118e169a10ee639442f2e3880132ce911d2a99e2c061033f80423c6d04282ca20d47d8ec892aa2d431b980726955916e35c4c5be40c44ed0c9cd71859b9f7eac011ccd6dcecd7ff82fe145410ded6297fe4b51452356454016f2044b29cb6f16567e142a82747de8b6522bebf162df71c01572f857d365b5a548cdf9ed269a41814c3a9063540f6ae0cf032033c8"}], 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0x0, "8212861767aae67eee300791800256bca6f79e040de9989a99266c82d4c90bb53857ca10113fb7963a68c10deaa4229c1c36557c3fc52356f23625480dfb9d2ef3e0dfd3beaa10db08d676a38f0cbfbcee105a97387b7d22dd2667de666a638bceb198807bb47592e7a5df8852c8695dff3d7474c5e237049a19ff1957752ca40fa308bc8c730f0407855f5e395bca150f79856dc239ef882e511f1c9b04c89fc6ebdaeafaa10b12231c0203272c2d9508e7a4f06b0006775c3992ce2a81c6b7c7623b33fa7a083ef167c33cf35847f0fba76374670f753d89755c71bb"}, {0x0, 0x0, 0x0, "7a6ab59fc03bc7a1ab0d34acfc246859bd9a6510984983fd6c1ccea1d2526bd3df6dd63313923e3f7982bd"}, {0x0, 0x0, 0x0, "3e83eb27e22fca2598be7139b4c25e5a3d9ab3f538f62857cbedcdd09bc8160f7a2bf37bfa6cc17dd85d55253e8904e9b15bd53feebe2744feb800c8d0e87fd47c5ccba5823dd258791bf4facfd04cdae5e303528f3fb0162c41995ae3bafe9e585603fa64ea4ad8aba61f24abd9"}]}}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="edb37613c7b6"}, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)="9793d70bb0e640cbd31554669a740fde9685e123d5ca93032d9877ec984850341c99233d77065d99973d07ecfed1c784b83ed1b212ea5a42f28238eea803d1bbe8c4e4ca305abe453b39ee2c7d148def58ff2a4c270ecbac4307303166460ab9e85ccc9942eacbdb5e2b94d47b3ecb4c99574c2891d38da1e98e608ec93d7d058c3efe687478560bb3689c911f68c7d1c80b81e424c65a0b57e9e2d158dec99db9b99b23bb8d5f7a69017d350b38ba597f59ce463bdc824601e9839d16e32d857c6b55f09bc701d5c9e08ebf95943cf4080c06c884320af50822835f0a7591089d727f5a81ff2b9070cb58c5960a6eafbe947baa8b149c", 0x374}, {&(0x7f0000000dc0)="edd05dcdb19fea816d43caca7b165b8fd613ecdb787ce0c2ff5c00d50ae22e31bce1c0e18d36bfc55a9f1f5ca18d28448e357f147c4ee572cc02ff166c601fdd820d359067efb88902e26e19a192f14ee72fc634e9766bccb90c1b9c9c333804d3fe07d4bd67c503e53ee3451fcab6a045e3f8d10491d489726375db0f7e7c5929fea5c04ae1ac29f7d122c8a89af4d218b499eeda36e9d9273fa31b94c7cab70e49e28b77a0c949deed56f4ab2e69d9ec41236369d5833a0682bdb53708daaee77efad39ef7e610760fe7702da8ade0882f35402840c444036e6e310e68027eb82f87d12ad94b7f7edaf4"}], 0x0, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, "798f19bc04b97d59bd9fe2ef1d49cc73ad64cc74bd8ec43bfb8ea1e1c8e1b9ac0e5d8f5f2afd248ea36cda1e28756ed54fcf178db2e6a7740260b4acf15f225ff6e2d559a077622e9d4f1e745ce2c9591336fba7d6a83acb56c5c7309af15c647cef96e52d6848afd6218a932c800942d769f25b6870498d6b6d7217b254eda726bb0977484d632e8cdd2b4806202af8c7ea69"}]}}], 0x3ffffffffffff4d, 0x0) 06:11:28 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) mlock(&(0x7f000078d000/0x4000)=nil, 0x4000) 06:11:28 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120000020000000042a3806fe76902bc3d85a31d47640472332fd0692d0902055409bdd405ce8ea39f30bed8349a9888ec86c0dd011861c4e80bd62256c289f663e82259db2c680cbf31ad5243568a1668021477b79b17d83f7f776aad8baa582cc4df6bd9eee413c307e104baea8a283d8a0f9f52d519bad3b78eb1122a34f1960875fe0916e16a2a2306fa7545e6788f5e7469707e89f64be84b2f04c378b1f87ad5f6878092fadd3996f92e32cf7819359f3dd4789e57e8595849fcb2964fd8a056ace0b44b5787"], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 06:11:29 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:29 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:29 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:11:29 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) mlock(&(0x7f000078d000/0x4000)=nil, 0x4000) 06:11:29 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) mlock(&(0x7f000078d000/0x4000)=nil, 0x4000) 06:11:29 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) mlock(&(0x7f000078d000/0x4000)=nil, 0x4000) 06:11:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x200000000003, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0xff, 0x8001}, 0x20) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr="c84b735dfd6a7e364f1bd2500d523c7d", 0x800, 0x2}, 0x20) 06:11:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="e1a400dd19e0838d8ae6b0f540a7bdd5a01a3c9c5b1db17b277daa39d55d57d12e50e0a66ee87d", 0x27}, {0x0}], 0x2}}], 0x1, 0x0) 06:11:30 executing program 4: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) mlock(&(0x7f000078d000/0x4000)=nil, 0x4000) 06:11:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:11:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="e1a400dd19e0838d8ae6b0f540a7bdd5a01a3c9c5b1db17b277daa39d55d57d12e50e0a66ee87d", 0x27}, {0x0}], 0x2}}], 0x1, 0x0) 06:11:31 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:31 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:31 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:31 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="e1a400dd19e0838d8ae6b0f540a7bdd5a01a3c9c5b1db17b277daa39d55d57d12e50e0a66ee87d", 0x27}, {0x0}], 0x2}}], 0x1, 0x0) 06:11:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800004000"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) request_key(0x0, 0x0, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x144}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0x0, 0x0, 0xea, [], 0x0}) pipe2(&(0x7f0000000140), 0x0) ioctl(0xffffffffffffffff, 0x800000000008982, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) 06:11:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="e1a400dd19e0838d8ae6b0f540a7bdd5a01a3c9c5b1db17b277daa39d55d57d12e50e0a66ee87d", 0x27}, {0x0}], 0x2}}], 0x1, 0x0) 06:11:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800004000"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) request_key(0x0, 0x0, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x144}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0x0, 0x0, 0xea, [], 0x0}) pipe2(&(0x7f0000000140), 0x0) ioctl(0xffffffffffffffff, 0x800000000008982, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) 06:11:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800004000"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) request_key(0x0, 0x0, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x144}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0x0, 0x0, 0xea, [], 0x0}) pipe2(&(0x7f0000000140), 0x0) ioctl(0xffffffffffffffff, 0x800000000008982, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) 06:11:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800004000"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) request_key(0x0, 0x0, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x144}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0x0, 0x0, 0xea, [], 0x0}) pipe2(&(0x7f0000000140), 0x0) ioctl(0xffffffffffffffff, 0x800000000008982, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) 06:11:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800004000"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) request_key(0x0, 0x0, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x144}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0x0, 0x0, 0xea, [], 0x0}) pipe2(&(0x7f0000000140), 0x0) ioctl(0xffffffffffffffff, 0x800000000008982, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) 06:11:33 executing program 0: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)) 06:11:33 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800004000"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) request_key(0x0, 0x0, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x144}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0x0, 0x0, 0xea, [], 0x0}) pipe2(&(0x7f0000000140), 0x0) ioctl(0xffffffffffffffff, 0x800000000008982, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) 06:11:33 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) pause() r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 06:11:33 executing program 0: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)) 06:11:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800004000"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) request_key(0x0, 0x0, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x144}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000280)={0x0, 0x0, 0xea, [], 0x0}) pipe2(&(0x7f0000000140), 0x0) ioctl(0xffffffffffffffff, 0x800000000008982, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000) 06:11:33 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 06:11:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) [ 766.214331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 766.220170][ C0] protocol 88fb is buggy, dev hsr_slave_1 06:11:34 executing program 0: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)) 06:11:34 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:34 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:34 executing program 0: r0 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)) 06:11:34 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000140)="1400000013000507ed0064d24ef862452658c653", 0x14}], 0x1, 0x0, 0x0, 0x300}, 0x0) 06:11:35 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:35 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 06:11:35 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:35 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:35 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 06:11:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 06:11:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x9, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 06:11:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) [ 768.065766][T25948] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) 06:11:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 06:11:36 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:36 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:36 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:36 executing program 0: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "f258fd4fa78f7b5a", "14da5067a069a1288e6860373b5796a1", "5bb477f7", "325dd4cfdc485731"}, 0x28) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) 06:11:36 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x2a801) sendfile(r3, r1, 0x0, 0x6f0a77bd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setfsgid(0x0) 06:11:36 executing program 0: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "f258fd4fa78f7b5a", "14da5067a069a1288e6860373b5796a1", "5bb477f7", "325dd4cfdc485731"}, 0x28) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) 06:11:37 executing program 0: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "f258fd4fa78f7b5a", "14da5067a069a1288e6860373b5796a1", "5bb477f7", "325dd4cfdc485731"}, 0x28) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) 06:11:37 executing program 3: r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)=@tipc=@id, 0x80) 06:11:37 executing program 0: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "f258fd4fa78f7b5a", "14da5067a069a1288e6860373b5796a1", "5bb477f7", "325dd4cfdc485731"}, 0x28) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) 06:11:37 executing program 4: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) r1 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 06:11:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:38 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c080000000000000aaaaaa9ecffffffffffffff000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f000000dfff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) 06:11:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 06:11:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:40 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x28d) connect$inet(r0, &(0x7f0000000680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 06:11:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:40 executing program 4: socketpair(0x24, 0x0, 0x0, &(0x7f0000000080)) 06:11:40 executing program 4: socketpair(0x24, 0x0, 0x0, &(0x7f0000000080)) 06:11:40 executing program 1: unshare(0x600) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) syncfs(r0) 06:11:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:41 executing program 4: socketpair(0x24, 0x0, 0x0, &(0x7f0000000080)) 06:11:41 executing program 2: r0 = socket(0x10, 0x8000000803, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write(r0, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x2c0) 06:11:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x135}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe0a, 0x0, 0x3ba, 0x0, 0xcb}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:41 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) dup3(r1, r0, 0x0) 06:11:41 executing program 4: socketpair(0x24, 0x0, 0x0, &(0x7f0000000080)) 06:11:41 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x801, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000c00)='j', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x33c00}], 0x1c0}}], 0x3, 0x0) 06:11:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r3, 0xd01cb83f3faa9aff}, 0x14}}, 0x0) 06:11:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr="b8594fb7a2c0a5845a4833d9d3289ec6", @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 06:11:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fchdir(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x7}) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xffff45d9, 0x0, 0x0, 0x23ff}) syz_open_pts(r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\xfeL \x00\x00\nz\x03', 0xffb}) 06:11:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xfffffffffffffffe, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) readv(r1, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) dup3(r0, r1, 0x0) tkill(r2, 0x5000000000014) 06:11:41 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x801, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000c00)='j', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x33c00}], 0x1c0}}], 0x3, 0x0) 06:11:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000000c0)) 06:11:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr="b8594fb7a2c0a5845a4833d9d3289ec6", @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 06:11:42 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x801, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000c00)='j', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x33c00}], 0x1c0}}], 0x3, 0x0) [ 774.655417][T27124] device bond0 entered promiscuous mode [ 774.712648][T27124] device bond_slave_0 entered promiscuous mode [ 774.746813][T27124] device bond_slave_1 entered promiscuous mode [ 774.766307][T27124] 8021q: adding VLAN 0 to HW filter on device bond0 06:11:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48295eb100000000000000075d2dd15b6210d53eed19bc0080000033270c6a98d91c22def1125d7b1e821039a85ad8b91cea336a1b57f45a0788e3aba04551e4a522e15c7ce71553059a5ef83c2ab06a52fcfce7c467c7e6260464a4770e41f0fa8ae7891e20e1780931f3faf450b02b83048c1a9efa4a7c790000cbdd7bcd17db6d80a0b70ce886da58743a43df1059f6ef39a8b6fa", 0x135}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe0a, 0x0, 0x3ba, 0x0, 0xcb}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000001d080)=""/102400, 0x19000}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000140)=""/6, 0x6}], 0x2fb, 0x0) 06:11:44 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x801, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000c00)='j', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="9e", 0x33c00}], 0x1c0}}], 0x3, 0x0) 06:11:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr="b8594fb7a2c0a5845a4833d9d3289ec6", @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 06:11:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fchdir(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x7}) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xffff45d9, 0x0, 0x0, 0x23ff}) syz_open_pts(r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\xfeL \x00\x00\nz\x03', 0xffb}) 06:11:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000000c0)) 06:11:44 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @rand_addr="b8594fb7a2c0a5845a4833d9d3289ec6", @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 776.671631][T27190] device bond0 left promiscuous mode [ 776.677859][T27190] device bond_slave_0 left promiscuous mode [ 776.688021][T27190] device bond_slave_1 left promiscuous mode 06:11:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000000c0)) 06:11:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000001d080)=""/102400, 0x19000}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000140)=""/6, 0x6}], 0x2fb, 0x0) 06:11:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000001d080)=""/102400, 0x19000}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000140)=""/6, 0x6}], 0x2fb, 0x0) 06:11:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000000c0)) 06:11:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000001d080)=""/102400, 0x19000}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000140)=""/6, 0x6}], 0x2fb, 0x0) [ 777.468835][T27298] device bond0 entered promiscuous mode [ 777.476972][T27298] device bond_slave_0 entered promiscuous mode [ 777.530094][T27298] device bond_slave_1 entered promiscuous mode [ 777.562539][T27298] 8021q: adding VLAN 0 to HW filter on device bond0 06:11:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @empty, 0x82b}}}, 0x38) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioperm(0x0, 0x7fff, 0x7ff) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000007000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:11:47 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2012, r0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x28562) 06:11:47 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x135}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe0a, 0x0, 0x3ba, 0x0, 0xcb}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 06:11:47 executing program 1: accept$alg(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') fcntl$setsig(0xffffffffffffffff, 0xa, 0x32) pipe(0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x5, 0x4) iopl(0x81) unshare(0x40000000) 06:11:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5452, &(0x7f0000000300)={{0x2}}) 06:11:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fchdir(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x7}) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xffff45d9, 0x0, 0x0, 0x23ff}) syz_open_pts(r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\xfeL \x00\x00\nz\x03', 0xffb}) [ 779.632224][T27327] [ 779.634613][T27327] ======================================================