[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 25.813938] kauditd_printk_skb: 7 callbacks suppressed [ 25.813950] audit: type=1800 audit(1540299141.488:29): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 25.844915] audit: type=1800 audit(1540299141.488:30): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. 2018/10/23 12:52:31 fuzzer started 2018/10/23 12:52:34 dialing manager at 10.128.0.26:34311 2018/10/23 12:52:34 syscalls: 1 2018/10/23 12:52:34 code coverage: enabled 2018/10/23 12:52:34 comparison tracing: enabled 2018/10/23 12:52:34 setuid sandbox: enabled 2018/10/23 12:52:34 namespace sandbox: enabled 2018/10/23 12:52:34 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/23 12:52:34 fault injection: enabled 2018/10/23 12:52:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/23 12:52:34 net packed injection: enabled 2018/10/23 12:52:34 net device setup: enabled 12:55:45 executing program 0: syz_mount_image$xfs(&(0x7f0000000500)='xfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000600)={[{@noalign='noalign'}]}) syzkaller login: [ 229.741546] IPVS: ftp: loaded support on port[0] = 21 12:55:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000180)='./file0\x00', 0x0) [ 229.989504] IPVS: ftp: loaded support on port[0] = 21 12:55:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x98, 0x100200007fa, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000240), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 230.353835] IPVS: ftp: loaded support on port[0] = 21 12:55:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x800000000006, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x4000000000000}]}) [ 230.970093] IPVS: ftp: loaded support on port[0] = 21 12:55:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) close(r0) [ 231.155338] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.179920] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.192882] device bridge_slave_0 entered promiscuous mode [ 231.373312] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.399745] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.417679] device bridge_slave_1 entered promiscuous mode [ 231.425908] IPVS: ftp: loaded support on port[0] = 21 [ 231.583357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.595246] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.612516] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.629416] device bridge_slave_0 entered promiscuous mode [ 231.722411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 231.738776] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.759726] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.767212] device bridge_slave_1 entered promiscuous mode 12:55:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2902) close(r0) [ 231.901684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 232.060584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.161996] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.195514] IPVS: ftp: loaded support on port[0] = 21 [ 232.322706] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.467346] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.476544] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.506504] device bridge_slave_0 entered promiscuous mode [ 232.517917] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.624577] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.631638] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.639035] device bridge_slave_1 entered promiscuous mode [ 232.724102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 232.738641] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.889027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 232.896647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.908002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.932335] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.967572] team0: Port device team_slave_0 added [ 233.044323] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.064739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.134043] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.143931] team0: Port device team_slave_1 added [ 233.270931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 233.277802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.301212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.330810] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.344108] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.360793] device bridge_slave_0 entered promiscuous mode [ 233.396386] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.420452] team0: Port device team_slave_0 added [ 233.427564] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.447236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.471450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.491152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.508463] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.515237] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.525575] device bridge_slave_1 entered promiscuous mode [ 233.552713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.567381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.579312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.602094] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.609464] team0: Port device team_slave_1 added [ 233.626336] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.674365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.691766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 233.710635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.718664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.766523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.836774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.843910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.881888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 233.920098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.927024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.935664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.980562] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.987104] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.996551] device bridge_slave_0 entered promiscuous mode [ 234.070980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.078134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.090715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.132651] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.139781] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.147191] device bridge_slave_1 entered promiscuous mode [ 234.187691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.210333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.238714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.285404] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.294632] team0: Port device team_slave_0 added [ 234.303992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.317269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.354402] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.389960] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.397381] device bridge_slave_0 entered promiscuous mode [ 234.428255] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.438247] team0: Port device team_slave_1 added [ 234.446258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.467846] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.522331] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.528845] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.560800] device bridge_slave_1 entered promiscuous mode [ 234.630491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.664991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.738662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.791102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.859116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.874608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.890899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.915228] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.000618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.007777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.022092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.071216] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.080116] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.087502] team0: Port device team_slave_0 added [ 235.169796] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.201881] team0: Port device team_slave_1 added [ 235.233783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.248356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.270203] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.289320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.311212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.319187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.388066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.400069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.411152] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.417630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.424651] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.431075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.440528] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.452574] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.479515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.572205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.588517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.604102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.690288] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.697497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.707065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.748235] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.754710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.761414] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.767781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.785133] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.859872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.884998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.903624] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.912946] team0: Port device team_slave_0 added [ 236.017003] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.030860] team0: Port device team_slave_1 added [ 236.160931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.167840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.181927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.207082] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.230656] team0: Port device team_slave_0 added [ 236.270571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.278072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.294329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.373613] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.392242] team0: Port device team_slave_1 added [ 236.430285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.437872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.460385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.489808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.586483] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.602422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.611624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.633812] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.640317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.647003] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.653449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.666884] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.689089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.788284] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.795595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.805881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.869918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.933236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.941053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.951160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.278367] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.284830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.291547] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.297919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.314665] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 237.882209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.016546] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.023025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.029813] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.036209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.076206] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 238.308833] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.315336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.322096] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.328487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.356998] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 238.930008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.939101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.877959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.966272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.360402] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.439915] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.882230] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.890023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.897253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.926369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.943791] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.969817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.000489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.310059] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.380634] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.430216] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.718324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.822899] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.836680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.843941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.094120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.158554] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.308904] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.510098] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.548481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.650988] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.657374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.673404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.020575] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.042759] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.048936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.056587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.083360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.480826] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.560544] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.566794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.577116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.982949] 8021q: adding VLAN 0 to HW filter on device team0 12:56:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x146, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)}) [ 245.642064] binder: 7013:7015 unknown command 326 12:56:01 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 245.667057] binder: 7013:7015 ioctl c0306201 20000080 returned -22 [ 245.692774] XFS (loop0): Invalid superblock magic number 12:56:01 executing program 1: r0 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="240000005e0007031dfffd946f610504000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@nl, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/176, 0xb0}, 0x0) 12:56:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f0000000040)=[@cstype3], 0x1) preadv(0xffffffffffffffff, &(0x7f0000001ac0), 0x0, 0x0) finit_module(r1, &(0x7f00000005c0)='mime_typeInodev)vboxnet1nodev#nodev\\vmnet1/\x00', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x1, 0x0, 0x100000000, 0x4}) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000100)={0x1000000000000002}, 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000240), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x8, &(0x7f00000004c0)="6f00e2e07bac6cba9da68345cbfb7494f45bc3613a4513f203000000000000000a06f768a883df6d4e7818fe19c016695d08eb8465ef31c507cc00000000e78205a21c88ab1db2fc5b4052a92a53529a2c28a54d21ff85cc6a191f26d96b3dfa363550693969f884589708b005a9a92472f1cca5a36f2474ac97c6bec22ddaef52be684421a1d1eaafa36bf71d1631b5a706ac3978b8cee0e7aecdc16f904ff9b65e2ae1d807b2a4117b2d564f89e79047369e334e7c59d8c34c3a4e41b66c37c71903e692e57b1e324694633e7a4fe6f1f93aca20066bb0458ca1cf8f2d57fb8939919851ffcbb27be87e496b63e3ec644e1ea1ac") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000380)='lo\x00', 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x400, 0x0) [ 246.022016] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 246.102498] hrtimer: interrupt took 33722 ns 12:56:01 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000300)) 12:56:02 executing program 2: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xffffffffffff7fff}]}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/98) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0xffffffffffffffff, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB="d784db21ec128f05913ccd5234a4d40aa22637ee5880214f23eeb6ff50e7a581262bd7046c5113e6c975dbd4929b4173de70e240c206c29aa8fa11a82508700ebc91eceef8a6b164d29f57224698f7df6ad0c2cb4c994f5508e1eac1defb1fc8306843d4c82826e93c92"], &(0x7f00000007c0)='./file0\x00', &(0x7f00000006c0)='omfs\x00', 0x59a8a8c793e70182, &(0x7f0000000800)="48863f026182534dc319b4407423943a101a1796fcd5f5504358916f65023680118e89a0c97b239086277d7847143a9b34964fa18e2a93f53949e90b5a46eb479d6b0eb82ea33e8b7ce566e7e0829de3bbdf1302f4dacfcb389d8381bde9086576609e7eeb12639a1a15a3") fcntl$getown(r1, 0x9) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="37ab8a4b3183e96176"], &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r3, r4, &(0x7f0000000000), 0x80000002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9d0e, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2000, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r5 = getegid() r6 = getuid() fchown(r2, r6, r5) mkdir(&(0x7f0000000480)='./file0\x00', 0xa0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x1, 0x295}) 12:56:02 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000300)) 12:56:02 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080045010, &(0x7f0000000300)) [ 246.474082] audit: type=1326 audit(1540299362.148:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7103 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 246.550558] audit: type=1800 audit(1540299362.228:32): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16517 res=0 12:56:02 executing program 0: perf_event_open(&(0x7f0000940000)={0x20000000000002, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 12:56:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x9, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) [ 247.126540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.133432] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.173033] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.233281] audit: type=1326 audit(1540299362.908:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7103 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:56:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x10, &(0x7f0000000180)={&(0x7f00000002c0)=""/68, 0x44}}, 0x10) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeea) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46c02) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x0, [], [{0xf66b, 0x3, 0x0, 0x4, 0xfff, 0x100000000}, {0x800, 0x0, 0x9d21, 0x0, 0x0, 0x8}], [[], []]}) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000080)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) [ 247.444187] binder_alloc: binder_alloc_mmap_handler: 7185 20001000-20004000 already mapped failed -16 12:56:03 executing program 5: 12:56:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x800000000006, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x4000000000000}]}) 12:56:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='#'], 0x1) 12:56:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x9, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) 12:56:03 executing program 2: mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) close(r0) 12:56:03 executing program 4: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire], 0x0, 0x0, &(0x7f00000000c0)}) [ 247.780393] binder: 7197:7198 ioctl c0306201 20a20000 returned -14 12:56:03 executing program 5: 12:56:03 executing program 3: [ 247.821094] binder: 7197:7210 unknown command 0 12:56:03 executing program 4: [ 247.865098] binder: 7197:7210 ioctl c0306201 20a20000 returned -22 [ 247.893071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:56:03 executing program 0: 12:56:03 executing program 3: 12:56:03 executing program 5: 12:56:03 executing program 4: 12:56:03 executing program 0: 12:56:03 executing program 3: 12:56:04 executing program 2: 12:56:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x9, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) 12:56:04 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) 12:56:04 executing program 0: 12:56:04 executing program 3: 12:56:04 executing program 4: 12:56:04 executing program 0: 12:56:04 executing program 4: 12:56:04 executing program 3: 12:56:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) 12:56:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 12:56:04 executing program 0: r0 = memfd_create(&(0x7f0000000040)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x0) fallocate(r0, 0x3, 0x0, 0x5) [ 249.031029] IPVS: ftp: loaded support on port[0] = 21 [ 249.095486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:56:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x9, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) [ 249.632573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.140984] device bridge_slave_1 left promiscuous mode [ 250.147063] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.193371] device bridge_slave_0 left promiscuous mode [ 250.198833] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.213618] team0 (unregistering): Port device team_slave_1 removed [ 252.223804] team0 (unregistering): Port device team_slave_0 removed [ 252.235436] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 252.304186] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 252.379694] bond0 (unregistering): Released all slaves [ 252.600832] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.607310] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.614977] device bridge_slave_0 entered promiscuous mode [ 252.660713] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.667215] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.675028] device bridge_slave_1 entered promiscuous mode [ 252.721558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 252.767849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.904064] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.951622] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.173564] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.181079] team0: Port device team_slave_0 added [ 253.223424] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 253.230922] team0: Port device team_slave_1 added [ 253.273796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.322856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.370205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.420328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.827163] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.833561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.840255] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.846596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.853966] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 254.462894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.851877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.941429] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.029039] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 255.035255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.042772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.130860] 8021q: adding VLAN 0 to HW filter on device team0 12:56:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 12:56:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x1132}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 12:56:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ion\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 12:56:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x4, 0x0, &(0x7f0000000200)="7efa20fe"}) 12:56:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) 12:56:11 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 12:56:11 executing program 0: syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 12:56:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) [ 255.702760] binder: 7537:7538 got reply transaction with no transaction stack [ 255.714006] binder: 7537:7538 transaction failed 29201/-71, size 0-0 line 2741 [ 255.739441] binder: undelivered TRANSACTION_ERROR: 29201 12:56:11 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x3e6}], 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:56:11 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 12:56:11 executing program 3: creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x14103e, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ab9b3f8683ecf89dee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca9fcf03cbf82bd13534737339245d3c70641be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf3ad8882947ffa1fb4c050727beb12c57e06ff590000000000000000000000000000008924578ad49ea1144c7448d640aa88a66a71b77d73a924ff027fdcb550161653d4cb57088385248286f5be9d8766c70c29e6f5063dfe74a1b0b52079159048210b4d271ac94c889b063ca34a09579af03631f128e6dd2c966daecd7c6f7e0f4ebcaf80250cfab07184838078c71d809d06dc0bac75db814525d1d1a4af4cb6f4890f397382ae636697f688094e38db5c22770f53076c630df9bb4c149189ffa975f52087311c5baafc11c90bdc25fc803b71153ddc3995b2df49cdd784bc5beaa8a349dd91a0fa23a6a540861070dadb395e85c93cdfa08e") 12:56:11 executing program 2: perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000080)={0x8, 0x80000000}, &(0x7f00000000c0)) 12:56:11 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000001200)={0x0, 0x0, 0x1, @thr={&(0x7f00000001c0), &(0x7f00000011c0)}}, &(0x7f0000001240)) 12:56:11 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 12:56:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, &(0x7f00000013c0), 0x1000) read$FUSE(r0, &(0x7f0000000240), 0x1000) 12:56:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x202000) 12:56:11 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffffffffffffff1b) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 12:56:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x803) 12:56:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x62, 0x2, 0x0, 0x400, 0x10400, 0x8, 0x0, 0x100000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x635, 0x4, 0xffffffffffffff00, 0x40, 0x3, 0x0, 0x3, 0x8, 0x0, 0x80000001, 0x0, 0x6, 0x0, 0x0, 0x6, 0x800, 0x400, 0xffffffff, 0x5, 0x6, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x0, 0xa64}, 0x0, 0x0, 0x10000, 0x0, 0x8b12, 0x401}, 0x0, 0x0, r0, 0x1) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory', 0xc01d}]}, 0x200600) [ 256.498243] syz-executor3 (7596) used greatest stack depth: 13912 bytes left 12:56:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0xe9}}, 0x1c) 12:56:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xe9, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) gettid() ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x803) 12:56:12 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ec, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000001, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 12:56:12 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:56:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x803) 12:56:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x62, 0x2, 0x0, 0x400, 0x10400, 0x8, 0x0, 0x100000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x635, 0x4, 0xffffffffffffff00, 0x40, 0x3, 0x0, 0x3, 0x8, 0x0, 0x80000001, 0x0, 0x6, 0x0, 0x0, 0x6, 0x800, 0x400, 0xffffffff, 0x5, 0x6, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x0, 0xa64}, 0x0, 0x0, 0x10000, 0x0, 0x8b12, 0x401}, 0x0, 0x0, r0, 0x1) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory', 0xc01d}]}, 0x200600) 12:56:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 12:56:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x11, &(0x7f0000000100)={0x4, {{0xa, 0x0, 0x0, @remote}}}, 0x5d) 12:56:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a6273e8ffff"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f0000000580)}) 12:56:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 12:56:12 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 12:56:12 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) open(&(0x7f0000001600)='./file1\x00', 0x80, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000023c0)={0x7, 0x4, 0x7, 0x1000, 0x800}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001540)=@req3={0x4, 0xa0000000000000, 0xffffffffffffffe0, 0x3, 0x4d3, 0x48, 0x1}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$join(0x1, &(0x7f00000015c0)={'syz', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000001580)) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$P9_RLOPEN(r2, &(0x7f0000001640)={0x18, 0xd, 0x1, {{0x43}, 0x1}}, 0x18) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) [ 257.137621] binder: 7645:7646 unknown command 536871424 [ 257.148358] binder: 7645:7646 ioctl c0306201 20000000 returned -22 [ 257.157724] binder: 7645:7647 unknown command 536871424 [ 257.164023] binder: 7645:7647 ioctl c0306201 20000000 returned -22 12:56:12 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001600)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="9e", 0x1}], 0x1, 0x53) 12:56:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') [ 257.465690] device lo entered promiscuous mode 12:56:13 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffffb7, &(0x7f00000001c0)}}], 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 257.715993] print_req_error: I/O error, dev loop3, sector 0 [ 257.731892] print_req_error: I/O error, dev loop3, sector 1024 [ 257.755602] device lo left promiscuous mode [ 257.908498] print_req_error: I/O error, dev loop3, sector 0 [ 257.930237] print_req_error: I/O error, dev loop3, sector 1032 12:56:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 12:56:13 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getpgid(0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) fstat(0xffffffffffffff9c, &(0x7f0000000380)) gettid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) getegid() openat$uhid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uhid\x00', 0x802, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14, 0x80000) perf_event_open$cgroup(&(0x7f00000005c0)={0x5, 0x70, 0x0, 0x8, 0xb166, 0x7fff, 0x0, 0x0, 0x0, 0xb, 0x5, 0x6, 0x8, 0x3, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x0, 0x7, 0x5, 0xaf, 0x154, 0x0, 0xfff, 0x401, 0x6, 0x0, 0x100000000, 0xffffffffffffff35, 0x81, 0x1000, 0x8001, 0x2f, 0x3, 0x80, 0x0, 0x959, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x6000, 0x5, 0xf2, 0x7, 0x0, 0xbe53}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000500)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) 12:56:13 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) open(&(0x7f0000001600)='./file1\x00', 0x80, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000023c0)={0x7, 0x4, 0x7, 0x1000, 0x800}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001540)=@req3={0x4, 0xa0000000000000, 0xffffffffffffffe0, 0x3, 0x4d3, 0x48, 0x1}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$join(0x1, &(0x7f00000015c0)={'syz', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000001580)) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$P9_RLOPEN(r2, &(0x7f0000001640)={0x18, 0xd, 0x1, {{0x43}, 0x1}}, 0x18) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 12:56:13 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) open(&(0x7f0000001600)='./file1\x00', 0x80, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000023c0)={0x7, 0x4, 0x7, 0x1000, 0x800}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001540)=@req3={0x4, 0xa0000000000000, 0xffffffffffffffe0, 0x3, 0x4d3, 0x48, 0x1}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$join(0x1, &(0x7f00000015c0)={'syz', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000001580)) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$P9_RLOPEN(r2, &(0x7f0000001640)={0x18, 0xd, 0x1, {{0x43}, 0x1}}, 0x18) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 12:56:13 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) open(&(0x7f0000001600)='./file1\x00', 0x80, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000023c0)={0x7, 0x4, 0x7, 0x1000, 0x800}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001540)=@req3={0x4, 0xa0000000000000, 0xffffffffffffffe0, 0x3, 0x4d3, 0x48, 0x1}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$join(0x1, &(0x7f00000015c0)={'syz', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000001580)) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$P9_RLOPEN(r2, &(0x7f0000001640)={0x18, 0xd, 0x1, {{0x43}, 0x1}}, 0x18) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 12:56:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 12:56:14 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) open(&(0x7f0000001600)='./file1\x00', 0x80, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000023c0)={0x7, 0x4, 0x7, 0x1000, 0x800}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001540)=@req3={0x4, 0xa0000000000000, 0xffffffffffffffe0, 0x3, 0x4d3, 0x48, 0x1}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$join(0x1, &(0x7f00000015c0)={'syz', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000001580)) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$P9_RLOPEN(r2, &(0x7f0000001640)={0x18, 0xd, 0x1, {{0x43}, 0x1}}, 0x18) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 12:56:14 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) open(&(0x7f0000001600)='./file1\x00', 0x80, 0x101) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000023c0)={0x7, 0x4, 0x7, 0x1000, 0x800}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001540)=@req3={0x4, 0xa0000000000000, 0xffffffffffffffe0, 0x3, 0x4d3, 0x48, 0x1}, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$join(0x1, &(0x7f00000015c0)={'syz', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000001580)) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180), 0x0, 0xfffffffffffffffb) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$P9_RLOPEN(r2, &(0x7f0000001640)={0x18, 0xd, 0x1, {{0x43}, 0x1}}, 0x18) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 12:56:14 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000000840)=0xe8) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, r1) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/attr/exec\x00', 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/urandom\x00', 0x24a801, 0x0) splice(r2, &(0x7f00000004c0)=0x1, 0xffffffffffffffff, &(0x7f0000000600), 0x3, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="03bbfdad484a9e6da7fec4c0be0357235a4fd54a64fd1008d6eb6744f03bd3fc4a1ca416a14ec3518a3a15f38fd36177a87938acec4f04652c2383eebe50bb920e96775589bf190f9a1c2e9a07ee2e23a2274a3d9700f603b445558a72", 0x5d, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={0x0, 0xffffffffffffff9c, 0x0, 0x16, &(0x7f0000000980)='posix_acl_accesswlan1\x00'}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000200)='/dev/rtc0\x00', 0xffffffffffffffff}, 0x30) r3 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000640)='trusted.overlay.redirect\x00', &(0x7f0000000680)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x4, 0x9, 0xb4a, 0x993b, 0x0, 0x0, 0x28000, 0x0, 0x0, 0xfc, 0xcb4, 0x400, 0x400, 0x4402, 0x100, 0x8, 0x5, 0x9, 0x5, 0x0, 0x7, 0x5, 0x2f7, 0x7, 0x81, 0x3, 0x6, 0xf4d, 0x2, 0x3, 0x6, 0x0, 0xf3, 0x0, 0x0, 0x6, 0x0, 0x1, 0x34bfa990715ff069, @perf_config_ext={0x3f, 0x88}, 0x4080, 0x18, 0x413, 0x0, 0x2, 0xd054, 0x2}, 0x0, 0x4, r3, 0xa) r5 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x10, &(0x7f0000000240)="fe080000000000e1d2017521e449a5c5"}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r5, 0x0) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x100) write$cgroup_type(r6, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 12:56:14 executing program 3: io_setup(0x89c1, &(0x7f0000000200)) 12:56:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') 12:56:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x1000000) 12:56:14 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getpgid(0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) fstat(0xffffffffffffff9c, &(0x7f0000000380)) gettid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) getegid() openat$uhid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uhid\x00', 0x802, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14, 0x80000) perf_event_open$cgroup(&(0x7f00000005c0)={0x5, 0x70, 0x0, 0x8, 0xb166, 0x7fff, 0x0, 0x0, 0x0, 0xb, 0x5, 0x6, 0x8, 0x3, 0x4, 0x0, 0x0, 0x1, 0x2, 0x5, 0x0, 0x7, 0x5, 0xaf, 0x154, 0x0, 0xfff, 0x401, 0x6, 0x0, 0x100000000, 0xffffffffffffff35, 0x81, 0x1000, 0x8001, 0x2f, 0x3, 0x80, 0x0, 0x959, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x6000, 0x5, 0xf2, 0x7, 0x0, 0xbe53}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000940), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000500)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) 12:56:14 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 12:56:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000340)=[@dead_binder_done, @clear_death, @decrefs], 0x0, 0x0, &(0x7f00000003c0)}) 12:56:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000540)={[{@nodots='nodots'}, {@fat=@quiet='quiet'}]}) [ 259.340384] binder: 7744:7747 BC_DEAD_BINDER_DONE 0000000000000000 not found 12:56:15 executing program 1: 12:56:15 executing program 3: [ 259.461298] binder: 7744:7747 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 259.482566] binder: 7744:7747 DecRefs 0 refcount change on invalid ref 0 ret -22 12:56:15 executing program 1: 12:56:15 executing program 2: 12:56:15 executing program 3: 12:56:15 executing program 0: 12:56:15 executing program 1: 12:56:15 executing program 2: 12:56:15 executing program 5: 12:56:15 executing program 4: 12:56:15 executing program 3: 12:56:15 executing program 0: 12:56:15 executing program 5: 12:56:15 executing program 1: 12:56:15 executing program 4: 12:56:15 executing program 2: 12:56:15 executing program 5: 12:56:15 executing program 1: 12:56:15 executing program 0: 12:56:15 executing program 3: 12:56:16 executing program 2: 12:56:16 executing program 4: 12:56:16 executing program 0: 12:56:16 executing program 1: 12:56:16 executing program 5: 12:56:16 executing program 4: 12:56:16 executing program 3: 12:56:16 executing program 2: 12:56:16 executing program 0: 12:56:16 executing program 1: 12:56:16 executing program 5: 12:56:16 executing program 4: 12:56:16 executing program 3: 12:56:16 executing program 0: 12:56:16 executing program 1: 12:56:16 executing program 2: 12:56:16 executing program 5: 12:56:16 executing program 4: 12:56:16 executing program 0: 12:56:16 executing program 2: 12:56:16 executing program 1: 12:56:16 executing program 5: 12:56:16 executing program 3: 12:56:16 executing program 0: 12:56:16 executing program 4: 12:56:16 executing program 1: 12:56:16 executing program 4: 12:56:16 executing program 5: 12:56:16 executing program 3: 12:56:16 executing program 2: 12:56:16 executing program 0: 12:56:16 executing program 3: 12:56:16 executing program 1: 12:56:16 executing program 2: 12:56:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) 12:56:16 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x2) 12:56:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000080)) 12:56:17 executing program 3: 12:56:17 executing program 1: 12:56:17 executing program 2: 12:56:17 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001300)=ANY=[@ANYBLOB="7f"], 0x1) mlockall(0x5) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) r1 = socket(0x11, 0x2, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:56:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x240000, &(0x7f0000000100)='\x00') syncfs(0xffffffffffffffff) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9f87) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) 12:56:17 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="6862d034e30b14212c74ec5e4deb7651e708ac34c7717d806989bf4a497b8fa5e7315c18117193ff56867844d52bf86f871ec9001e43bc29b0b9936bcc461511e806011cd7bdf35a707112624aaa7b4f37f5d8b10acef356e2cca8c03aa6de6042eaf7a150e3c37dadf32628b919f970c69b4e07e6a8718e50fddbcc42735c2e272031b5b0d83bb3156af5187f137879252ede0a3773247ea344be8f6ffd28e46f43f36a584c6cbfc4402fcd842fd5c9fc93077fcabedc27dfd15db75438a50f4f3df07a904080801d4fb1ebd7fdc05b1593ef0f0779f0d5049f30dfbd21d0f216f563e0c1f2c65363a9a37c6a14a24d9a7307a3ba", @ANYRESOCT, @ANYRES32], 0x110) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x35) mlockall(0x5) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000140)) open(&(0x7f00000003c0)='./bus\x00', 0x200000, 0xfffffffffffffffc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:56:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000004c0)=""/80) 12:56:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x3, 0x1, 0x31}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x200002bb, &(0x7f00006dc000)}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 12:56:17 executing program 5: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="6862d034e30b14212c74ec5e4deb7651e708ac34c7717d806989bf4a497b8fa5e7315c18117193ff56867844d52bf86f871ec9001e43bc29b0b9936bcc461511e806011cd7bdf35a707112624aaa7b4f37f5d8b10acef356e2cca8c03aa6de6042eaf7a150e3c37dadf32628b919f970c69b4e07e6a8718e50fddbcc42735c2e272031b5b0d83bb3156af5187f137879252ede0a3773247ea344be8f6ffd28e46f43f36a584c6cbfc4402fcd842fd5c9fc93077fcabedc27dfd15db75438a50f4f3df07a904080801d4fb1ebd7fdc05b1593ef0f0779f0d5049f30dfbd21d0f216f563e0c1f2c65363a9a37c6a14a24d9a7307a3ba", @ANYPTR, @ANYRESOCT, @ANYRES32], 0x118) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x35) mlockall(0x5) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:56:17 executing program 4: setresuid(0x0, 0xee01, 0x0) delete_module(&(0x7f0000000040)='\x00', 0x0) 12:56:17 executing program 2: r0 = eventfd(0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 12:56:18 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0xffffff9c}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f00000004c0)}, 0x10) 12:56:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000780)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) [ 262.400969] audit: type=1804 audit(1540299378.078:34): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir604004826/syzkaller.KfDLVj/32/file0" dev="sda1" ino=16606 res=1 12:56:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x240000, &(0x7f0000000100)='\x00') syncfs(0xffffffffffffffff) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9f87) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) [ 262.603502] audit: type=1804 audit(1540299378.128:35): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir604004826/syzkaller.KfDLVj/32/file0" dev="sda1" ino=16606 res=1 12:56:18 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0xffffff9c}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f00000004c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)=r1, 0x4) [ 262.716873] audit: type=1804 audit(1540299378.388:36): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir332179411/syzkaller.xrbfGq/22/file0" dev="sda1" ino=16604 res=1 12:56:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000004c0)=""/80) 12:56:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200610) [ 262.874497] audit: type=1804 audit(1540299378.548:37): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir332179411/syzkaller.xrbfGq/22/file0" dev="sda1" ino=16604 res=1 12:56:19 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="6862d034e30b14212c74ec5e4deb7651e708ac34c7717d806989bf4a497b8fa5e7315c18117193ff56867844d52bf86f871ec9001e43bc29b0b9936bcc461511e806011cd7bdf35a707112624aaa7b4f37f5d8b10acef356e2cca8c03aa6de6042eaf7a150e3c37dadf32628b919f970c69b4e07e6a8718e50fddbcc42735c2e272031b5b0d83bb3156af5187f137879252ede0a3773247ea344be8f6ffd28e46f43f36a584c6cbfc4402fcd842fd5c9fc93077fcabedc27dfd15db75438a50f4f3df07a904080801d4fb1ebd7fdc05b1593ef0f0779f0d5049f30dfbd21d0f216f563e0c1f2c65363a9a37c6a14a24d9a7307a3ba", @ANYRESOCT, @ANYRES32], 0x110) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x35) mlockall(0x5) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000140)) open(&(0x7f00000003c0)='./bus\x00', 0x200000, 0xfffffffffffffffc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:56:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0xce1b010000000000, 0x820000, 0x0}, 0x2c) 12:56:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xa844}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/27, 0xfffffffffffffe26}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/35, 0x23}], 0x5, &(0x7f0000000600)=""/167, 0xa7, 0xfff}, 0x40000000) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000c40)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000005c0)={0x100001, 0x70, 0x7, 0xd0e, 0x800, 0x8, 0x0, 0xd488, 0x22, 0x4, 0x9, 0xdee, 0x380000000000000, 0x20, 0x552, 0x1, 0xe9, 0x8, 0x101, 0x43, 0x6bf9, 0x94e8, 0x6, 0x43, 0x101, 0x5, 0x56, 0x1ff, 0x5, 0x401, 0x7, 0x6, 0x8, 0xa68c, 0x55, 0x9, 0x6, 0xa9d, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000540), 0x4}, 0x21000, 0x8, 0x100000001, 0x1, 0x8, 0x80000001, 0xfffffffffffffffa}, 0xffffffffffffffff, 0x4, 0xffffffffffffff9c, 0x4) r0 = gettid() r1 = perf_event_open(&(0x7f0000000680)={0x6, 0x70, 0x800, 0x3, 0x7, 0x1, 0x0, 0x3f, 0x80, 0x5, 0x56, 0x86, 0x767, 0x4, 0x1, 0x9a, 0x20000000000004, 0x3ff80000, 0x1, 0xfbb, 0x1, 0xffffffffffff8000, 0x0, 0xffffffff, 0x1, 0x3, 0x5, 0x1, 0x7, 0xfff, 0x1, 0x114, 0x3ff, 0x5, 0x4, 0x6, 0x6, 0x10000000ffffffff, 0x0, 0xffffffffffff0000, 0x0, @perf_bp={&(0x7f0000000640), 0x4}, 0x1004, 0x3ff, 0x4, 0x2, 0xd513, 0x0, 0x2}, r0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r4) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x64, &(0x7f00000001c0)=r5, 0xfedc) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000700)=ANY=[@ANYBLOB="114b892ccd8439c4431020670e7c9332f9b3fcf1d44546e5597a83a5deaf5a05090000000000000076cd6b26c0ab4f8010a914ec000000000000000000000000006997c2fd2aab77f940f0e38f787bf89c977c67cc7d4b77ecf0e35383b9d3474bce260088425c2ea6381cb064272803ad1ef29e5ec17440cece457c9ed7ad841ec081b7096abb5e047a32e5969781dc5b8938a2c58a8773ce5f9ff494"]) socket$kcm(0x2, 0x5, 0x0) openat$cgroup_ro(r3, &(0x7f0000000800)='cpuset.memory_pressure\x00', 0x0, 0x0) r6 = socket$kcm(0x29, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890c, &(0x7f0000000880)={r6}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:56:19 executing program 5: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="6862d034e30b14212c74ec5e4deb7651e708ac34c7717d806989bf4a497b8fa5e7315c18117193ff56867844d52bf86f871ec9001e43bc29b0b9936bcc461511e806011cd7bdf35a707112624aaa7b4f37f5d8b10acef356e2cca8c03aa6de6042eaf7a150e3c37dadf32628b919f970c69b4e07e6a8718e50fddbcc42735c2e272031b5b0d83bb3156af5187f137879252ede0a3773247ea344be8f6ffd28e46f43f36a584c6cbfc4402fcd842fd5c9fc93077fcabedc27dfd15db75438a50f4f3df07a904080801d4fb1ebd7fdc05b1593ef0f0779f0d5049f30dfbd21d0f216f563e0c1f2c65363a9a37c6a14a24d9a7307a3ba", @ANYPTR, @ANYRESOCT, @ANYRES32], 0x118) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x35) mlockall(0x5) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:56:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x240000, &(0x7f0000000100)='\x00') syncfs(0xffffffffffffffff) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9f87) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) 12:56:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000004c0)=""/80) 12:56:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xa844}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/27, 0xfffffffffffffe26}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/35, 0x23}], 0x5, &(0x7f0000000600)=""/167, 0xa7, 0xfff}, 0x40000000) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000c40)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000005c0)={0x100001, 0x70, 0x7, 0xd0e, 0x800, 0x8, 0x0, 0xd488, 0x22, 0x4, 0x9, 0xdee, 0x380000000000000, 0x20, 0x552, 0x1, 0xe9, 0x8, 0x101, 0x43, 0x6bf9, 0x94e8, 0x6, 0x43, 0x101, 0x5, 0x56, 0x1ff, 0x5, 0x401, 0x7, 0x6, 0x8, 0xa68c, 0x55, 0x9, 0x6, 0xa9d, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000540), 0x4}, 0x21000, 0x8, 0x100000001, 0x1, 0x8, 0x80000001, 0xfffffffffffffffa}, 0xffffffffffffffff, 0x4, 0xffffffffffffff9c, 0x4) r0 = gettid() r1 = perf_event_open(&(0x7f0000000680)={0x6, 0x70, 0x800, 0x3, 0x7, 0x1, 0x0, 0x3f, 0x80, 0x5, 0x56, 0x86, 0x767, 0x4, 0x1, 0x9a, 0x20000000000004, 0x3ff80000, 0x1, 0xfbb, 0x1, 0xffffffffffff8000, 0x0, 0xffffffff, 0x1, 0x3, 0x5, 0x1, 0x7, 0xfff, 0x1, 0x114, 0x3ff, 0x5, 0x4, 0x6, 0x6, 0x10000000ffffffff, 0x0, 0xffffffffffff0000, 0x0, @perf_bp={&(0x7f0000000640), 0x4}, 0x1004, 0x3ff, 0x4, 0x2, 0xd513, 0x0, 0x2}, r0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r4) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x64, &(0x7f00000001c0)=r5, 0xfedc) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000700)=ANY=[@ANYBLOB="114b892ccd8439c4431020670e7c9332f9b3fcf1d44546e5597a83a5deaf5a05090000000000000076cd6b26c0ab4f8010a914ec000000000000000000000000006997c2fd2aab77f940f0e38f787bf89c977c67cc7d4b77ecf0e35383b9d3474bce260088425c2ea6381cb064272803ad1ef29e5ec17440cece457c9ed7ad841ec081b7096abb5e047a32e5969781dc5b8938a2c58a8773ce5f9ff494"]) socket$kcm(0x2, 0x5, 0x0) openat$cgroup_ro(r3, &(0x7f0000000800)='cpuset.memory_pressure\x00', 0x0, 0x0) r6 = socket$kcm(0x29, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890c, &(0x7f0000000880)={r6}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:56:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0xce1b010000000000, 0x820000, 0x0}, 0x2c) 12:56:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0xce1b010000000000, 0x820000, 0x0}, 0x2c) 12:56:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000004c0)=""/80) 12:56:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x62, 0x2, 0x0, 0x400, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x6, 0x3446, 0x400, 0x4, 0x7, 0x635, 0x4, 0xffffffffffffff00, 0x40, 0x3, 0x7f, 0x3, 0x8, 0x0, 0x80000001, 0x0, 0x6, 0x3, 0x5b81, 0x6, 0x800, 0x400, 0xffffffff, 0x5, 0x6, 0x7fffffff, 0x0, 0x7ff, 0x6, @perf_config_ext={0x0, 0xa64}, 0x8000, 0x0, 0x10000, 0x6, 0x8b12, 0x401}, 0x0, 0x0, r0, 0x1) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 12:56:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x62, 0x2, 0x0, 0x400, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x6, 0x3446, 0x400, 0x4, 0x7, 0x635, 0x4, 0xffffffffffffff00, 0x40, 0x3, 0x7f, 0x3, 0x8, 0x0, 0x80000001, 0x0, 0x6, 0x3, 0x5b81, 0x6, 0x800, 0x400, 0xffffffff, 0x5, 0x6, 0x7fffffff, 0x0, 0x7ff, 0x6, @perf_config_ext={0x0, 0xa64}, 0x8000, 0x0, 0x10000, 0x6, 0x8b12, 0x401}, 0x0, 0x0, r0, 0x1) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 12:56:20 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="83", 0x1}], 0x1}, 0x0) 12:56:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x40000) 12:56:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x240000, &(0x7f0000000100)='\x00') syncfs(0xffffffffffffffff) preadv(r0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9f87) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) 12:56:20 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0xffffff9c}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 12:56:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x200002bb, &(0x7f00006dc000)}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000b86000/0x3000)=nil, 0x3000, 0x0) sendfile(r1, r1, &(0x7f0000b58000)=0x200000, 0xffff) 12:56:20 executing program 0: clone(0x80bff4, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) socketpair$packet(0x11, 0x100200000003, 0x300, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') exit(0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) 12:56:20 executing program 2: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="6862d034e30b14212c74ec5e4deb7651e708ac34c7717d806989bf4a497b8fa5e7315c18117193ff56867844d52bf86f871ec9001e43bc29b0b9936bcc461511e806011cd7bdf35a707112624aaa7b4f37f5d8b10acef356e2cca8c03aa6de6042eaf7a150e3c37dadf32628b919f970c69b4e07e6a8718e50fddbcc42735c2e272031b5b0d83bb3156af5187f137879252ede0a3773247ea344be8f6ffd28e46f43f36a584c6cbfc4402fcd842fd5c9fc93077fcabedc27dfd15db75438a50f4f3df07a904080801d4fb1ebd7fdc05b1593ef0f0779f0d5049f30dfbd21d0f216f563e0c1f2c65363a9a37c6a14a24d9a7307a3ba", @ANYRESOCT, @ANYRES32], 0x110) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x35) mlockall(0x5) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000140)={0x6, 0x80000001}) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x200000, 0xfffffffffffffffc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r2, 0x0) 12:56:20 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x4000840d, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002a40), &(0x7f0000002bc0)) 12:56:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000540), 0x27) fcntl$setown(r1, 0x8, 0x0) 12:56:21 executing program 0: clone(0x80bff4, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) socketpair$packet(0x11, 0x100200000003, 0x300, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') exit(0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) 12:56:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000540), 0x27) fcntl$setown(r1, 0x8, 0x0) 12:56:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500000029001c009c000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 12:56:21 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0xffffff9c}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000640)='logon\x00', &(0x7f0000000740)={'syz'}, &(0x7f0000000780)='bridge0\x00', 0xfffffffffffffffd) keyctl$assume_authority(0x10, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000005c0)={0x2, &(0x7f0000000540)=[{}, {}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cgroup.stat\x00', 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f00000009c0), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.events\x00', 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x79f7bf0a, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@rand_addr, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f00000008c0)=0xe8) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000ac0)=""/75) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000004c0), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x28, &(0x7f00000006c0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xb1, &(0x7f0000000000)="6a48373dea8c0000000020000000", &(0x7f0000000100)=""/177, 0xf000}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) 12:56:21 executing program 0: clone(0x80bff4, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) socketpair$packet(0x11, 0x100200000003, 0x300, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') exit(0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) 12:56:21 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() close(r0) 12:56:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f4, &(0x7f0000000180)={"73697430000000000000ffff00005a00", @ifru_flags}) 12:56:21 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x3e6}], 0x1000000000000084, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xb8) 12:56:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) [ 265.807810] ODEBUG: object 00000000172ae714 is on stack 000000002e5904bd, but NOT annotated. [ 265.820010] WARNING: CPU: 0 PID: 8069 at lib/debugobjects.c:369 __debug_object_init.cold.14+0x51/0xdf [ 265.829383] Kernel panic - not syncing: panic_on_warn set ... [ 265.835283] CPU: 0 PID: 8069 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181019+ #98 [ 265.843713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.853081] Call Trace: [ 265.855687] dump_stack+0x244/0x39d [ 265.859328] ? dump_stack_print_info.cold.1+0x20/0x20 [ 265.865039] panic+0x2ad/0x55c [ 265.868245] ? add_taint.cold.5+0x16/0x16 [ 265.872403] ? __warn.cold.8+0x5/0x45 [ 265.876213] ? __debug_object_init.cold.14+0x51/0xdf [ 265.881331] __warn.cold.8+0x20/0x45 [ 265.885057] ? __debug_object_init.cold.14+0x51/0xdf [ 265.890183] report_bug+0x254/0x2d0 [ 265.893902] do_error_trap+0x11b/0x200 [ 265.897799] do_invalid_op+0x36/0x40 [ 265.901520] ? __debug_object_init.cold.14+0x51/0xdf [ 265.906695] invalid_op+0x14/0x20 [ 265.910173] RIP: 0010:__debug_object_init.cold.14+0x51/0xdf [ 265.915896] Code: ea 03 80 3c 02 00 75 7c 49 8b 54 24 18 48 89 de 48 c7 c7 c0 f1 40 88 4c 89 85 d0 fd ff ff e8 09 8c d1 fd 4c 8b 85 d0 fd ff ff <0f> 0b e9 09 d6 ff ff 41 83 c4 01 b8 ff ff 37 00 44 89 25 b7 4e 66 [ 265.934830] RSP: 0018:ffff88017e707308 EFLAGS: 00010086 [ 265.940230] RAX: 0000000000000050 RBX: ffff88017e707af8 RCX: ffffc90003e6e000 [ 265.947514] RDX: 0000000000000000 RSI: ffffffff816585a5 RDI: 0000000000000005 [ 265.954794] RBP: ffff88017e707560 R08: ffff8801cb2aca58 R09: ffffed003b5c5008 [ 265.962067] R10: ffffed003b5c5008 R11: ffff8801dae28047 R12: ffff8801c7c14140 [ 265.969342] R13: 0000000000027580 R14: ffff8801c7c14140 R15: ffff8801cb2aca48 [ 265.976646] ? vprintk_func+0x85/0x181 [ 265.980555] ? __debug_object_init.cold.14+0x4a/0xdf [ 265.985675] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 265.990273] ? debug_object_free+0x690/0x690 [ 265.994891] ? unwind_get_return_address+0x61/0xa0 [ 265.999851] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 266.004965] ? depot_save_stack+0x292/0x470 [ 266.009302] ? save_stack+0xa9/0xd0 [ 266.012938] ? save_stack+0x43/0xd0 [ 266.016570] ? kasan_kmalloc+0xc7/0xe0 [ 266.020469] ? bpf_test_init.isra.10+0x98/0x100 [ 266.025160] ? zap_class+0x640/0x640 [ 266.028885] ? do_syscall_64+0x1b9/0x820 [ 266.032952] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.038327] ? find_held_lock+0x36/0x1c0 [ 266.042401] debug_object_init+0x16/0x20 [ 266.046469] init_timer_key+0xa9/0x480 [ 266.050366] ? init_timer_on_stack_key+0xe0/0xe0 [ 266.055132] ? __might_fault+0x12b/0x1e0 [ 266.059227] ? __lockdep_init_map+0x105/0x590 [ 266.063730] ? __lockdep_init_map+0x105/0x590 [ 266.068235] ? lockdep_init_map+0x9/0x10 [ 266.072322] sock_init_data+0xe1/0xdc0 [ 266.076225] ? sk_stop_timer+0x50/0x50 [ 266.080127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 266.085686] ? _copy_from_user+0xdf/0x150 [ 266.089845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 266.095388] ? bpf_test_init.isra.10+0x70/0x100 [ 266.100068] bpf_prog_test_run_skb+0x255/0xc40 [ 266.104659] ? __lock_acquire+0x62f/0x4c20 [ 266.108903] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 266.113756] ? __lock_acquire+0x62f/0x4c20 [ 266.118081] ? fput+0x130/0x1a0 [ 266.121373] ? __bpf_prog_get+0x9b/0x290 [ 266.125447] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 266.130298] bpf_prog_test_run+0x130/0x1a0 [ 266.134538] __x64_sys_bpf+0x3d8/0x510 [ 266.138432] ? bpf_prog_get+0x20/0x20 [ 266.142255] do_syscall_64+0x1b9/0x820 [ 266.146166] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 266.151543] ? syscall_return_slowpath+0x5e0/0x5e0 [ 266.156478] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.161335] ? trace_hardirqs_on_caller+0x310/0x310 [ 266.166359] ? prepare_exit_to_usermode+0x291/0x3b0 [ 266.171387] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.176240] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.181435] RIP: 0033:0x457569 [ 266.184636] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.203543] RSP: 002b:00007f025be99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.211255] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 266.218529] RDX: 0000000000000028 RSI: 00000000200001c0 RDI: 000000000000000a [ 266.225807] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.233079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f025be9a6d4 [ 266.240347] R13: 00000000004bd892 R14: 00000000004cc208 R15: 00000000ffffffff [ 266.247633] [ 266.247640] ====================================================== [ 266.247646] WARNING: possible circular locking dependency detected [ 266.247652] 4.19.0-rc8-next-20181019+ #98 Not tainted [ 266.247658] ------------------------------------------------------ [ 266.247663] syz-executor1/8069 is trying to acquire lock: [ 266.247667] 00000000254d35c5 ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 266.247684] [ 266.247689] but task is already holding lock: [ 266.247692] 00000000244c8bbc (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x1290 [ 266.247709] [ 266.247715] which lock already depends on the new lock. [ 266.247717] [ 266.247720] [ 266.247726] the existing dependency chain (in reverse order) is: [ 266.247729] [ 266.247732] -> #3 (&obj_hash[i].lock){-.-.}: [ 266.247748] _raw_spin_lock_irqsave+0x99/0xd0 [ 266.247753] __debug_object_init+0x127/0x1290 [ 266.247758] debug_object_init+0x16/0x20 [ 266.247763] hrtimer_init+0x97/0x490 [ 266.247768] init_dl_task_timer+0x1b/0x50 [ 266.247772] __sched_fork+0x2ae/0x590 [ 266.247776] init_idle+0x75/0x740 [ 266.247781] sched_init+0xb33/0xc02 [ 266.247786] start_kernel+0x4be/0xa2b [ 266.247791] x86_64_start_reservations+0x2e/0x30 [ 266.247796] x86_64_start_kernel+0x76/0x79 [ 266.247801] secondary_startup_64+0xa4/0xb0 [ 266.247804] [ 266.247806] -> #2 (&rq->lock){-.-.}: [ 266.247822] _raw_spin_lock+0x2d/0x40 [ 266.247826] task_fork_fair+0xb0/0x6d0 [ 266.247831] sched_fork+0x443/0xba0 [ 266.247837] copy_process+0x2585/0x8770 [ 266.247841] _do_fork+0x1cb/0x11c0 [ 266.247846] kernel_thread+0x34/0x40 [ 266.247850] rest_init+0x28/0x372 [ 266.247855] arch_call_rest_init+0xe/0x1b [ 266.247859] start_kernel+0x9f0/0xa2b [ 266.247865] x86_64_start_reservations+0x2e/0x30 [ 266.247869] x86_64_start_kernel+0x76/0x79 [ 266.247874] secondary_startup_64+0xa4/0xb0 [ 266.247877] [ 266.247880] -> #1 (&p->pi_lock){-.-.}: [ 266.247896] _raw_spin_lock_irqsave+0x99/0xd0 [ 266.247900] try_to_wake_up+0xd2/0x12e0 [ 266.247905] wake_up_process+0x10/0x20 [ 266.247910] __up.isra.1+0x1c0/0x2a0 [ 266.247914] up+0x13c/0x1c0 [ 266.247918] __up_console_sem+0xbe/0x1b0 [ 266.247923] console_unlock+0x80c/0x1190 [ 266.247928] vprintk_emit+0x391/0x990 [ 266.247932] vprintk_default+0x28/0x30 [ 266.247937] vprintk_func+0x7e/0x181 [ 266.247941] printk+0xa7/0xcf [ 266.247946] do_exit.cold.18+0x57/0x16f [ 266.247950] do_group_exit+0x177/0x440 [ 266.247955] __x64_sys_exit_group+0x3e/0x50 [ 266.247960] do_syscall_64+0x1b9/0x820 [ 266.247965] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.247968] [ 266.247971] -> #0 ((console_sem).lock){-.-.}: [ 266.247987] lock_acquire+0x1ed/0x520 [ 266.247992] _raw_spin_lock_irqsave+0x99/0xd0 [ 266.247996] down_trylock+0x13/0x70 [ 266.248002] __down_trylock_console_sem+0xae/0x1f0 [ 266.248007] console_trylock+0x15/0xa0 [ 266.248011] vprintk_emit+0x372/0x990 [ 266.248016] vprintk_default+0x28/0x30 [ 266.248020] vprintk_func+0x7e/0x181 [ 266.248024] printk+0xa7/0xcf [ 266.248030] __debug_object_init.cold.14+0x4a/0xdf [ 266.248034] debug_object_init+0x16/0x20 [ 266.248039] init_timer_key+0xa9/0x480 [ 266.248044] sock_init_data+0xe1/0xdc0 [ 266.248049] bpf_prog_test_run_skb+0x255/0xc40 [ 266.248054] bpf_prog_test_run+0x130/0x1a0 [ 266.248058] __x64_sys_bpf+0x3d8/0x510 [ 266.248063] do_syscall_64+0x1b9/0x820 [ 266.248068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.248070] [ 266.248076] other info that might help us debug this: [ 266.248078] [ 266.248082] Chain exists of: [ 266.248084] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 266.248105] [ 266.248109] Possible unsafe locking scenario: [ 266.248112] [ 266.248117] CPU0 CPU1 [ 266.248122] ---- ---- [ 266.248124] lock(&obj_hash[i].lock); [ 266.248145] lock(&rq->lock); [ 266.248160] lock(&obj_hash[i].lock); [ 266.248170] lock((console_sem).lock); [ 266.248178] [ 266.248182] *** DEADLOCK *** [ 266.248185] [ 266.248190] 1 lock held by syz-executor1/8069: [ 266.248193] #0: 00000000244c8bbc (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x1290 [ 266.248212] [ 266.248215] stack backtrace: [ 266.248223] CPU: 0 PID: 8069 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181019+ #98 [ 266.248232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.248235] Call Trace: [ 266.248240] dump_stack+0x244/0x39d [ 266.248245] ? dump_stack_print_info.cold.1+0x20/0x20 [ 266.248250] ? vprintk_func+0x85/0x181 [ 266.248256] print_circular_bug.isra.35.cold.54+0x1bd/0x27d [ 266.248260] ? save_trace+0xe0/0x290 [ 266.248265] __lock_acquire+0x3399/0x4c20 [ 266.248270] ? mark_held_locks+0x130/0x130 [ 266.248274] ? put_dec+0xf0/0xf0 [ 266.248279] ? mark_held_locks+0x130/0x130 [ 266.248284] ? pointer_string+0x14e/0x1b0 [ 266.248288] ? number+0xca0/0xca0 [ 266.248293] ? print_usage_bug+0xc0/0xc0 [ 266.248298] ? ptr_to_id+0xd0/0x1d0 [ 266.248302] ? dentry_name+0x8f0/0x8f0 [ 266.248306] ? zap_class+0x640/0x640 [ 266.248312] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 266.248316] lock_acquire+0x1ed/0x520 [ 266.248321] ? down_trylock+0x13/0x70 [ 266.248325] ? lock_release+0xa10/0xa10 [ 266.248329] ? trace_hardirqs_off+0xb8/0x310 [ 266.248334] ? vprintk_emit+0x1de/0x990 [ 266.248339] ? trace_hardirqs_on+0x310/0x310 [ 266.248344] ? trace_hardirqs_off+0xb8/0x310 [ 266.248348] ? log_store+0x344/0x4c0 [ 266.248353] ? vprintk_emit+0x372/0x990 [ 266.248358] _raw_spin_lock_irqsave+0x99/0xd0 [ 266.248364] ? down_trylock+0x13/0x70 [ 266.248368] down_trylock+0x13/0x70 [ 266.248374] __down_trylock_console_sem+0xae/0x1f0 [ 266.248378] console_trylock+0x15/0xa0 [ 266.248383] vprintk_emit+0x372/0x990 [ 266.248388] ? wake_up_klogd+0x180/0x180 [ 266.248392] ? zap_class+0x640/0x640 [ 266.248397] ? print_usage_bug+0xc0/0xc0 [ 266.248401] ? find_held_lock+0x36/0x1c0 [ 266.248406] vprintk_default+0x28/0x30 [ 266.248411] vprintk_func+0x7e/0x181 [ 266.248415] printk+0xa7/0xcf [ 266.248420] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 266.248426] __debug_object_init.cold.14+0x4a/0xdf [ 266.248431] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 266.248436] ? debug_object_free+0x690/0x690 [ 266.248442] ? unwind_get_return_address+0x61/0xa0 [ 266.248447] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 266.248452] ? depot_save_stack+0x292/0x470 [ 266.248457] ? save_stack+0xa9/0xd0 [ 266.248461] ? save_stack+0x43/0xd0 [ 266.248466] ? kasan_kmalloc+0xc7/0xe0 [ 266.248471] ? bpf_test_init.isra.10+0x98/0x100 [ 266.248476] ? zap_class+0x640/0x640 [ 266.248480] ? do_syscall_64+0x1b9/0x820 [ 266.248486] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.248491] ? find_held_lock+0x36/0x1c0 [ 266.248496] debug_object_init+0x16/0x20 [ 266.248500] init_timer_key+0xa9/0x480 [ 266.248505] ? init_timer_on_stack_key+0xe0/0xe0 [ 266.248510] ? __might_fault+0x12b/0x1e0 [ 266.248515] ? __lockdep_init_map+0x105/0x590 [ 266.248520] ? __lockdep_init_map+0x105/0x590 [ 266.248525] ? lockdep_init_map+0x9/0x10 [ 266.248529] sock_init_data+0xe1/0xdc0 [ 266.248534] ? sk_stop_timer+0x50/0x50 [ 266.248539] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 266.248544] ? _copy_from_user+0xdf/0x150 [ 266.248550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 266.248555] ? bpf_test_init.isra.10+0x70/0x100 [ 266.248560] bpf_prog_test_run_skb+0x255/0xc40 [ 266.248565] ? __lock_acquire+0x62f/0x4c20 [ 266.248570] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 266.248575] ? __lock_acquire+0x62f/0x4c20 [ 266.248579] ? fput+0x130/0x1a0 [ 266.248584] ? __bpf_prog_get+0x9b/0x290 [ 266.248589] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 266.248594] bpf_prog_test_run+0x130/0x1a0 [ 266.248598] __x64_sys_bpf+0x3d8/0x510 [ 266.248603] ? bpf_prog_get+0x20/0x20 [ 266.248607] do_syscall_64+0x1b9/0x820 [ 266.248613] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 266.248618] ? syscall_return_slowpath+0x5e0/0x5e0 [ 266.248623] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.248629] ? trace_hardirqs_on_caller+0x310/0x310 [ 266.248634] ? prepare_exit_to_usermode+0x291/0x3b0 [ 266.248639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.248645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.248649] RIP: 0033:0x457569 [ 266.248664] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.248669] RSP: 002b:00007f025be99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.248681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 266.248688] RDX: 0000000000000028 RSI: 00000000200001c0 RDI: 000000000000000a [ 266.248694] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.248702] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f025be9a6d4 [ 266.248709] R13: 00000000004bd892 R14: 00000000004cc208 R15: 00000000ffffffff [ 266.249651] Kernel Offset: disabled [ 267.129747] Rebooting in 86400 seconds..