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", 0x1000}, {&(0x7f0000003a40)="ad2488f649fbc80b5bffd0ec4005", 0xe}, {&(0x7f0000003a80)="f1c1dc5fc1d6d34dc8bb2bca20eaa52c6693312c7376bee2f7190c85dbbbce34c3d8bc08e72baa9cb9a0903543deb97e32cfb19e16805dc583d29c4182a5d25eb500fa7fe46d6697b14a472d4d7bc00acfc280443a6ed9a1dea41146aa6836eddc3c4ba671b092afa1d3315f392409a209208ebbcf081190f4b4b60e06d528fc90839b3c2f69d57d7a28f9a3e2e3691b12f265df1e18168d2a86c664ba160e4d4c236e0c7e04c56105ee61ec14480ddaf03eda6e41ac8b52b0e2265730d60b86702f607fec0e3fbf10", 0xc9}, {&(0x7f0000003b80)="37b263111d92c714388f9241f64b55e4cab7065538942b73eedab43e4c8a076867500f5507d50948b8b16279c33cc95d45e15ecdc30e99eb392e450bbd80782abd2b8374ab2ab0beb0962428d15e89e473d696ad", 0x54}, {&(0x7f0000003c00)="eee4878b3ac824e73c6f99aa3e0dca1bab0393e2aebc416e16a47296a60e6f2d049dd9d72b7fc87d7dfa6603b10384dcdcd77bdad30cbae0fc14bfb60a5eb8705e8d63b3528070a5a5057b1cb458a61a2b", 0x51}, {&(0x7f0000003c80)="364826aa37aac16cf98620e636dc9812faca18bd89f7d02060aa8e4d5f9c6f74a4ea4536faeeb51a8f35ece56c8bfef39a2f7f7a5055082033d64567bd135d3dd9637ad16a231e0b77f28b44dca1564d9ce421d928ba283c26685545151e1e240f7bc4d32012d48c24907188db9cb0eb127571eec4a2fb51d5ef0b6659fb2e006cc5588c6dc3c4e578bcb46ff6a6034bd8f90540dccc0cf8fb7442bc9371b9265622bd392f3d0bf7617f2e18329ac5ea2426", 0xb2}, {&(0x7f0000003d40)="b965ef589e23e5ddf7382a80d214fdcba30edd985023b6faab21a24da248", 0x1e}], 0x7, &(0x7f0000003e00)=[@init={0x18, 0x84, 0x0, {0xfc92, 0x7f, 0x4227, 0x8}}], 0x18, 0x20008400}], 0x5, 0x8000) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000003f80)='/proc/capi/capi20\x00', 0x50000, 0x0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000004000)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000004400)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004040)={0x370, r11, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x17c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e7cfd93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46da7ce2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x403}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ed927f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38e04341}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14a8740e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e3ec936}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9bc2ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8681}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x522d3190}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3690a1ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc834}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77123656}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x660aa5a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x643}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3153d3ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe32c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78a339fe}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe981}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5295}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2079}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34b34ded}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1940d9c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x270e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x606c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d8b185c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47f8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc0a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x190a9c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe03b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa697}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ac8981c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ed5e25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x491b9063}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e6baadd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafe69d8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2db2d2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65056072}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35aeabca}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b1cbac0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x493b8953}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x448db033}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cf51ccc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f91dafa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25468465}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bfdf64c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c02bc33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2124916b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11be7246}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fa4cd2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38f3fd59}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x277fe065}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52212aa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x694f5863}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ab257f4}]}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x4000}, 0x4) lsetxattr$security_evm(&(0x7f0000004440)='./file0\x00', &(0x7f0000004480)='security.evm\x00', &(0x7f00000044c0)=@md5={0x1, "e30180cd93aeb674f4a2a058bfc129d8"}, 0x11, 0x1) bind$nfc_llcp(r10, &(0x7f0000004500)={0x27, 0x1, 0x1, 0x2, 0x80, 0x5, "29cc8414e5c5888001163d196d06c2ca877c9579d2d055b3f8b6cc724f74e469fcaf19f1bb76f524142caf307fffa40a3b02bacf1620277db3ecf370e858bc", 0x2f}, 0x60) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000045c0)={r9, 0x28, &(0x7f0000004580)}, 0x10) r12 = getuid() ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f00000046c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000004700)={0x7, 0x81, {}, {0xee01}, 0x1, 0x9}) fstat(0xffffffffffffffff, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000004600)='127.0.0.1\x00', &(0x7f0000004640)='./file1\x00', &(0x7f0000004680)='9p\x00', 0x10c0422, &(0x7f00000047c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@cache_loose='cache=loose'}, {@cache_fscache='cache=fscache'}], [{@subj_user={'subj_user', 0x3d, 'selinuxwlan0+$'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'activebackup\x00'}}, {@euid_eq={'euid', 0x3d, r12}}, {@subj_role={'subj_role', 0x3d, 'selinuxposix_acl_access,wlan0keyringvmnet1posix_acl_accessself'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x32, 0x33, 0x64, 0x36, 0x31, 0x35, 0x33], 0x2d, [0x34, 0x62, 0x3f, 0x65], 0x2d, [0x32, 0x64, 0x2, 0x63], 0x2d, [0x39, 0x33, 0x61, 0x38], 0x2d, [0x64, 0x30, 0x61, 0x30, 0x33, 0x62, 0x33, 0x62]}}}, {@uid_eq={'uid', 0x3d, r13}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r14}}, {@fowner_gt={'fowner>', r15}}, {@obj_user={'obj_user', 0x3d, '{selinux'}}]}}) 05:05:10 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x500, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x3d}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x44}}, 0x2400c000) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x10000, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000200)={0x36, 0xc, 0x8, "13938cc6d5d3807b642135b5e80c92b1658bb0f0bef563c508cf4500e391f0934c06931554703717acd54d9f1d65fcf1eb40151e8ed691415d085cc5", 0x6, "c065cc8db0b3b64358d3b6d880c6eb7233f6396f179368265323bab4bede3c5a2c96807535ccfbfaead3d72188401d22b76451bf5ee27fa97b987386", 0x8}) r3 = request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='\x7f\x00', 0xfffffffffffffffa) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r5 = getegid() keyctl$chown(0x4, r3, r4, r5) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000940)={0x0, 0x9}, &(0x7f0000000980)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000a80)={&(0x7f0000000440)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000480)="145dbeffa9f7c14c4ea7788e3ab5c3f33eccdb09764b518e102debc103fa3ad274ff6e3b955ade02ab7f4074cdec22899eb05dfa709b057f8285c54564ee08106315548421cf72c61749e7290e723b887b0a15e9327d974f20346f8ee2486dc34946a073ccc5399b8940e76d26bcce743190dbeb402b7f1c3027e09925816aa71d668dfebb20c57705e19308b7a7cd641e550d582407103c893c1a66550d4d9c4663a578289b22a2cc1b5388ae51d0c5ced393a69be18d124cb1f2734d8cfde5820041c946bcdca48adef286b142f10ea47ecd08554e088460493a351c851972c8", 0xe1}, {&(0x7f0000000580)="21903f82f165769aef667414a8a2ad8ac2e50aac6a8ce42881e73c748a99ed8ccd4d2f5dc4f06980089fd121cc70c8e4593f9175b1333dd167889e027979324c495b79b78dfb35782e1ee98c0ffb7731bf4a9c547a28e8b4d06bc4039c2ac4b66d006c4b273fbb5acc40e854e3aed4e000648bc12591ccddbe2ab3bd5fa7d842642aab5db15559c4e66824f4ed86fcfbe301a014203d010b44deb27d2d48a36e780700529dab8c02cedb697739cecb18aeabdebadacbea624db88a5f54b2a114ec3a5c8173a0e8efb3f42ab299374ee68e4729f9340e795be573a77476889cb61b22df4e77183ea22704d055b838d9", 0xef}, {&(0x7f0000000680)="2e109ac34e0a1a196844315e338ce792a8351ae0be7001187f0445a07e6e303eb3f6e74325d47c6e10f0ac1b295441cf0f", 0x31}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="a09f71afdb9ca534c979418d83c421bbd3145015004f00846ccabe72dd694626e54b6cd754d3d5926c75589ad8cc40f04057e87440612a06e71c0517b8163d9bcd54d4a929d2ef8d1518cf932eefecf71722fcb2a1ae7dd8c2b0da699e1f0692821df1893ab14e8db5b9bc8a9c165dbf203a99f45bc19256c1034c9360b2cef86667512e8b42140a7d8683d762f1f0f1d7ebcd8c", 0x94}, {&(0x7f00000007c0)="e82172f504c2f5f8d58840066a699bd492848a7cb5e32ecb3721b874f939ab1babc7e3b3391c7b9f18b3e7d8045173dce29a3f107658b2642492abeebb453794e255a934f12ecb05b2e87d87993fb75793f7ce32713447147d4eb5c567ea19a70a53e17f113accd3264d33dec33fc1c536cfe15b9255749ccb91852172f0a5e361116e031f7f0a7663ace1b8cee208a54f8cf02b07ad1286cb3f5814c9bd44f465d2ee66be1172bba76555ff8b22cb231010938792fbe19824d741de6e96b6a03dbc72dcbffdaff78bc939ee6c7a8507bd6937620ea76f878f3084976bbb87faaa076d47b8c015457ba9ac4995", 0xed}], 0x6, &(0x7f00000009c0)=[@sndinfo={0x20, 0x84, 0x2, {0x8001, 0x202, 0x59, 0x7, r6}}, @authinfo={0x18, 0x84, 0x6, {0xd627}}, @authinfo={0x18, 0x84, 0x6, {0x101}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x90, 0x24008801}, 0xc800) r7 = syz_open_dev$vcsu(&(0x7f0000000ac0)='/dev/vcsu#\x00', 0x6, 0x402) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b40)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x37}}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r9 = accept4$ax25(r0, &(0x7f0000000c40)={{0x3, @rose}, [@netrom, @remote, @netrom, @default, @default, @null, @default]}, &(0x7f0000000cc0)=0x48, 0x800) r10 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/capi/capi20ncci\x00', 0x301000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000d80)={0x9b0000, 0x80, 0x840, 0xffffffffffffffff, 0x0, &(0x7f0000000d40)={0x9e0905, 0xd00, [], @ptr=0x5}}) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/vsock\x00', 0x280980, 0x0) ioctl$BLKBSZSET(r11, 0x40081271, &(0x7f0000000e00)) r12 = syz_open_dev$mouse(&(0x7f0000000e40)='/dev/input/mouse#\x00', 0x7f, 0x100) ioctl$TUNGETFILTER(r12, 0x801054db, &(0x7f0000000e80)=""/76) ioctl$SIOCGIFHWADDR(r7, 0x8927, &(0x7f0000000f00)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000f80)={0x9b0000, 0x10001, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x990966, 0x8, [], @ptr=0xfffffffffffffff9}}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r13, 0xc08c5336, &(0x7f0000000fc0)={0x3ff, 0x3ff, 0x0, 'queue0\x00', 0x8}) ioctl$KVM_SET_PIT2(r10, 0x4070aea0, &(0x7f0000001080)={[{0x9b83, 0xafd7, 0x20, 0x7, 0x1, 0x4c, 0x81, 0xf7, 0x80, 0x3f, 0x9c, 0x42, 0x2}, {0x8000, 0x0, 0x6, 0x80, 0x1, 0x5, 0x20, 0xff, 0xff, 0x81, 0x0, 0x0, 0x3}, {0x6, 0x8000, 0x3, 0x6, 0x5, 0x80, 0x1, 0x2, 0x6, 0x3, 0x9, 0x2, 0x5}], 0x5}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001540)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001780)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x3945e0a845306a15}, 0xc, &(0x7f0000001740)={&(0x7f0000001580)=@newtclass={0x1a8, 0x28, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x9, 0xffe3}, {0x2, 0xa}, {0x5, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0xb4, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x3f, 0x1, 0xf50, 0x5, 0x4, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2a, 0x1, 0x12, 0x4, 0x1, 0xffff, 0x3, 0x27a000}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x23, 0x1, 0x3, 0xa, 0x2, 0xab, 0x1000, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0x80, 0x1, 0xad, 0x400}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1f, 0x2, 0x2, 0x4, 0x6, 0x5b67c212}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3a, 0x3, 0x20, 0x7, 0x1, 0x3, 0xe6dd, 0xccf}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0x3}, 0x400, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0xb2, 0x0, 0x5c36, 0x3, 0x101, 0x7f}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x9, 0x2, 0x11, 0x80, 0x88, 0x7, 0x8, 0x8}}]}}, @tclass_kind_options=@c_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x84, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x38ce, 0x1, 0x80000000}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x6, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x8bad}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff, 0x6, 0x7f}}, @TCA_HFSC_FSC={0x10, 0x2, {0x10001, 0x8, 0x7fffffff}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x8001, 0x40}}, @TCA_HFSC_FSC={0x10, 0x2, {0x40, 0x80, 0xfffffffe}}, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x8000, 0xffff}}]}}, @tclass_kind_options=@c_multiq={0xb, 0x1, 'multiq\x00'}, @tclass_kind_options=@c_clsact={0xb, 0x1, 'clsact\x00'}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_cbs={0x8, 0x1, 'cbs\x00'}, @TCA_RATE={0x6, 0x5, {0x7f, 0x9c}}]}, 0x1a8}}, 0x821) socket$nl_xfrm(0x10, 0x3, 0x6) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r11, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, r15, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x20}, 0x1, 0x0, 0x0, 0x44044}, 0x4000080) [ 271.064425][ T8018] IPVS: ftp: loaded support on port[0] = 21 [ 271.193955][ T8018] chnl_net:caif_netlink_parms(): no params data found [ 271.227598][ T8021] IPVS: ftp: loaded support on port[0] = 21 [ 271.313473][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.321237][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.329560][ T8018] device bridge_slave_0 entered promiscuous mode 05:05:10 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10b042, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/86) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x1, 0x4, 0x2, {0x7, @vbi={0x7, 0x2, 0x2, 0x34324948, [0xfff, 0x1], [0x4, 0xbbf], 0x2}}, 0xfffffffc}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x111002, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) r2 = accept4$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x6932, @hyper}, 0x10, 0x80800) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000240), &(0x7f0000000280)=0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0xe01, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000300)={0x0, 0x1, 0x6, 0x2, 0x7fff}) r4 = syz_open_pts(r0, 0x8000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000380)=r5) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x1411, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x30}}, 0x801) socket$rxrpc(0x21, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@empty, @in6=@empty}}, {{@in=@loopback}}}, &(0x7f0000000600)=0xe8) r8 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0xffff, 0x80100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={0x0, 0x8001}, &(0x7f00000006c0)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000700)=@assoc_value={r9, 0xfffffffe}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x5f, 0x5f, 0x30, 0x5f, 0x0, 0x61, 0x30]}}, &(0x7f0000000780)=""/27, 0x3a, 0x1b}, 0x20) r10 = accept4$alg(r6, 0x0, 0x0, 0x80000) getpeername(r10, &(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000880)=0x80) r11 = pidfd_getfd(r1, r2, 0x0) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r12, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x2004) ioctl(0xffffffffffffffff, 0x80000001, &(0x7f0000000a00)="66e58e853222337111aaf4dd387891") r13 = request_key(&(0x7f0000000a40)='encrypted\x00', &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000ac0)='vmnet1vmnet0ppp0-&selfbdevppp1loeth1em0GPLwlan0:bdev[\x00', 0xfffffffffffffffc) r14 = request_key(&(0x7f0000000b80)='trusted\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)='/dev/hwrng\x00', 0xfffffffffffffff9) keyctl$search(0xa, r13, &(0x7f0000000b00)='.dead\x00', &(0x7f0000000b40)={'syz', 0x3}, r14) r15 = creat(&(0x7f0000002580)='./file0\x00', 0x40) bind$netlink(r15, &(0x7f00000025c0)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) [ 271.362966][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.370526][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.379578][ T8018] device bridge_slave_1 entered promiscuous mode [ 271.403711][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 271.424346][ T8018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.441828][ T8018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.484971][ T8018] team0: Port device team_slave_0 added [ 271.492787][ T8018] team0: Port device team_slave_1 added [ 271.511469][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.518580][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.552701][ T8018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.565449][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.579016][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.617486][ T8018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.636247][ T8029] IPVS: ftp: loaded support on port[0] = 21 05:05:11 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x4, 0x2, 0x4, 0x40, 0x4, {0x77359400}, {0x4, 0x1, 0x0, 0x7, 0x40, 0x7, "3ab951ca"}, 0x80, 0x2, @fd=r1, 0x3, 0x0, 0xffffffffffffffff}) ioperm(0x1046, 0x7, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x7, 0xe4, 0xe0, 0x10b], 0x5, 0x7014, 0x3, 0x4, 0x3ff, 0x8, 0x5, {0x8, 0x1ff, 0x0, 0x7, 0x8000, 0x4, 0x1000, 0x3387, 0xfff, 0xc8e, 0x3916, 0xc0a9, 0x7, 0x4, "8c6e8c6a73c4b2d912b7e89a24f509339504e485326683f3e0052e7526491cb2"}}) fstatfs(r2, &(0x7f0000000200)=""/230) accept$inet(r3, &(0x7f0000000300)={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x10) io_uring_enter(r0, 0x800, 0x8, 0x0, &(0x7f0000000380)={[0x1f]}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000480)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/attr/current\x00', 0x2, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x100, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) clone(0xc8244800, &(0x7f0000000680)="c95d5e6149ce2966366da18f6e6d7ca636f9577f040777677774f4c7242fdb990be247b7f15476cb912caa45aeba3ca8b88cc2f6cd00dcfacb8bf925f55510c8b24a115e4822456c52a572", &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="a5a3692c14682c69b0bb69f0841e4985755350003f95eab86f70a994c20259ae459c34b92fecd968fe6b8d22788a98af9239e1a641edd8aa297e15df6365d43cd9a9114d091a3c6c5617c4e2c8d139a887722551eb3d1fee3b05a31fc94fc7e7c9b6ee639ee75d033b98") r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vga_arbiter\x00', 0x890640, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, &(0x7f0000000b40)=0x1, 0x4) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/sequencer2\x00', 0x28000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000bc0)=0x2, 0x4) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000c00)=""/75) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/ubi_ctrl\x00', 0x21c901, 0x0) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/vcsu\x00', 0x109000, 0x0) r11 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000d00)={0x0, 0x7, 0x4, 0x1, 0x3, {0x0, 0x7530}, {0x4, 0x2, 0x0, 0x5, 0x5, 0x80, "3b9793e5"}, 0x0, 0x2, @fd=r10, 0xffffff81, 0x0, r11}) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ubi_ctrl\x00', 0x400400, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r12, 0x1, 0x1, &(0x7f0000000dc0)={0xfffffffd}, 0x4) r13 = syz_open_dev$audion(&(0x7f0000000e00)='/dev/audio#\x00', 0xd3, 0x1822c0) ioctl$IMDELTIMER(r13, 0x80044941, &(0x7f0000000e40)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/hwrng\x00', 0x24302, 0x0) [ 271.741770][ T8018] device hsr_slave_0 entered promiscuous mode [ 271.789409][ T8018] device hsr_slave_1 entered promiscuous mode [ 271.863758][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.872772][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.880917][ T8021] device bridge_slave_0 entered promiscuous mode [ 271.906899][ T8032] IPVS: ftp: loaded support on port[0] = 21 [ 271.919026][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.926195][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.934472][ T8021] device bridge_slave_1 entered promiscuous mode 05:05:11 executing program 4: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/253, 0xfd) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000240)={0x9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x1d, r2, 0x3, {0x1, 0xff, 0x1}}, 0x18, &(0x7f0000000f40)={&(0x7f0000000ec0)="732d1b2b862dc4e3d845bf8bec5211174652f705c0c90ba3781de1186ed95d5060b6baea679b4fc5df3dec05cb6e8d9044f176a4c8626f19c7cbdca187599ad993d86c34766e2f180385289667524dafaa96a9004ddbcb3d", 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x80) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/ttyprintk\x00', 0x402041, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$can_j1939(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x1d, r2, 0x1, {0x0, 0xff}, 0xfe}, 0x18, &(0x7f00000010c0)={&(0x7f0000001080)}, 0x1, 0x0, 0x0, 0x4000010}, 0xc001) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001140)='net/udplite6\x00') ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000001180)) r5 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f00000019c0)=0x800) r6 = syz_open_dev$vcsu(&(0x7f0000001a00)='/dev/vcsu#\x00', 0x0, 0x82000) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, 0xc, 0x6, 0x3, 0x0, 0x0, {0xe, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}}, 0x2200c8e0) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000001b80)={0x5}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001bc0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000001c00)={0x20}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001c40)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r8, 0xc0405519, &(0x7f0000001c80)={0x6, 0x4, 0x6, 0x3, 'syz0\x00', 0x2}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/ttyprintk\x00', 0x10402, 0x0) r9 = syz_open_dev$mice(&(0x7f0000001d00)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$VFIO_IOMMU_GET_INFO(r9, 0x3b70, &(0x7f0000001d40)={0x18, 0x0, 0x0, 0x2}) r10 = syz_open_dev$radio(&(0x7f0000001d80)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_AUDOUT(r10, 0x80345631, &(0x7f0000001dc0)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001e00)={0x10000, 0x8, 0x4, 0x0, 0x1, {0x77359400}, {0x5, 0x8, 0x1, 0x20, 0x2, 0x20, "44f102e4"}, 0x9, 0x1, @userptr=0x8001, 0x6, 0x0, 0xffffffffffffffff}) ioctl$SG_GET_ACCESS_COUNT(r11, 0x2289, &(0x7f0000001e80)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001ec0)={0x0, 0x64}, &(0x7f0000001f00)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001f40)={r12, 0x1, 0x1000}, 0x8) [ 271.990281][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.015599][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.117804][ T8021] team0: Port device team_slave_0 added [ 272.145812][ T8029] chnl_net:caif_netlink_parms(): no params data found [ 272.207703][ T8021] team0: Port device team_slave_1 added [ 272.241758][ T8018] netdevsim netdevsim0 netdevsim0: renamed from eth0 05:05:11 executing program 5: llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/48, 0x30) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x101, @mcast2, 0x2}, 0x1c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x600, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000140)={0x3ff, "9fa3cb181d1567a6a97c37750582f81b55dc70ed79a080124fe62a65db38370b"}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x1402, 0x400, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={@none, 0x8001, 0x200, 0x9, 0x7ff, 0xfffc, "3a8b5afdf56bb08f187e03c41a97924bf3c8c15542878405fa8dc1f37539c8eaf6adb7f409eb8b5c12b1e641de28e0ae85491d323a84d95382d95a250f8591c3b46bd4250a20fc8fc311b054d7900051d982545f5f74d950e7a7e4048bf6a7b672dc478dbc743dccc04509ea7a704055582ec419a10cb0d33d1f4d40add2db10"}) r2 = timerfd_create(0x9, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000340)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x28440, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff7000/0x8000)=nil, 0x1000}) r4 = syz_open_dev$vcsu(&(0x7f0000000400)='/dev/vcsu#\x00', 0x10000, 0x525601) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000440)=0x400) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4008040) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000580), 0x10) r7 = syz_open_dev$ndb(&(0x7f00000005c0)='/dev/nbd#\x00', 0x0, 0x16200) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000600)) r8 = pidfd_getfd(r0, r1, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0xffffffff80000000) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r9, 0xc0406400, &(0x7f00000007c0)={0xffff, 0x3, 0x2, 0x63, &(0x7f0000000680)=""/99, 0x2b, &(0x7f0000000700)=""/43, 0x42, &(0x7f0000000740)=""/66}) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000800)='/proc/capi/capi20\x00', 0x80000, 0x0) write$P9_RLINK(r10, &(0x7f0000000840)={0x7, 0x47, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x8, 0x3, 0x8, 0x40, 0x7fffffff, 0x2}, &(0x7f00000009c0)=0x9c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000a00)={r11, 0x1, 0x7, [0x7, 0x8001, 0xbca, 0x93f3, 0x81, 0x3, 0x4]}, &(0x7f0000000a40)=0x16) ioctl$IMHOLD_L1(r7, 0x80044948, &(0x7f0000000a80)=0x80000001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ac0)={0x0}, &(0x7f0000000b00)=0xc) clone3(&(0x7f0000000d40)={0x72100c00, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)=0x0, {0x4}, &(0x7f0000000c00)=""/9, 0x9, &(0x7f0000000c40)=""/129, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0], 0x2}, 0x50) r14 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r15 = socket$l2tp(0x2, 0x2, 0x73) kcmp$KCMP_EPOLL_TFD(r12, r13, 0x7, r14, &(0x7f0000000dc0)={r0, r15, 0x10001}) [ 272.305876][ T8035] IPVS: ftp: loaded support on port[0] = 21 [ 272.320152][ T8018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.362019][ T8018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.431037][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.438024][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.463972][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.487003][ T8032] chnl_net:caif_netlink_parms(): no params data found [ 272.495746][ T8018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.561270][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.568334][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.594524][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.618442][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.625708][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.634042][ T8029] device bridge_slave_0 entered promiscuous mode [ 272.643186][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.650259][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.658006][ T8029] device bridge_slave_1 entered promiscuous mode [ 272.681383][ T8042] IPVS: ftp: loaded support on port[0] = 21 [ 272.771329][ T8021] device hsr_slave_0 entered promiscuous mode [ 272.829250][ T8021] device hsr_slave_1 entered promiscuous mode [ 272.879067][ T8021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.886629][ T8021] Cannot create hsr debugfs directory [ 272.899393][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.934712][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.986412][ T8029] team0: Port device team_slave_0 added [ 272.994400][ T8029] team0: Port device team_slave_1 added [ 273.011701][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.018679][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.044828][ T8029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.068039][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.075163][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.101345][ T8029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.146871][ T8035] chnl_net:caif_netlink_parms(): no params data found [ 273.159336][ T8021] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.210464][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.217597][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.226828][ T8032] device bridge_slave_0 entered promiscuous mode [ 273.235614][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.242717][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.250658][ T8032] device bridge_slave_1 entered promiscuous mode [ 273.269271][ T8021] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.380552][ T8029] device hsr_slave_0 entered promiscuous mode [ 273.439304][ T8029] device hsr_slave_1 entered promiscuous mode [ 273.489077][ T8029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.496730][ T8029] Cannot create hsr debugfs directory [ 273.508332][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.517915][ T8021] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.588588][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.600643][ T8021] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.695552][ T8018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.715492][ T8032] team0: Port device team_slave_0 added [ 273.729627][ T8042] chnl_net:caif_netlink_parms(): no params data found [ 273.740363][ T8032] team0: Port device team_slave_1 added [ 273.774920][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.782229][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.790102][ T8035] device bridge_slave_0 entered promiscuous mode [ 273.805414][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.813177][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.826270][ T8018] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.841901][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.849248][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.856997][ T8035] device bridge_slave_1 entered promiscuous mode [ 273.876039][ T8035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.894378][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.901416][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.927539][ T8032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.941041][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.948019][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.973974][ T8032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.985169][ T8029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 274.031772][ T8035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.041625][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.052509][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.061266][ T3104] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.068357][ T3104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.090834][ T8029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.151960][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.159991][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.168668][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.179357][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.186439][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.230766][ T8032] device hsr_slave_0 entered promiscuous mode [ 274.279372][ T8032] device hsr_slave_1 entered promiscuous mode [ 274.319380][ T8032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.326985][ T8032] Cannot create hsr debugfs directory [ 274.332914][ T8029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 274.401760][ T8035] team0: Port device team_slave_0 added [ 274.407546][ T8029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 274.472401][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.482930][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.494058][ T8035] team0: Port device team_slave_1 added [ 274.512569][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.520494][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.548837][ T8035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.563400][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.570444][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.596479][ T8035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.642698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.651309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.659878][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.668531][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.677241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.685663][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.694803][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.751466][ T8035] device hsr_slave_0 entered promiscuous mode [ 274.789498][ T8035] device hsr_slave_1 entered promiscuous mode [ 274.849068][ T8035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.856683][ T8035] Cannot create hsr debugfs directory [ 274.862362][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.869712][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.877378][ T8042] device bridge_slave_0 entered promiscuous mode [ 274.886942][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.894042][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.901973][ T8042] device bridge_slave_1 entered promiscuous mode [ 274.921783][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.931185][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.942111][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.968408][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.978746][ T8018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.007979][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.036925][ T8042] team0: Port device team_slave_0 added [ 275.050123][ T8042] team0: Port device team_slave_1 added [ 275.093105][ T8032] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.163524][ T8032] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.212242][ T8032] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.273315][ T8032] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.332110][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.339994][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.348417][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.356253][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.366741][ T8018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.383110][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.415451][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.423057][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.449662][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.480087][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.488707][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.497396][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.504464][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.512500][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.521111][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.529825][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.538317][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.546883][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.553939][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.562326][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.571241][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.580886][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.591411][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.598493][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.625020][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.641593][ T8035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.738002][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.745330][ T8035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.781196][ T8035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.832052][ T8035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.881898][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.890392][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.901339][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.909602][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.962811][ T8042] device hsr_slave_0 entered promiscuous mode [ 275.999430][ T8042] device hsr_slave_1 entered promiscuous mode [ 276.059669][ T8042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.067244][ T8042] Cannot create hsr debugfs directory [ 276.075869][ T8018] device veth0_vlan entered promiscuous mode [ 276.102386][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.111858][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.121051][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.129683][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.138140][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.166141][ T8018] device veth1_vlan entered promiscuous mode [ 276.190621][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.199795][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.208006][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.216641][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.224975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.233379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.241228][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.253390][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.267254][ T8029] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.310655][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.318883][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.327478][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.335822][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.342866][ T3640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.378046][ T8042] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.412456][ T8042] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.480780][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.488867][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.497571][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.505891][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.512945][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.521577][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.530421][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.566221][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.573689][ T8042] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.600442][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.607815][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.615759][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.625450][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.634257][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.642800][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.651810][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.660377][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.671268][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.682993][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.699449][ T8042] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 276.744345][ T8029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.756305][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.774087][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.782640][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.791393][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.799883][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.812018][ T8018] device veth0_macvtap entered promiscuous mode [ 276.840649][ T8018] device veth1_macvtap entered promiscuous mode [ 276.853491][ T8035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.873155][ T8032] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.889153][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.897673][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.906157][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.914289][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.922169][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.930196][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.938052][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.947196][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.958508][ T8035] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.982237][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.994488][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.002681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.011421][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.020343][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.027371][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.035318][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.043045][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.050790][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.059439][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.067808][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.074853][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.082800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.091603][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.101037][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.110867][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.129066][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.138282][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.147927][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.157493][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.174666][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.183905][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.192948][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.201075][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.220994][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.234282][ T8021] device veth0_vlan entered promiscuous mode [ 277.249243][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.258084][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.267886][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.274966][ T3640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.283138][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.291831][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.300405][ T3640] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.307429][ T3640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.315850][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.324833][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.333612][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.342270][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.350808][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.359794][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.368193][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.390326][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.398297][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.407990][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.416733][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.425367][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.433875][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.444430][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.459243][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.467667][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.492178][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.500671][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.512656][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.521060][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.530342][ T8021] device veth1_vlan entered promiscuous mode [ 277.539763][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.548603][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.593594][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.605046][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.612598][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.648362][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.667759][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.677098][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.685822][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.703777][ T8021] device veth0_macvtap entered promiscuous mode [ 277.713884][ T8029] device veth0_vlan entered promiscuous mode [ 277.733020][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.742950][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.750892][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.759814][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.768889][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.777122][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.784800][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.795468][ T8021] device veth1_macvtap entered promiscuous mode [ 277.810352][ T8029] device veth1_vlan entered promiscuous mode [ 277.828548][ T8035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.846570][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 277.858173][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.869840][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.884481][ T8042] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.899432][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.907734][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.916919][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.925737][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.934782][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.943843][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.951735][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.959978][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.968426][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.977098][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.984163][ T8044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.994822][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.007074][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.020534][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.050689][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.058716][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.068485][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.077998][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.086760][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.095466][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.104306][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.113055][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.120238][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.128055][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.159328][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.168499][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.192903][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.201572][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.210383][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.227590][ T8032] device veth0_vlan entered promiscuous mode [ 278.253658][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.273862][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.282764][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.291977][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.300706][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.316686][ T8029] device veth0_macvtap entered promiscuous mode [ 278.334305][ T8029] device veth1_macvtap entered promiscuous mode [ 278.352140][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.365921][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.374377][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.383118][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.391758][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.399823][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.409282][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.418069][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.426776][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.436635][ T8032] device veth1_vlan entered promiscuous mode [ 278.453311][ T8042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.471449][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.486306][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.507224][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.535944][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.561236][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.573507][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.584718][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.603101][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.615126][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.629487][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.638793][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.647366][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.659877][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.671225][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.682521][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 278.693036][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.704036][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.711519][ T8035] device veth0_vlan entered promiscuous mode [ 278.729299][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.737417][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.749492][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.758451][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.767685][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.776308][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.798720][ T8035] device veth1_vlan entered promiscuous mode [ 278.806743][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.816601][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.828364][ T8032] device veth0_macvtap entered promiscuous mode [ 278.860005][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.881309][ T8032] device veth1_macvtap entered promiscuous mode 05:05:18 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x50, 0x4, 0x320, 0xc8, 0xc8, 0x190, 0xc8, 0x190, 0x258, 0x258, 0x258, 0x258, 0x258, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'rose0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x37c) [ 278.917539][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.927590][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.936522][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.945661][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.963018][ T8035] device veth0_macvtap entered promiscuous mode [ 278.971537][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 278.983817][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.004042][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 05:05:18 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0xa) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fchdir(r0) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)={0x6, [0x100000001, 0x7ff, 0x6, 0x101, 0x7, 0x1ff]}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = fcntl$getown(r1, 0x9) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000280)=r3) open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) clone(0x21000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEXC(0xc, 0x20000) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) [ 279.021558][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.033232][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.044474][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.058557][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.070910][ T8035] device veth1_macvtap entered promiscuous mode [ 279.077931][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.091904][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.101289][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.110377][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.122288][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.133655][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.144258][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.182808][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.204696][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.217196][ T8131] overlayfs: overlapping lowerdir path 05:05:18 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) r0 = getpid() ptrace$getregset(0x4205, r0, 0x0, &(0x7f0000000280)={0x0}) creat(&(0x7f0000000200)='./bus/../file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000014007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]}]}}]}, 0x478}}, 0x0) [ 279.231969][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.247072][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_1 05:05:18 executing program 0: ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, &(0x7f0000001840)=@filter={'filter\x00', 0x50, 0x4, 0x320, 0xc8, 0xc8, 0x190, 0xc8, 0x190, 0x258, 0x258, 0x258, 0x258, 0x258, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'rose0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x37c) [ 279.295756][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.332263][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.393652][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.405625][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.416062][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.426742][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:05:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c00)="a0", 0x7500}], 0x1, 0x0, 0x0, 0x80b50000}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="d6", 0x8500}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000a80)='V', 0x1}, {&(0x7f0000000ac0)='C', 0x1}, {&(0x7f0000001c00)="16", 0x1}, {&(0x7f0000000b40)="b7", 0x1}, {&(0x7f0000001cc0)="e4", 0x1}, {&(0x7f0000001d80)="9b", 0x1}, {&(0x7f0000001e80)="c5", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000021c0)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002340)="1a", 0x1}, {&(0x7f0000002380)='k', 0x1}, {&(0x7f0000002440)="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", 0xbc1}, {&(0x7f0000003440)="1b", 0x5fffc27b}, {&(0x7f0000003480)="9e", 0x200021c1}, {&(0x7f0000003500)="dd", 0x1}, {&(0x7f0000003540)="c1", 0x1}, {&(0x7f0000003640)='\x00', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f00000037c0)='U', 0x1}], 0x1}}], 0x6, 0x6041054) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 279.436899][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.451198][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.469915][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.487891][ C0] hrtimer: interrupt took 45335 ns [ 279.500456][ T8152] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 279.503421][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.530960][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.557704][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.573160][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 05:05:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c00)="a0", 0x7500}], 0x1, 0x0, 0x0, 0x80b50000}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="d6", 0x8500}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000a80)='V', 0x1}, {&(0x7f0000000ac0)='C', 0x1}, {&(0x7f0000001c00)="16", 0x1}, {&(0x7f0000000b40)="b7", 0x1}, {&(0x7f0000001cc0)="e4", 0x1}, {&(0x7f0000001d80)="9b", 0x1}, {&(0x7f0000001e80)="c5", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000021c0)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002340)="1a", 0x1}, {&(0x7f0000002380)='k', 0x1}, {&(0x7f0000002440)="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", 0xbc1}, {&(0x7f0000003440)="1b", 0x5fffc27b}, {&(0x7f0000003480)="9e", 0x200021c1}, {&(0x7f0000003500)="dd", 0x1}, {&(0x7f0000003540)="c1", 0x1}, {&(0x7f0000003640)='\x00', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f00000037c0)='U', 0x1}], 0x1}}], 0x6, 0x6041054) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 05:05:19 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0) r0 = getpid() ptrace$getregset(0x4205, r0, 0x0, &(0x7f0000000280)={0x0}) creat(&(0x7f0000000200)='./bus/../file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000014007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]}]}}]}, 0x478}}, 0x0) [ 279.600162][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.617225][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.631272][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.648668][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.681801][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 279.715001][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.750600][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 05:05:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c00)="a0", 0x7500}], 0x1, 0x0, 0x0, 0x80b50000}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="d6", 0x8500}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000a80)='V', 0x1}, {&(0x7f0000000ac0)='C', 0x1}, {&(0x7f0000001c00)="16", 0x1}, {&(0x7f0000000b40)="b7", 0x1}, {&(0x7f0000001cc0)="e4", 0x1}, {&(0x7f0000001d80)="9b", 0x1}, {&(0x7f0000001e80)="c5", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000021c0)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002340)="1a", 0x1}, {&(0x7f0000002380)='k', 0x1}, {&(0x7f0000002440)="1a36898404fcd419d9d40b67f7a61a85b41845a085cad18a08db4ef236471ad1d3fc84b8f9e948cb97146e699e42982aa0c4d45877cb7e715a7ba3f49d3fdc9ca255b6726f3aa83fe25c98f7530180852880404cb612c5484f7dd4c715bb1dbc6e47bb67d963316f2f775686d7b14510dc947d3a850ed08688778963a8c93cd86fef8466bbbe3e3c63c3b40c526614a63252ec03ee6b5789438fa84e40edc2cf3f398b8109fb43ee58ead47e4d6ee86c8915063932dab4189eb2381a29e440c6f70bcd7b5a2370daa85deb24be62dd66b5cbcf0add7b6b6f1a9b459786d5182eed36e45f0d0512303824ce299ca150c4c140b77aea207245820945cf37b35a09b127018de34f93c7faf308800e3dbf3619e19c2d29367dc576ef486ecde1998fadc5505a9b27160fbf7e75bcabdff4008f15085ed2d0a9c5e62161849df19c4c7d2afc303221ec48f019a8f2954769783daddc89c937a7fa64f9141436c9eaea8ff17cd99d9a328727d847612bfe72d51b2bc75ef22a88444a6052dc40ed06c81eb156669244562ff2de1e31b06e3b9f77a2e547dd0288ef8177fb3496fea0758ed01c6773f98590ff6ca7a293830431579fe2f61c4bd3812f1790727b1dc8f7dc5047d3fe2eba8174f27fc66e224831f9ced08c056931141461d8967daf8725beba085f860a1fcdde3d8fd8a504210086586d8c276e2a8f08d3617ba4dec7efc5b34432a7336d776b9be3b393d21060a875306d1a48f700de002220045333e12aa9687a6d6e70b576e15eb2daf31e4f6c42ce31d6c7cd171b5ea9cc60411438343a1cf36aac6f49255f887d4d0efc0d0015447a80eb239b097b408e9c749f83afc732e1859e5080cf6f610cbb504e9e03d59202a46f253a6275cb7da845d046d19fe4c1483bf61f59b9caf11ed917a78cf209cd3110b6b0ab95d3bb708d0addf52d15548185426a4b196e4e361784c9f6cf1dd2793941d50ed334bc5db03f73791206bc5a4eba02f9869d6723c12ea58b598acce1cfb543f9fd552790aafbb8217d348c4b43a594d7c86e2bfd9155b977aabef7cade94625d878cd0c668d3603911d976886a5d8279dc52afea8d4a5004ccec770c5c4c0c2aa3b60d98d399076c76f08b908b239f5eca25e082e2bae8adfab446f5d8dd8a50bc78e488f2220c8551a2dc37e9f8063be987456eb005d679ebb40614dcf1f2526a2ebf30a818ad3501a328ca13b31e8f11fb4fcb5cabb8654bf55b180264c77017dd2fed55e0fb6453302d2aba7fe5b9d831775d9d455f5bdafdb691f101dc40bb3d67e2ba2694d189223cee1e58a7ca53886902da05488bd2b7de8b2980a664602ea518210114ba72a8bb6dabc069ad55355fbbcf865a9f4071f9e7e29304634b63de552a894c57e1bf1c1038fea722172f0596cb4a725b06c5128ed332270bd3fd04299d07e48a941232f0506f93cf04291f54ca9a2a001b08f6c15bec8d9a0a4fceccb38427a04b9feba5c7ddc0fea96a2530e10592d53d03f6f5c2a038013761a28f0a0878a3b6593b5115a6bcc8e0951ee8a9f2a864f3dec94b617900da9c652c2435a0cb89be1e5c3a82535d8d361ec1914009c023656ebe70c114921fb13200a2ff3dd561cec562c988b8dba8cecab7220ba44d3e338406f5f7d19a4362a591b871d5799977cd6763013a263bc8388b76dfc827aa1604a32812b961220ae124dda15db50fbdb43d7cdcaa4f15c66ceaf566bf05e94d744d2a92e623de79d3dda58b1558f98301ba34dd01ecbe2d3d82b86cd1153f60aff12cc7e9aa3df5d3a092a0a83fa0705a4797d03d7e407a22341bad67fdb3a7678b6c32257e6703c186cf933d133d06d862457b5ee5133772728ffa5910802b1781ba5a0bd7bd54d0facf2b9a26100ac94e3a9b5678016f625e34e5c4802361ad2419e577034354b15b86bb0a2bba3e696634a8e4f2dd2c4b4fb96f86a49776352bb8868e7d004443b7952a48753714f1ff4a9361725c4491b5e35ce8ead01614bb3ba713089721b352aa45172a9ee00fbcf0edfe0d84cba81342be484e654d7ee24455f38d916a8768338e8cfd284e3fceb6db3148731d59ad80895ac2000419cc40e1a41a66f2f6593fd5622358197b9e08a9779ffc10f0307beaeb7132f73a93ab36b941a7fc951f3dde01a39f629d9e0f846eb3fdc55ed67a98e93311574fe6701876a2de6f1f3a551dc121705b62d4372c9cd3d39c637d5656eedd54aeffbf44d880c1317616c79c1847b0f2404728b9b9022defec5967c5199ef62cd61c58216dc2624bfe748cfc3bc94e1435939e74897946086c73052621e60a47c2352bc120367efd2cfa18033e9627ef3761daf396468c276a6973999abd1db23a0ae6c1ebcb62aabde721bfebd58ba02a5165d0e164dbe92d3f9cfc9ded7b1d7ca95a1d69eed8aaeaf8cc48e289d10c84a9b96498b281c3b02c19a93c4eb062970daf8fca6d50faa51efcadbd5ebc90c667e354f8bc4ce930aa1964e422a056dd207096da44bb02a1a1a8a2506484e9005e9d95e65cf50ae0870bfe0506acbaa305c5b0c9e690bedfea3c78d74ef8f1c595ccc31a678c684a5a15a01522ab6fe5a98d671d507a4ca77a08086caee8605668349c46c53fef6ef9ce346e2e8710a13273f0a3633f23c28cec086e593e66871db4285feb03dd6e33903a63397cf67bc1ffd19907e14acaf343996434231120257aa71f0649b5709f8a125c4f165207b81b35ff6d04e0f865389f34c1cd287b8844811864ccd20c1c1b07836bf8ec4e4e6b4b47e5a72f9a89c65807c9a8ba87e3de03015ccc04f53ab23bcf87214841b0623ff216b3c50767c143f1b286c453965743f03dca948b5a015895a82fd2a581a28a6701546e9c83545e7c0fc1806599105d94e7c987aab4e466ea9ecad267e2a2f28973ed609249bb998b022efaf972bca0e21259ae188d6ac5d29a4efc0b92d5ad6735ce7e5fa499eb02387bc5ea84b136dfbc4c8a3dd8f5f3f4dde1df9aea146a56886d3b848e36ad3512cde9ae3f42f85e57610582980685f1a26b96b56e8dcc9f01ca72fca889adfb85a9d85850f82c6d6ddb7dad47499a874189d211df6a5227e138c0cc373ca25a0c4157993072d5372d5cf13a5f2a523d2aeda445d3a9b1437bafcb47991956d1d1802e7fecc3f4c58eee14a39fb0e73e12116befb2a4fe397f59f9ff0e3df0d1f67658a91ca4f9867f3d1e2e7a015c010f64c0ce3958430f53e7887bad19ec2d204859240b5184ee43ea81ad3880f14cf72d3e2ac0b7794c6c91b37f77fdc7f0bcab4f7c20463ba40a369d8cabf2f7e83c65c508a901860e320cffcc143a28248e2b1463eee7cd69b41eff2878087e0ea38f58e65a1a8b7b9abeee2ce67a465878c6e13e377ffac74c924dc2908d3bb3e2cc71ef73f00bdfef1540efbf11ded3e994312b8231a8342b6a15cd12499fd0a7f58e82e6b8157de8b982f8b650b54870a1df3b457cb01867d0a7b99a6cabd1e11de3890d20153877501f7e276798ac7c9074c1f9fc089d46581dffd7d37c8f4ec7fcef7fbd5dfba6d8b907e738141c622331906959c4058335c99889209a40e8487e10c551a3668a5f3583671a351dcf37e04813bb71a7dc26f4a497b49d58260c96a88f57996a9673850b749087baf4b1b42108c3b9d6187187ed31b3cc4e1204edffde60395157d03d054eefe4a96e00b85c60ecf2c3d8c79859ce6ccfd05461d09506784fcebd22ba837dd6858dcf23f5f2f6b8af73442269a3114d65e5224b2ec3e12a096eb5ac24967d2a193de2dcc5e3ab14d21d389e2dcd5a85e37822e69fc3002f98dd02aac9b967fd4bd74b6ddf12331d97d2ca72f65aeea944922a4f3cc950b0d33985a25536f048a1bd9fcacc22cb067f6d997cd3b885ad583b171346e34fc69c0a67b955c68984cf023926204ce8ab2bcad62486005081c056a5343411fbbc81a53d440101d52c7aa78140e2ae839b89d0c37b9a95aeba58600b737db4f2c4feec57a86d8dbded856fd9558c836c831c2759ab1625bb5ccf9acb60a167c507fc392f1171952b2284c2c56aae09a4d8e6b88e76feb807aaf0f40e2ecff2b5a3fc46ab60434573bb9aef19ad85dce78b6792b93fd0f3036e227cba0d4eb5aa70041b05f7a1e1a0d83d219071c74e0a1ccf13a45338d089751255a2a8e56ee53123042a386b410783a972a3364a8daace994dfc02d341c2e50bef67a4533a2dbf983291b89fddd53501bd590b8e", 0xbc1}, {&(0x7f0000003440)="1b", 0x5fffc27b}, {&(0x7f0000003480)="9e", 0x200021c1}, {&(0x7f0000003500)="dd", 0x1}, {&(0x7f0000003540)="c1", 0x1}, {&(0x7f0000003640)='\x00', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f00000037c0)='U', 0x1}], 0x1}}], 0x6, 0x6041054) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 279.764573][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.776908][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.839010][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.848705][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.861193][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.872975][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.908368][ T8042] device veth0_vlan entered promiscuous mode [ 279.936932][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.961830][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.991957][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.007781][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.032494][ T8042] device veth1_vlan entered promiscuous mode [ 280.097483][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.110528][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.118657][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.127302][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.141800][ T8042] device veth0_macvtap entered promiscuous mode [ 280.165499][ T8042] device veth1_macvtap entered promiscuous mode [ 280.201703][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.212883][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.222986][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.233738][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.244040][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.254646][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.264524][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.275278][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.285129][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.295667][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.306998][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.318876][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.329939][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.340087][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.354643][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.373473][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.384411][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.395912][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.406771][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.417644][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.428593][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.440742][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_1 05:05:19 executing program 2: waitid(0x0, 0x0, 0x0, 0x2000000000000004, 0x0) waitid(0x2, 0x0, 0x0, 0x2000000000000004, 0x0) getpgid(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, 0x0) socket(0x10, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000080)={0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) gettid() setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) get_mempolicy(&(0x7f0000000240), &(0x7f0000000380), 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000200)='./bus\x00', 0x20001c1242, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 280.449590][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.457759][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.466441][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.478500][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.488160][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.500425][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.616037][ T8221] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:05:20 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f0000001840)=@filter={'filter\x00', 0x50, 0x4, 0x320, 0xc8, 0xc8, 0x190, 0xc8, 0x190, 0x258, 0x258, 0x258, 0x258, 0x258, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'rose0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x37c) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 05:05:20 executing program 4: creat(&(0x7f0000000040)='./file0\x00', 0x20) r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r1 = epoll_create(0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) epoll_wait(r1, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x575, 0x89) [ 281.057175][ T27] audit: type=1800 audit(1582607120.455:31): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16526 res=0 05:05:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x651a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) 05:05:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000008c0)="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", 0xfc) 05:05:20 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x45}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x24180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) r1 = open(0x0, 0x4e0a02, 0x1572b45d5d54f2ac) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x7ff, 0x100001e, 0x200000, 0xd, 0x1, 0xfffffffd, 0x3, 0x0, 0xffffffffffffffff}}) epoll_pwait(r1, &(0x7f0000001080), 0x0, 0x2, &(0x7f0000000100), 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() tkill(r2, 0x9) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x4, 0x52f383d6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000340)=0x400100000001, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0x100000225) dup2(r3, r7) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYRES16=r7, @ANYRES32=0x0, @ANYRES32], 0x3}}, 0x20000810) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000300)=0xfffffffffffffeaa) setuid(r9) setuid(0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x10007, @rand_addr="dd77b2e63177ab8ca3ca79d475f09fbc", 0x20}, 0x1c) r11 = dup2(r10, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000440), 0x131f64) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') read$char_usb(r12, 0x0, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYBLOB="151dfcb5fd0100000000000000cbbb090000030000000000002259128466267dd97d03df00c3395e5ead60389196f5eec40dcf67e99caab421ed3300640f77bc0f1e9915c867806800531482ee77eb9529af4ac8c141cfbc000bdaefab483488d35ca025520500000000000000000000000000a6480c9b4e6d3db50bcd41f7b556b666f64d62212a3e157802324888e01c0e546a6c79e7df6e14d0faf7ea6783b923d341738047d95390af17f8f787110ee325cfc4b7d0af72cfa34ecff2dc3de9d01dda4f663f564ed6f80ed7f8783c7fed7d3826246a96533001615af5307a722514b631ba4aec000097a27d0026d8b5e6d238c44cefd0adbbd5c39c4e48891fe25b2df8f9ee2d888b79a14cb42369ad054636dfd136a20617ae8000000072fbc5d7419d60357b4bd01f143b096705921f2f5304e9e78ec14a2089c7652c30c2155f06894e4a1947a6b5ac81334de08c68aa0b7fc9682b722ffa46cb130bf98c35e0f2d7c5d80545f208d333df3a643b5aa5c24fedd7a2903784f2dcc691a553f0d776e1f6b258d8c24bc2c7b8a554e0e4248f8ed3f5eb55de54c5ba6d4f98c91e5667837797aee8459e0e9d10750c2650d406634dd6549b3998c365b0b159ef6e09f54a321468d71a327fbbdbc8fd814acd9ddb17f28b447171db823c887f9b85320b636d208b3d199f01a46a760ae47dce2c74326ebb543ac8289000000000f412e4450eccb954da309195ab7c4f387835a96d2e7d2ccd2352308697e19895b3582351e5e370a80b8725a4331729c30e01ac2540ba6ddb259587963209442e0a71208f6d0f651dfff42200231ead730e45be2ebf0d7c1d60c32f88ebe689ca05f018024d1eacbcc441928d1db1e79df497fc2cb815ac468db261d0b700866b74047ba87b7ef4f4d93f358910cd291aaf25ee5f69f2a07c6a"], 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect$inet(r13, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) dup3(0xffffffffffffffff, r13, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000000)=0x401, 0x4) r15 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r15, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmmsg$alg(r15, &(0x7f0000000140), 0x4924b68, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) dup3(r14, 0xffffffffffffffff, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000180)='net/bnep\x00') preadv(r16, &(0x7f0000000580)=[{&(0x7f0000000f40)=""/197, 0xc5}], 0x1, 0xfffffffc) ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0x100, 0x4, 0x0, 0x3, 0x6, 0x4cb, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1], 0x2000, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) timerfd_create(0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="85", 0x2500}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="d7cd7cb16f2386e199aed796104210f0e14693a1a0326610991f495f8a9a8ab1cc5d882272bee0c23aad93b8e6697ff5075031c156c11dca886446d6cefaf6bf52f53bf98a1f34830d2b1a4d02", 0x82638}, {&(0x7f00000006c0)="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", 0x53c}], 0x2}}], 0x2, 0x4000000) 05:05:20 executing program 2: mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0xa) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='stat\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0xaf4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)={0x6, [0x100000001, 0x7ff, 0x6, 0x0, 0x7, 0x1ff]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) open(0x0, 0x0, 0x0) clone(0x21000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEXC(0xc, 0x0) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 05:05:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)=0x3) write$P9_RCLUNK(r0, 0x0, 0x0) [ 281.225041][ T8267] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 281.318590][ T8279] overlayfs: overlapping lowerdir path 05:05:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 05:05:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d2dee24fa34a765c00"/112], 0xb8}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={r3}, 0x10) 05:05:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 05:05:20 executing program 2: mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0xa) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='stat\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0xaf4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)={0x6, [0x100000001, 0x7ff, 0x6, 0x0, 0x7, 0x1ff]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) open(0x0, 0x0, 0x0) clone(0x21000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEXC(0xc, 0x0) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 05:05:20 executing program 5: mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0xa) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='stat\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0xaf4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)={0x6, [0x100000001, 0x7ff, 0x6, 0x0, 0x7, 0x1ff]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) open(0x0, 0x0, 0x0) clone(0x21000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_FPEXC(0xc, 0x0) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 05:05:21 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) gettid() setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) get_mempolicy(&(0x7f0000000240), &(0x7f0000000380), 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x2) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000200)='./bus\x00', 0x20001c1242, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 05:05:21 executing program 2: memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5]\x00\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x20) ioctl$TIOCNOTTY(r0, 0x5422) memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0xd10c) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80c00) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000140), &(0x7f00000001c0)=0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x50, 0x4, 0x320, 0xc8, 0xc8, 0x190, 0xc8, 0x190, 0x258, 0x258, 0x258, 0x258, 0x258, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'rose0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x37c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x9, 0xff, 0x2, 0x7}, {0xfff, 0x2, 0x33, 0x435}, {0x9, 0x53, 0x0, 0xffffff41}, {0x0, 0x0, 0x0, 0x4}, {0x2, 0x1, 0x7}, {0x8, 0x9}]}, 0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={[], 0x0, 0x8001, 0x20, 0x4}) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x50, 0x4, 0x320, 0xc8, 0xc8, 0x190, 0xc8, 0x190, 0x258, 0x258, 0x258, 0x258, 0x258, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@dev, @mcast1, [], [], 'rose0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x37c) fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_GET_NO_NEW_PRIVS(0x27) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) [ 281.683848][ T8303] overlayfs: overlapping lowerdir path [ 281.699599][ T8305] overlayfs: overlapping lowerdir path 05:05:21 executing program 0: r0 = mq_open(&(0x7f0000000140)='\x02\x00\x00y\x00\xbdM\xce\xd0*x\xa2D\x1e\xc6D\\\xc4\x01t\xa4\xae\x88.\xc5\x13\xf2\xb6\xad\x15j(\xd3\x1f', 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 05:05:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'ip_vti0\x00'}) 05:05:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) [ 281.811157][ T8318] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 281.979398][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 05:05:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) [ 282.039601][ T8326] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 05:05:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x57}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:05:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, 0x0, 0x0) 05:05:21 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 05:05:21 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) gettid() setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) get_mempolicy(&(0x7f0000000240), &(0x7f0000000380), 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x2) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000200)='./bus\x00', 0x20001c1242, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) 05:05:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48030000190001000000000000000000ac1e0101000000000000000000000000e000000100000000000000000000000000000000000000000a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000004d5ff0000000a000000ac1e0001000000000000000000000000ff3400000301010006000000fd00000001000080e0000002000000000000000000000000000004d2ff0000000a0000007f0000010000000000000000000000000135000004038100a40700000004000033090000ac24f8a955d07586dcf30ae93ace3039000004d56c00000002000000ff020000000000000000000000000001033500000202c3003f0000000300000000f8ffff6ec5108c49d9e615bdf147b01d4399e1000004d43c000000020000007f00000100000000000000000000000006350000030056000000550101f8000040000000fe8000000000000000000000000000aa000004d3330000000a00000000000000000000000000ffffac1e0001053500000200ff00030000000400000050d90000fe8000000000000000000000000000bb000004d62b0000000a000000e00000010000000000000000000000000535000001003f00940000009f0400000000010004010500ac1e0001000000000000000000000000000004d3320000000a000000fe8800000000000000000000000000010035000004020700ff0700000000000005000000ac14140a000000000000000000000000000004d23200000002000000000000000000000000000000000000010735000004001f003f00000004000000ff0f0000fe8000000000000000000000000000aa000004d23300000002000000fe8000000000000000000000000000aa053500000403030004000000010400002ec13a4700000000000000000000000000000000000004d23c0000000a000000e0000002000000000000000000000000023500000400010016100000090000000300000008001d003bffffff"], 0x348}}, 0x0) [ 282.241669][ T27] audit: type=1800 audit(1582607121.645:32): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16526 res=0 05:05:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x1a, {0x2, 0x0, @multicast2}, 'ip_vti0\x00'}) 05:05:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00001ae1bd24c6bcc446091477076d0d9bef87683050a2c426340861ca8f27b"], 0x2f}}, 0x0) 05:05:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x18, &(0x7f0000000000)=@routing={0x0, 0x2, 0x2}, 0x8) 05:05:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4624, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x44) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) [ 282.811747][ T8359] syz-executor.1 (8359) used greatest stack depth: 10024 bytes left 05:05:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000000c0), 0x10) 05:05:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:22 executing program 1: writev(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000080)="390000001300090417feb1ae7aa77cf40000ff3f02", 0x15}], 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x29e}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a000000000000000004000000"], 0x18}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:05:22 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 05:05:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d9e6900000000"], 0x3ff800) sendfile(r1, r0, 0x0, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") preadv(r0, &(0x7f0000002300)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x1) 05:05:22 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:05:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x1a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 05:05:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) [ 283.453819][ T27] audit: type=1800 audit(1582607122.855:33): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=16550 res=0 05:05:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x21, &(0x7f00000000c0), 0x10) 05:05:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000029000000b70000000000000095000000000000007961e62273faa6884c44825cc4f142133d4a1cac53819fda"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b91803b700030000009e40f088641fffffe100004000638477fbac141412e0004301c699da153f08a0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 05:05:23 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x4) 05:05:23 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x4) 05:05:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7, 0x3, 0x1, 0x2, 0x0, 0x7fff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x298b}, 0x40, 0x100000001, 0x80000001, 0x4, 0x9, 0xb4, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) [ 284.246655][ T27] audit: type=1804 audit(1582607123.645:34): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir616540526/syzkaller.UaxhzP/8/memory.events" dev="sda1" ino=16551 res=1 [ 284.277699][ T27] audit: type=1800 audit(1582607123.645:35): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16551 res=0 [ 284.304614][ T27] audit: type=1804 audit(1582607123.645:36): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir616540526/syzkaller.UaxhzP/8/memory.events" dev="sda1" ino=16551 res=1 05:05:23 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 05:05:23 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x4) 05:05:23 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:05:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000740)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\x06\x00\x00\x00\x13\xdd\xf7\xber\'\x8a\xd5W\xbb\xac%j\x8d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde;\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc1\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\x00\xfb\xaad\x1a\xe65\x16\x86\xc8\x95\xaa\xfd\xc2\x1c\xea8\xc5\xbd\xce,\xd1T\xa6\x93\x8c+Q\v\xa6\x9f\aR>\xc9\xcd\xc3\x01\xc0\x06\xf6Q\xdfN\x7fe\x18o\x19z\x8f\xcc\xc5\x812\xff\x1814|\xac.\x96\xe9+\xfd\xed%:\x8d.j') socket$kcm(0x29, 0x2, 0x0) 05:05:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60bd950000180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) [ 284.333424][ T27] audit: type=1800 audit(1582607123.645:37): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16551 res=0 [ 284.361835][ T27] audit: type=1800 audit(1582607123.705:38): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16551 res=0 05:05:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2c, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r1, 0x709}, 0x14}}, 0x0) 05:05:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:24 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 05:05:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:24 executing program 0: 05:05:24 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:05:24 executing program 4: 05:05:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:25 executing program 0: 05:05:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:25 executing program 4: 05:05:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) 05:05:25 executing program 0: 05:05:25 executing program 4: 05:05:25 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:05:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x4) 05:05:25 executing program 0: 05:05:25 executing program 4: 05:05:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:25 executing program 2: 05:05:25 executing program 0: 05:05:25 executing program 2: 05:05:26 executing program 4: 05:05:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x4) 05:05:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:26 executing program 2: 05:05:26 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 05:05:26 executing program 0: 05:05:26 executing program 4: 05:05:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x4) 05:05:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:26 executing program 2: 05:05:26 executing program 0: 05:05:26 executing program 4: 05:05:26 executing program 2: 05:05:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 05:05:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:27 executing program 2: 05:05:27 executing program 4: 05:05:27 executing program 0: 05:05:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 05:05:27 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 05:05:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:27 executing program 2: 05:05:27 executing program 4: 05:05:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 05:05:27 executing program 2: 05:05:27 executing program 0: 05:05:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:28 executing program 3: 05:05:28 executing program 4: 05:05:28 executing program 2: 05:05:28 executing program 0: 05:05:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:28 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000280)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:28 executing program 3: 05:05:28 executing program 4: 05:05:28 executing program 2: 05:05:28 executing program 0: 05:05:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:28 executing program 3: 05:05:28 executing program 2: 05:05:28 executing program 4: 05:05:28 executing program 0: 05:05:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:28 executing program 2: 05:05:29 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000280)) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:29 executing program 3: 05:05:29 executing program 4: 05:05:29 executing program 0: 05:05:29 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:29 executing program 2: 05:05:29 executing program 2: 05:05:29 executing program 4: 05:05:29 executing program 3: 05:05:29 executing program 0: 05:05:29 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:29 executing program 4: 05:05:30 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000280)) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:30 executing program 2: 05:05:30 executing program 0: 05:05:30 executing program 3: 05:05:30 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:30 executing program 4: 05:05:30 executing program 2: 05:05:30 executing program 3: 05:05:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c00)="a0", 0x7500}], 0x1, 0x0, 0x0, 0x80b50000}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="d6", 0x8500}], 0x1}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000a80)='V', 0x1}, {&(0x7f0000000ac0)='C', 0x1}, {&(0x7f0000001c00)="16", 0x1}, {&(0x7f0000000b40)="b7", 0x1}, {&(0x7f0000001cc0)="e4", 0x1}, {&(0x7f0000001d80)="9b", 0x1}, {&(0x7f0000001e80)="c5", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000021c0)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002340)="1a", 0x1}, {&(0x7f0000002380)='k', 0x1}, {&(0x7f0000002440)="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", 0xbc1}, {&(0x7f0000003440)="1b", 0x5fffc27b}, {&(0x7f0000003480)="9e", 0x200021c1}, {&(0x7f0000003500)="dd", 0x1}, {&(0x7f0000003540)="c1", 0x1}, {&(0x7f0000003640)='\x00', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f00000037c0)='U', 0x1}], 0x1}}], 0x6, 0x6041054) 05:05:30 executing program 0: 05:05:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 291.386399][ T8723] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:05:30 executing program 2: 05:05:31 executing program 3: 05:05:31 executing program 0: 05:05:31 executing program 4: 05:05:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:31 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000280)) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:31 executing program 2: 05:05:31 executing program 4: 05:05:31 executing program 0: 05:05:31 executing program 3: 05:05:31 executing program 2: 05:05:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:31 executing program 4: 05:05:31 executing program 0: 05:05:31 executing program 3: 05:05:31 executing program 2: 05:05:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:32 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:32 executing program 3: 05:05:32 executing program 4: 05:05:32 executing program 0: 05:05:32 executing program 2: 05:05:32 executing program 0: 05:05:32 executing program 4: 05:05:32 executing program 3: 05:05:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:32 executing program 2: 05:05:32 executing program 4: 05:05:32 executing program 3: 05:05:33 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:33 executing program 0: 05:05:33 executing program 2: 05:05:33 executing program 4: 05:05:33 executing program 3: 05:05:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:33 executing program 4: 05:05:33 executing program 2: 05:05:33 executing program 0: 05:05:33 executing program 3: 05:05:33 executing program 2: 05:05:33 executing program 4: 05:05:34 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:34 executing program 0: 05:05:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffff7, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x11, 0x0, [], 0xff}, {}, {}, {}, {}, {}, {}, {0x0, 0x3f}]}}) 05:05:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@pktinfo={{0x23, 0x29, 0x32, {@ipv4={[], [], @remote}}}}], 0x28}}], 0x1, 0x0) 05:05:34 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffc, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}}}, 0x0) 05:05:34 executing program 2: syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffc, @local}, @parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, "000088beffff0000"}}}}}, 0x0) [ 294.855721][ T8841] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 05:05:34 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0xee01) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') mount$bpf(0x0, 0x0, &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) umount2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={0x0}}, 0xc805) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 05:05:34 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast=0x2}, @in={0x2, 0x0, @dev}, @sco, 0x5e}) 05:05:34 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:34 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) mlockall(0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vga_arbiter\x00', 0x458000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={0x0}}, 0x800) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000f3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x90800, &(0x7f0000000800)={[{@test_dummy_encryption='test_dummy_encryption'}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffff8}}, {@mblk_io_submit='mblk_io_submit'}, {@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@nomblk_io_submit='nomblk_io_submit'}], [{@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffeebc}}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0x10) socket(0x0, 0x0, 0x0) [ 295.438418][ T8872] EXT4-fs (sda1): Ignoring removed orlov option [ 295.520823][ T8872] EXT4-fs (sda1): re-mounted. Opts: orlov,usrjquota=,auto_da_alloc=0x0000000000000200,noload,jqfmt=vfsv0, [ 295.697019][ T8889] EXT4-fs (sda1): Ignoring removed orlov option [ 295.770358][ T8889] EXT4-fs (sda1): re-mounted. Opts: orlov,usrjquota=,auto_da_alloc=0x0000000000000200,noload,jqfmt=vfsv0, 05:05:35 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000001140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x77}, 0x1c) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:35 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="2fe2b1640600000647b071") 05:05:35 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="bd167597ee7e", @random="7d0d2a440701", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e6221a", 0x8, 0x0, 0x0, @dev, @ipv4={[], [], @local}, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}}}}}, 0x0) 05:05:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:35 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 296.039949][ T8881] EXT4-fs (loop2): inodes count not valid: 536871552 vs 128 05:05:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc2f, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x124217cd6e20a9ff, 0x1, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0xa0800, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x400, 0x22) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) [ 296.150146][ T8904] loop4: p1 < > p4 [ 296.155339][ T8904] loop4: partition table partially beyond EOD, truncated [ 296.211509][ T8904] loop4: p1 size 2 extends beyond EOD, truncated [ 296.251310][ T8915] EXT4-fs (sda1): Ignoring removed orlov option [ 296.260326][ T8904] loop4: p4 start 1854537728 is beyond EOD, truncated [ 296.311185][ T8915] EXT4-fs (sda1): re-mounted. Opts: orlov,usrjquota=,auto_da_alloc=0x0000000000000200,noload,jqfmt=vfsv0, [ 296.460192][ T8904] loop4: p1 < > p4 [ 296.488886][ T8904] loop4: partition table partially beyond EOD, truncated 05:05:36 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 296.557396][ T8904] loop4: p1 size 2 extends beyond EOD, truncated 05:05:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 296.629507][ T8904] loop4: p4 start 1854537728 is beyond EOD, truncated [ 296.823749][ T8948] EXT4-fs (sda1): Ignoring removed orlov option 05:05:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000240007b2b53b4357f159330000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x60}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x5, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 05:05:36 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) [ 296.871479][ T8948] EXT4-fs (sda1): re-mounted. Opts: orlov,usrjquota=,auto_da_alloc=0x0000000000000200,noload,jqfmt=vfsv0, [ 297.409861][ T8909] EXT4-fs (loop2): inodes count not valid: 536871552 vs 128 05:05:37 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) mlockall(0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vga_arbiter\x00', 0x458000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={0x0}}, 0x800) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000f3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x90800, &(0x7f0000000800)={[{@test_dummy_encryption='test_dummy_encryption'}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffff8}}, {@mblk_io_submit='mblk_io_submit'}, {@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@nomblk_io_submit='nomblk_io_submit'}], [{@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffeebc}}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0x10) socket(0x0, 0x0, 0x0) 05:05:37 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0xee01) chdir(&(0x7f0000000100)='./file0\x00') symlink(0x0, &(0x7f00000007c0)='./file0\x00') mount$bpf(0x0, 0x0, &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) umount2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24004015}, 0xc805) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 05:05:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:37 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:37 executing program 4: setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x1a, 0x249e1e, 0x8000000001, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) [ 297.846181][ T8989] EXT4-fs (sda1): Ignoring removed orlov option 05:05:37 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) [ 297.903000][ T8989] EXT4-fs (sda1): re-mounted. Opts: orlov,usrjquota=,auto_da_alloc=0x0000000000000200,noload,jqfmt=vfsv0, 05:05:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:37 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x48}}, 0x0) 05:05:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@xino_auto='xino=auto'}, {@xino_on='xino=on'}], [{@appraise_type='appraise_type=imasig'}]}) 05:05:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:37 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 298.480824][ T9030] overlayfs: unrecognized mount option "appraise_type=imasig" or missing value [ 298.533059][ T9033] overlayfs: unrecognized mount option "appraise_type=imasig" or missing value [ 298.542241][ T9019] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 298.806455][ T9046] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 298.840841][ T8998] EXT4-fs (loop2): inodes count not valid: 536871552 vs 128 05:05:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='veth0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd8bf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 05:05:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x18, 0x249e1e, 0x8000000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f00000000c0)={r2, &(0x7f0000000000), 0x0}, 0x20) 05:05:38 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:38 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:38 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x48}}, 0x0) 05:05:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:38 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 299.524201][ T9083] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 05:05:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:39 executing program 3: mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:39 executing program 3: mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:39 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='veth0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd8bf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 05:05:39 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:39 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x34) 05:05:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:39 executing program 3: mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:39 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='veth0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xd8bf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 05:05:40 executing program 3: creat(0x0, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:40 executing program 3: creat(0x0, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00004095000000002400120014000100628c696467685f736c617665003c1b570c0005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 05:05:40 executing program 3: creat(0x0, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:40 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) [ 301.503591][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:05:40 executing program 0: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="2fe2b1640600000647b071") setns(r0, 0x0) 05:05:41 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:41 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 301.763302][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:05:41 executing program 2: mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unlink(&(0x7f0000000040)='./file0\x00') 05:05:41 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:41 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:41 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0xee01) chdir(0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x17b]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x3c}}, 0x0) 05:05:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:41 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000500)=0xc) setresuid(0x0, 0x0, 0x0) getresuid(&(0x7f0000000a80), 0x0, &(0x7f0000000ac0)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='veth0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 05:05:41 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:41 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:41 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:42 executing program 0: setresgid(0x0, 0x0, 0x0) stat(0x0, 0x0) r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7e", 0x3f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') 05:05:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x2f, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:42 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:42 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='\b') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00004095000000002400120014000100628c696467685f736c617665003c1b570c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 05:05:42 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 303.173787][ T9265] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 05:05:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000500)=0xc) setresuid(0x0, 0x0, 0x0) getresuid(&(0x7f0000000a80), 0x0, &(0x7f0000000ac0)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='veth0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 05:05:42 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 05:05:42 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 05:05:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 05:05:43 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:43 executing program 0: write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = socket$inet6(0xa, 0x3, 0x3b) setsockopt$inet6_opts(r0, 0x29, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="cab8344b4f41038cdc537128e8a78dc8ceaf351418c87e51677e6cdc8b7b5064f69a7e71ed565c6a08028cba02b5c1b8e3a31f63b4ba4489862ed9a5583f11f6bdbe98d23f7bf203428525f29808ff2db6435410af79e72a465198e6cdc29ead73725c4b7c3192a1b16cf2b06fc29675ea0463e899c5350030318720f02504d8cdd629cac02f490f3f94f358e4c770d30621c5f62dd48cdda6a79af3f54faa7d48ea1cb788ed8485bb4f6d5423d7131b9352335bb1ef143c024b51"], 0x1) socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast=0x2}, @in={0x2, 0x0, @dev}, @sco, 0x5e, 0x0, 0x0, 0x0, 0x2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r3, &(0x7f0000000380)=[{{&(0x7f0000000500)=@generic={0x1e, "613bb88890d10b2cc683620d4093da04fff392e9f131a82dd9ab7cf51b9c1c00f63fe7fcac845846c811063dd3c0cd75ea9b71eaeb4c57bdb5e519d456eb315f20c319258c65902ee895bc19b1aeb84ce280857aeffccfa07b8482f58a6acc871254077c94002afa90b228f328695afbf342aa4a88a8a9feb22d0cc45ca9"}, 0x80, 0x0}}], 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read(r5, 0x0, 0x6c00) dup2(r1, r5) r6 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r7 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) accept4$inet(r7, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10, 0x800) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) r9 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) dup3(r9, r8, 0x0) socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x3d, 0x0, 0x1}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="190cc547ba0c9fd4f4141219cf386a26f4"], 0x1}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) 05:05:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:43 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) [ 304.001779][ T9306] serio: Serial port pts0 05:05:43 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00'}, 0x48) 05:05:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 05:05:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:43 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:43 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:44 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00'}, 0x48) 05:05:44 executing program 0: write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = socket$inet6(0xa, 0x3, 0x3b) setsockopt$inet6_opts(r0, 0x29, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="cab8344b4f41038cdc537128e8a78dc8ceaf351418c87e51677e6cdc8b7b5064f69a7e71ed565c6a08028cba02b5c1b8e3a31f63b4ba4489862ed9a5583f11f6bdbe98d23f7bf203428525f29808ff2db6435410af79e72a465198e6cdc29ead73725c4b7c3192a1b16cf2b06fc29675ea0463e899c5350030318720f02504d8cdd629cac02f490f3f94f358e4c770d30621c5f62dd48cdda6a79af3f54faa7d48ea1cb788ed8485bb4f6d5423d7131b9352335bb1ef143c024b51"], 0x1) socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast=0x2}, @in={0x2, 0x0, @dev}, @sco, 0x5e, 0x0, 0x0, 0x0, 0x2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r3, &(0x7f0000000380)=[{{&(0x7f0000000500)=@generic={0x1e, "613bb88890d10b2cc683620d4093da04fff392e9f131a82dd9ab7cf51b9c1c00f63fe7fcac845846c811063dd3c0cd75ea9b71eaeb4c57bdb5e519d456eb315f20c319258c65902ee895bc19b1aeb84ce280857aeffccfa07b8482f58a6acc871254077c94002afa90b228f328695afbf342aa4a88a8a9feb22d0cc45ca9"}, 0x80, 0x0}}], 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read(r5, 0x0, 0x6c00) dup2(r1, r5) r6 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r7 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) accept4$inet(r7, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10, 0x800) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) r9 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) dup3(r9, r8, 0x0) socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x3d, 0x0, 0x1}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="190cc547ba0c9fd4f4141219cf386a26f4"], 0x1}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) 05:05:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:44 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe400000000000000086e03a2966285629aff303ffd5104cadb2518244925667497f1665d2d6e90953a6418c0468e73e52b648bcbe44b883f0dd912713d16bbfec42e3ac9cf743bf997e916700da7fa2000fcae0705e9739bdc6a6016b8a054308b9745f872533e4557c4fa020e4", 0xffffffbe}], 0x1, 0x0) 05:05:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00'}, 0x48) 05:05:44 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00'}, 0x48) 05:05:44 executing program 1: write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x200, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r0 = socket$inet6(0xa, 0x3, 0x3b) setsockopt$inet6_opts(r0, 0x29, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="cab8344b4f41038cdc537128e8a78dc8ceaf351418c87e51677e6cdc8b7b5064f69a7e71ed565c6a08028cba02b5c1b8e3a31f63b4ba4489862ed9a5583f11f6bdbe98d23f7bf203428525f29808ff2db6435410af79e72a465198e6cdc29ead73725c4b7c3192a1b16cf2b06fc29675ea0463e899c5350030318720f02504d8cdd629cac02f490f3f94f358e4c770d30621c5f62dd48cdda6a79af3f54faa7d48ea1cb788ed8485bb4f6d5423d7131b9352335bb1ef143c024b51"], 0x1) socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @broadcast=0x2}, @in={0x2, 0x0, @dev}, @sco, 0x5e, 0x0, 0x0, 0x0, 0x2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r3, &(0x7f0000000380)=[{{&(0x7f0000000500)=@generic={0x1e, "613bb88890d10b2cc683620d4093da04fff392e9f131a82dd9ab7cf51b9c1c00f63fe7fcac845846c811063dd3c0cd75ea9b71eaeb4c57bdb5e519d456eb315f20c319258c65902ee895bc19b1aeb84ce280857aeffccfa07b8482f58a6acc871254077c94002afa90b228f328695afbf342aa4a88a8a9feb22d0cc45ca9"}, 0x80, 0x0}}], 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read(r5, 0x0, 0x6c00) dup2(r1, r5) r6 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r7 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) accept4$inet(r7, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10, 0x800) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) r9 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) dup3(r9, r8, 0x0) socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x3d, 0x0, 0x1}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="190cc547ba0c9fd4f4141219cf386a26f4"], 0x1}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) 05:05:44 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], 0x0, 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:44 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:44 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:44 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 05:05:45 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], 0x0, 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:45 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='veth0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 05:05:45 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:45 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 05:05:45 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], 0x0, 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:45 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 05:05:45 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:45 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 05:05:45 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:45 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00'}, 0x48) 05:05:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:45 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2, @loopback}, 0xc) 05:05:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00'}, 0x48) 05:05:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:46 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:46 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00'}, 0x48) 05:05:46 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 05:05:46 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:46 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000409500000000240012001400010062046964676d5f736c617665003c1b570c0005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 05:05:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 307.323504][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:05:46 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) [ 307.387944][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:05:46 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) mount(0x0, 0x0, 0x0, 0x0, 0x0) chown(0x0, 0xee01, 0xee01) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 05:05:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:47 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) statx(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0x80000101, 0x4) mlockall(0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vga_arbiter\x00', 0x458000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000f3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0x10) umount2(&(0x7f0000000540)='./file0\x00', 0xc) socket(0x10, 0x803, 0x0) 05:05:47 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 05:05:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:47 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:47 executing program 0: unshare(0x8020000) set_robust_list(0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="2fe2b1640600000647b071") setns(r0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) socket(0x0, 0x0, 0x0) 05:05:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:47 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 05:05:47 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc2f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x400, 0x22) fchdir(0xffffffffffffffff) 05:05:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:48 executing program 5: pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) [ 309.191480][ T9579] EXT4-fs (loop1): inodes count not valid: 536871552 vs 128 [ 309.345383][ T9579] EXT4-fs (loop1): inodes count not valid: 536871552 vs 128 05:05:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:49 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:49 executing program 5: pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 05:05:49 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) statx(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0x80000101, 0x4) mlockall(0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vga_arbiter\x00', 0x458000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000f3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0x10) umount2(&(0x7f0000000540)='./file0\x00', 0xc) socket(0x10, 0x803, 0x0) 05:05:49 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0xee01) chdir(&(0x7f0000000100)='./file0\x00') mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) umount2(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r3, 0x0, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004015}, 0xc805) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0xb0, r3, 0x802, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7b}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d99}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040004}, 0x8080) 05:05:49 executing program 5: pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 05:05:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:49 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 05:05:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:49 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0xee01) chdir(&(0x7f0000000100)='./file0\x00') mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x64, 0x0, 0x0, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x30}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004015}, 0xc805) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 05:05:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:49 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, 0x0) [ 310.702511][ T9675] EXT4-fs (sda1): re-mounted. Opts: [ 310.826345][ T9646] EXT4-fs (loop1): inodes count not valid: 536871552 vs 128 05:05:50 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) statx(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0x80000101, 0x4) mlockall(0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vga_arbiter\x00', 0x458000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/135, 0x75}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000f3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="f2818253ac772c6e60974b3e86fc8ca2b16cd67ac1417233d0bfc29b8d03423834c3180922919df25b95481bb8b606a94e78a16bac24c9f6ac5b15fbd1ec78847af4", 0x42, 0x509e}], 0x90800, &(0x7f0000000800)={[{@test_dummy_encryption='test_dummy_encryption'}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffff8}}, {@mblk_io_submit='mblk_io_submit'}, {@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@nomblk_io_submit='nomblk_io_submit'}], [{@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffeebc}}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0x10) socket(0x10, 0x803, 0x0) 05:05:50 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) chown(0x0, 0xee01, 0xee01) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 05:05:50 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:50 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, 0x0) 05:05:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 311.139292][ T9701] EXT4-fs (sda1): re-mounted. Opts: 05:05:50 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:50 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) statx(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0x80000101, 0x4) mlockall(0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vga_arbiter\x00', 0x458000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000f3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="f2818253ac772c6e60974b3e86fc8ca2b16cd67ac1417233d0bfc29b8d03423834c3180922919df25b95481bb8b606a94e78a16bac24c9f6ac5b", 0x3a, 0x509e}], 0x90800, &(0x7f0000000800)={[{@test_dummy_encryption='test_dummy_encryption'}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffff8}}, {@mblk_io_submit='mblk_io_submit'}, {@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}], [{@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffeebc}}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0x10) socket(0x10, 0x803, 0x0) 05:05:50 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, 0x0) 05:05:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:51 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) [ 311.562268][ T9726] EXT4-fs (sda1): re-mounted. Opts: [ 312.151976][ T9723] EXT4-fs (loop0): inodes count not valid: 536871552 vs 128 [ 312.394381][ T9735] EXT4-fs (loop0): Unrecognized mount option "òò" or missing value [ 312.403669][ T9710] EXT4-fs (loop1): inodes count not valid: 536871552 vs 128 [ 312.414385][ T9735] EXT4-fs (loop0): failed to parse options in superblock: òò [ 312.464331][ T9735] EXT4-fs (loop0): inodes count not valid: 536871552 vs 128 [ 312.779212][ T9758] EXT4-fs (loop1): Unrecognized mount option "òò" or missing value [ 312.793330][ T9758] EXT4-fs (loop1): failed to parse options in superblock: òò [ 312.807478][ T9758] EXT4-fs (loop1): inodes count not valid: 536871552 vs 128 05:05:52 executing program 1: syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffc, @local}, @parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, "000088beffff0000"}}}}}, 0x0) 05:05:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:52 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}, {@noload='noload'}]}) 05:05:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:52 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:52 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800200203804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) statx(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0x80000101, 0x4) mlockall(0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vga_arbiter\x00', 0x458000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000f3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="f2818253ac772c6e60974b3e86fc8ca2b16cd67ac1417233d0bfc29b8d03423834c3180922919df25b95481bb8b606a94e78a16bac24c9f6ac5b", 0x3a, 0x509e}], 0x90800, &(0x7f0000000800)={[{@test_dummy_encryption='test_dummy_encryption'}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffff8}}, {@mblk_io_submit='mblk_io_submit'}, {@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}], [{@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffeebc}}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={0x0, 0x0, 0x10}, 0x10) socket(0x10, 0x803, 0x0) 05:05:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:52 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0xee01) chdir(0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x17b, 0x2]}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004015}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x78, 0x0, 0x802, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d99}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x78}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 05:05:52 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffd, 0x0) [ 313.194623][ T9791] EXT4-fs (sda1): Ignoring removed orlov option [ 313.270659][ T9791] EXT4-fs (sda1): re-mounted. Opts: orlov,usrjquota=,auto_da_alloc=0x0000000000000200,noload, 05:05:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:52 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresuid(0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='veth0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x140000a16, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 05:05:53 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x200}}]}) 05:05:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 313.738128][ T9827] EXT4-fs (sda1): Ignoring removed orlov option 05:05:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 313.810568][ T9827] EXT4-fs (sda1): re-mounted. Opts: orlov,usrjquota=,auto_da_alloc=0x0000000000000200, 05:05:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:53 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}, {@usrjquota='usrjquota='}]}) [ 314.121585][ T9848] EXT4-fs (sda1): Ignoring removed orlov option [ 314.194770][ T9848] EXT4-fs (sda1): re-mounted. Opts: orlov,usrjquota=, 05:05:53 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0xc0045878, &(0x7f0000000000)={0x0, 'veth1\x00', {}, 0x4}) 05:05:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:53 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}]}) 05:05:53 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffd, 0x0) [ 314.541348][ T9866] EXT4-fs (sda1): Ignoring removed orlov option 05:05:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:54 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, 0x0) 05:05:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8de"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:54 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}]}) 05:05:54 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x2a8, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58b5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x994}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5de}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @local, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4040010}, 0x24048080) 05:05:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:54 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="bd167597ee7e", @random="7d0d2a440701", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e6221a", 0x8, 0x0, 0x0, @dev, @ipv4={[], [], @local}, {[@fragment={0x0, 0x0, 0xff}]}}}}}, 0x0) 05:05:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8de"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:54 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@orlov='orlov'}]}) 05:05:54 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="bd167597ee7e", @random="7d0d2a440701", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e6221a", 0x8, 0x0, 0x0, @dev, @ipv4={[], [], @local}, {[@fragment={0x0, 0x0, 0xff}]}}}}}, 0x0) 05:05:54 executing program 0: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="2fe2b1640600000647b071") setns(r0, 0x0) 05:05:54 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:54 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@usrjquota='usrjquota='}]}) 05:05:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8de"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:55 executing program 0: rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='.\x00') 05:05:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:05:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:55 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@usrjquota='usrjquota='}]}) 05:05:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x0, [{0x0, 0x4}]}}) 05:05:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 316.086274][ T9954] EXT4-fs: 7 callbacks suppressed [ 316.086313][ T9954] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 05:05:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 316.160529][ T9964] ISOFS: Unable to identify CD-ROM format. 05:05:55 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:55 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000240)={[{@usrjquota='usrjquota='}]}) 05:05:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:05:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x90003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:05:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 316.510040][ T9982] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 05:05:56 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00004095000000002400120014000100628c696467685f736c617665003c1b570c0005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 316.770890][T10001] ISOFS: Unable to identify CD-ROM format. 05:05:56 executing program 0: io_setup(0x9, &(0x7f0000000240)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001ec0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 316.821935][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:05:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7a"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xae49, &(0x7f00000003c0)={0x0, 0x0, @ioapic}) 05:05:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) [ 317.234345][T10030] ISOFS: Unable to identify CD-ROM format. 05:05:56 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7a"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:56 executing program 3: setgroups(0x0, 0x0) getgroups(0x1, &(0x7f00000000c0)=[0xffffffffffffffff]) 05:05:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:56 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = mq_open(&(0x7f00000004c0)='ip6tnl\x00', 0x0, 0x0, 0x0) mq_notify(r1, 0x0) 05:05:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:05:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7a"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 317.665593][T10049] ISOFS: Unable to identify CD-ROM format. 05:05:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 05:05:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x100060, 0xa808) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x0, 0x0, 0x10000, 0x20}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) dup2(r0, r0) 05:05:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:57 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:05:57 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000060, 0x0}}], 0xc6, 0x240080fe) 05:05:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) [ 318.546158][T10084] ISOFS: Unable to identify CD-ROM format. 05:05:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:58 executing program 3: sched_setattr(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x18, 0x249e1e, 0x8000000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) 05:05:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val, @void, @eth={@random="9f84bb57964b", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "facd4d", 0x64, 0x21, 0x0, @remote, @loopback, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "d8f09351d5e2097632c3d0d9786f7ec6c83dce7cac263f4242707fc9797c4df8", "00af23bc56c270f2796b81ce96fcbb80", {"7db83542662594e658218f3e7c9f75be", "ae6c83b53e57a100"}}}}}}}}}, 0x9e) 05:05:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) [ 318.973576][T10110] ISOFS: Unable to identify CD-ROM format. 05:05:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x100060, 0xa808) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x0, 0x0, 0x10000, 0x20}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) dup2(r0, r0) 05:05:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x64, &(0x7f0000000040)) 05:05:58 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:05:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:05:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 05:05:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:05:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3}, @enum={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000280)=""/245, 0x32, 0xf5, 0x8}, 0x20) [ 319.599772][T10137] ISOFS: Unable to identify CD-ROM format. [ 319.633254][T10150] BPF:[1] ARRAY (anon) [ 319.637504][T10150] BPF:type_id=0 index_type_id=218103808 nr_elems=2 [ 319.645200][T10150] BPF: [ 319.651011][T10150] BPF:Invalid elem [ 319.654791][T10150] BPF: [ 319.654791][T10150] 05:05:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 05:05:59 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) [ 319.690658][T10147] BPF:[1] ARRAY (anon) [ 319.696164][T10147] BPF:type_id=0 index_type_id=218103808 nr_elems=2 [ 319.709966][T10147] BPF: [ 319.714979][T10147] BPF:Invalid elem [ 319.722125][T10147] BPF: [ 319.722125][T10147] 05:05:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/20, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r4 = dup2(r3, r3) write$P9_RMKNOD(r4, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7a, &(0x7f0000000080)={r8, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={r8, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r9 = dup2(r0, r0) write$P9_RMKNOD(r9, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 319.899841][T10157] ISOFS: Unable to identify CD-ROM format. 05:05:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 05:06:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x100060, 0xa808) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x0, 0x0, 0x10000, 0x20}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) dup2(r0, r0) 05:06:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 05:06:00 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010010004870000000185832a5070000000000009500000000000000bc4a60458a815822b2ec2dba89e8817ead34e9810517ac885c41bfaecd73f2fd0384c8b34a46c6bfd9185ee5baabfc211d246d0aa103adc999b0d815cb1acb0cba4c232a96b8deac6ffbb4ce7abe"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 05:06:00 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) [ 320.857412][T10178] ISOFS: Unable to identify CD-ROM format. 05:06:00 executing program 2: socket$kcm(0x2b, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xfffffffffffffe9d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x3, 0x10, 0x0, 0x10002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) add_key(&(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="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", 0x1000, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) keyctl$invalidate(0x15, r0) request_key(&(0x7f0000001480)='id_legacy\x00', &(0x7f00000014c0)={'syz', 0x2}, &(0x7f0000001500)=':\x00', r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) read(r2, &(0x7f0000000400)=""/168, 0x41c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x6, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2b) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) r5 = mq_open(&(0x7f00000004c0)='ip6tnl\x00', 0x2, 0x60, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x226800, 0x0) setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000200)=0x4, 0x4) mq_notify(r5, &(0x7f00000001c0)) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 05:06:01 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:01 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:01 executing program 2: socket$kcm(0x2b, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xfffffffffffffe9d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x3, 0x10, 0x0, 0x10002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) add_key(&(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="1ea9101e3ea3206c86666a2734980f1123ae8f2f64d3078030c62133f0dd91e6267010bb6a47171438cf699d09ce5bae2eb3c60d00cb7fddfc94fb777274db6c57534308476ef353c8b7253d6b0b79b336b9849bd5f1725359cf650196648a75bd6a3970c27d3b52efd8d2d6d88a6d290e63c19f337b4cb34c061b2a8b7d756f7f86f3eb85755016aac74d55cc949ed9c490cd9f4e24c1f35a95b2444058c06af5e4bbaed2fcadef0fbb1fbdad26c5434610b284eca3a10e04f63c8cbbbab3e0e3878c8ce789accc45aea5880424c7d2393db94d5dc4429fa6440450165f559b8ea6a281dc5e72a541944783f805af6c2bfed5047c5c65f97b285573d2d2c237f7b2281f52224db8b17df2a27d2e64fb7fa819e33ad6d3d9f620651dd40fa30dd63de7f32858f5409cdcf92f00ad081e92ffc7c120a4a3db959c6b70035a215f47c7ceb2da38b0022814b43ad86c7498ffc8d09125dafbf5a556189dbec4dcc7ad085b96afe4f0e82993ff64d01162ea564d6dc736000e15dd0f95770b2dd96af945ce2d44273d7658f5187c5300d8eb260706f8c8bda9dfd1e6059421f7c3c42a69c895dcdf1a0134f8c9657903283152e92585117afe51b3a7c1c2e8ffc8a53e6d4300ac9016dcd32f2c2dac1b9a59730d9867ed9aa26439f95408f647a416b735b89161f1950640eb1cb9c849391f4117762f145e5d7a0b7b284a136f889d783bace20a66e44a994dc229d8492d18bc8cf6a3d88979df91824aeb8d0e79e366e634c96523793608323ccab88d49365675626fbc0b3e670f6d88c3038eece767bb47a83bc077bddea40b98339a778f72924ddb3733e06aa312e02b31e42593410fe70f344546815b0f7d4c36cdd600763d38c06ab66520af4ac7f04161f8885b6709d70e4d1446e547ac9e4666dc071ec052cef9c3053a0a536c8af12e6c2f3f6a0f4e66bb107197f72470a09baafa7eae059e874f3274d099fa5fca0479e59c8b5ae8024cccee29867e9a4d5628d708ff0c767bf84462e3ef5ab7aa228a19df66f91ddd3db04d2b864e209d942069a685d406b623e4ef9bf32f5c1188b42e04fcc5482bc24d6d352a39d570d9b2cfad2bbf9985ac74e940d6da7de38c2a11a04918de2d8556be8d360b4e1055e1b2201f33918ea7c2207a0c8253290d29d8ddf8f63fcd2fb080fb56f080c8b2fb17e63dc0c305a1b9f2e63417dd6bf6d26e419bb29ffd85eb92e796b45d5a96e0a53b5bf321e5081f3da2c12d525bdadbad3d5d3160195ff601fda979c89e4a7f8a882228297bb229aae250b8b0f967c523cfec722c07a9c52e4ebe8d45f766c76cf810fc342862b0b5c7b094e2357c635802da45b48277385c08d0feca712ceed0320a5290e81061aafdbffe89c826c1221cd72c509db96f9c58fb6badb8820eb120e55ec1da871d8233301a701860594bd36f1ab1e5d12418e86458a96039ba07182981d6c329130114f7ed21d5387ef13cf02b6c299c8948186d0387997ee59d1e38b10578d0e98fb8e23f0195b56b98e7d8b1958223ad030b96c54a9d632d6aef53270b9e2ba9bcfb24a104f051507353921fcb29e9eb5340a85df027990e8efb373f8b2977647d153281426cd379468b702558445f3e286fdf8be5e0a5113122a0cded6c57c7056f856c7d568b31e746cfcb63eaf36f074eeee9eb4b70f638b61dc7aa60e71369412fe9bf2a1df9097cdf20307a6fe40cc445fdcbb00c7cd9953b9ab06be798e7a6cfc1402c69b549373ce261ddfd5746f2aa5e44efa42edfe26fa52613a3f379efc5865ddc24b24e1c2f34c57ceaf8b57957a1ba0cc25bd7fad80da2001845f5b2e3c423add91f57927212842290173d8892923a78fd1087f04867a7656eff6d377225aeaa2397c40317558f43291d15150703dd96b61e121ebcde67b8671249f63af3d7d252923167b59c53cdec98dfe634fa11dea321fd9e122ca4779ed32c2a1a26417c51aaafd814156c117f36f2b4208092984d859a66bf02b3ff077fb835f132b5f2097dee2a19e09b1d1dd7c25c6006353051a317240693d004a4e5553b66cc54e11ddf38d469bdc52f4b7afbfff68c44550bc235656f0106399aad87cef29759a58bb9b936c79bb41062e996901f985f8aacf33d6c5f665e1407a83a96aa5a57acb4c8fecb559baccfd9d142387d0a7dc3a390aa5e18645c282c9fc0650e3ad7376f1a5db1408d901a38744dc5b0ae364f9ba95261e503fa95843a14fc871b5a6139202c5e1d990561d40a5768a220dd30b8d5b8aa62d9301660ac504530781b3eef02f182386dc439dd80fbae4fe353118d59aa5be98c607de0eeadd6d456cf4a5c945deeca7f564101e6eb992da2bfbf61eec8e7891a8e3dfa0eefd4f322164704e66d72175484d6ad0b8a4efa3ccf191f746d4252257ec7c6d9d2e7fd65f68680c5f6aa44d2bdbaf0f726fe9957f3edf0acdb7013f5e63d94c98f2d8138f917cf524ea58ac7466577c21c6659d778ffb6bddc5a04b5070bd768591bfd9deeeabc93390d37c35051840ff7287f95a6c8a3ed7f1b9300fb94e3421272223c349abcad0c897f49dfcc0c39640562d9ebe3b349b0984cf0f978b2201a1d86f0da9f04e5e18e4447e0f8ecca2dbf5acc0bff8f18029c0443aca8554efa1ceffffc01e306f2e8de27551a0f1625a8e6eb85dd99c7fcca90db6edc7fd232df7272912d30e4ec1d6d6eaef0941d7640680ececc5ae484a65572e4c4406e1e5ebedc4ce35726f2e03d195db85a0f24f6d7d1b8cd6516042a517f0dece9f601c541d20f21ab51dc22dfa5f26a5fa5c007e10f4399a77e6309d7e84a5b8d1c224024dad344989f84ef867f066673877dafae13d1479d69b80da73ec74de42ff70e980fca827ca5e7f53a9fd224e399c4b92132cd408dd4b840a008c7f537da4a5ef4d477c3a7dbc1e9d85930470edf4209ff6692405df1127c8b85837a799407569dbc7f769c6d7f773401005b6149b13ab5e67a8693415240f4a25be8a12761d71ab178c0c78ee45737b013867a988677276dc3a0928d650b4d3b4f82bacf7b34e3bd22f4f8f7793d5820f5a751cd98e38da9c12cd78246d2206803332ba91afe5bc36f08ed8742a23f5ad3b8ce97d7c07f9c0d04b810d154b96e2fbe64ab55546ef30fa8cf57993d9715b8ea6de5a450a995e39c7b55acc6ae3f22d3580d7c945db0599f2e056c2d882d2a4b4279b54fe3e499353361870e0914bd0074625c71d2c55ad52e0adccf622c1574586f7ef24a6828eaf7eae8391bb86698fdb581c21f18b94d05847efc125dc3b7ec5dd8e4b5e8c2676f834bd4debf96c4119d0cc341f87d6192ab979c43d1eafa3c95fa612e16bb363478c7842c3c0cd7c3bb64aed7a4d0361acc4e8a0445f4dff79850e16dc07a1bad47a977573345f6c98d0aa9b45c087f4d9f17e4552d075cbb1fd5de0ecea1d53ea990c52d5199a8c76ceb1ed36748c612b8108b190160f0fd586974ca67c2ff21ef2346e5ec032907c8b4c6c07b9ef00babf9b07c0f893ed48a543c40f3d1a870cc21291805f238bd9fc417c33bc21381677219345d2fb7f1cf4de5a22c7db384b3acc2a06cf16ab960d8742c2fc7f15c2641c52767cd1710995934428b92c0eb32342d4e6f19ff6b5a35c0c55a8ad33bd30dc7de0e22c63ebebd62d162b261cb698d55e55db950d40e9efdbe892d5a06f372d154e4250a4c8e4dbad713401acb4ab83edb0b1fcf2a34a49370f89838db1b6e0123fe61ef71887586e0a5e55e0bd30def92cb3a2bb942f645b5e48322f76f3082d1887b53d50c96090f479c6571601ba269d8a781f0c375739a8d453d42be21c4c62dadfaf178a6a1054eeedb0864f8052e75e901175f2f832643278a8d05475bf7f8737dc18e40dc34831c307d71b646eccb92430e50bf37fa62e8c9a0e9097a4a0dac4305558352c084689995c839938138905a610bcda9a812356a3ac655ec1c7325c00290215710393480012e7afb33562532c366eec827513362178570cc43075a86e410abdf56a8f60529e79abb0700e17bd3ba521b122a02e1663897158310a8fcca895e81e158bf61bb8e027be611e5996da8ff1f8031e86e25a7191b6bf080783fa927effc99e28f22c35489b989975fa5f24b949f9af3eae289d0204d558327899226ac2d774bf3a542440e41674c8cf1e2cfd8018da92e1108fc5f7354d2e417ea24a38955c479b50a424d01d30570b655277e45d68509a857eefc4a2254e09a68409d43a05fd4d2367d9f8e3cef3d0acb37f5383c0369d094550b73f3274e62e32ecd059b38267330af37cbe3b674b0f17456ba094b7a51a6535294e2288eb3ca8098106b11565a5d0d3ad81f9c2c88b757e2d2ae293f2bfadef60bbc95fabd17a22ebcf8faa32f39ae89d235401826a9286e1a18bb776c9c00ce1937b8d24b219ff44790de869413fa3781757a625da2fd8bb1a84a1c87fd5329e3b429f633c6dc41aa13f1d4a15ad5688a84efecd2756aec49866d1d632f8b3397dc50d51d63551df652fbbe546fdfb67d06a65736278fe5355bd252e6171498f26672981b3e9da6eb41a87479ca47d86b9224fd18bb7e959c218e9f94240b654c62c377f92bdc07242b3490dcb54681c8854e0e2290adf581c6c2564402b94f270a90c549a0d4473dd5a275caec37bfe31a751811d856c95b4bd87be494f5766478dea7ed579279a5a8e553df4aab81c77de340ede24da7db38f69e5ca1b805334c9c5ebac9938b66efdfa7b1e141cac29e00a34a7c4e9d90a4c29a8d38b3f9977e79466da9fbe9f282b25140a62f8207aa9219de18cb48077cfa184de9ff16aba6357df37ff90ec4e5284b4a02f9867f08e6ec5c218e0393de75095911261870e50ad4fc7d55c094408b9605fdeb9234795824906f7e6747f93362f6eb8563c6250370e194a9703ef5bc8ee0e993fbaad800df411b5e1dd8d3afcd1c93e5b2c8eb0a63a63faa7a2e7fb1b063e9adc5efe4c1686944bf7ba21715171aacd693d74cacd7a0493ddb6dccb968998811fab6749782a71878d5d4e603b37ec74caa14b6ff8c03367ce01f20c48e8527e2f6496ae994fd14d5d84f2ab18daace47f5a31c5e7da82e7f90473a0cc8d5da4147422389a729f1bfccc86a59af3c06edb4beeaec6387794a5438c9cb35cb3c6f7fdc4df32937e200b5f23efd04f793f8c4642f3945e35eb1dcb318d354765b24d83648d2be344a61ccbcee25544629f905431502a303ff4f4afb8d82a542089af84db0fd307d25eb70d950b8f83206cc05c9ec4ca3462f64c6f82680c775f12206d840876013df1f5a198811438b341276afd4ce33a61d5d0930caa75128f1fb7036b8d8ddd9102bf4019b9d14e0ef1c45a140badecbbe61b6cd9dd66a87fa62539a7da4e2ff302e73363f1fa07fae200461290db2c045bf63177d5b7d7dc69fb73d38b3174781cb1901adc059b2908c2f580de1e2c0d91cfa0384bb8e43f04f107af12b810e562301560a9150cb8e296952d3e8d247fd39fca16adf239c73c6d0cf3302fe3cde43a69f1144b0c9c0b2d4f7bbf4e080c95ba55ed791dc4fa214c0424770272830058c14a9b62ff62f605724d3a68d87c7d6c8bb9b95d63587f3bba343b84d20529ce0efbd2810def6013177c7f66bd9790edef28ca1f89e6288d3af5b052abc11776b43f23fcdb07508cdad0dbd7adf0dede44042d45b4585bb927f96c02a543520f0e8a6d301624f096c55418cd55a2ed0c0348d32a211cb8150befa644a4e4a26a9af0000cc550c5d", 0x1000, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0xfffffffffffffff8) keyctl$invalidate(0x15, r0) request_key(&(0x7f0000001480)='id_legacy\x00', &(0x7f00000014c0)={'syz', 0x2}, &(0x7f0000001500)=':\x00', r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) read(r2, &(0x7f0000000400)=""/168, 0x41c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x6, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="2b000004030000007ea34a000000000000000002ff0f908e59e863b3d0dab4000000006d6435738f6d73656c660052769f263a447d0600fd81acc7c73912fb678d3874d361e396f1835b50ae465651449a030dc2e13d0feb6e8d6800b85ec2d210822e80fe1a48feacd28a099b40d01ecb9b09313cad6e47fb6829a4c11980f2ddd63ae46987dae2375c41d46051565e60cb43e40a52535cc2c27d07943a8552845b38d5e3ba145d34945b3bb4c68c2b66b2ff9505f19005a6ca538036bcd5e2e6a999b35a52c584ebb98985550ba106676b8cf6178c8049225e0e10f878932ebf7d299f731da5026887bc335af38968c1e2ffc62dad00373cbadec582b44198a18313"], 0x2b) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) r5 = mq_open(&(0x7f00000004c0)='ip6tnl\x00', 0x2, 0x60, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x226800, 0x0) setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000200)=0x4, 0x4) mq_notify(r5, &(0x7f00000001c0)) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 05:06:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) [ 322.022511][T10199] ISOFS: Unable to identify CD-ROM format. 05:06:01 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x5008, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 05:06:01 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x100060, 0xa808) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x0, 0x0, 0x10000, 0x20}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) dup2(r0, r0) 05:06:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 05:06:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/20, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r4 = dup2(r3, r3) write$P9_RMKNOD(r4, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7a, &(0x7f0000000080)={r8, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={r8, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r9 = dup2(r0, r0) write$P9_RMKNOD(r9, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 322.602649][T10222] ISOFS: Unable to identify CD-ROM format. 05:06:02 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:02 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r0) [ 323.116971][T10239] ISOFS: Unable to identify CD-ROM format. 05:06:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:03 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) [ 323.955674][T10257] ISOFS: Unable to identify CD-ROM format. 05:06:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000140)=[@acquire_done={0x40406300}], 0x0, 0x717000, 0x0}) 05:06:03 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 05:06:03 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x64, &(0x7f0000000040)={0x0, 0x0, 0x5}) 05:06:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x9, 0x7, 0x8, 0x5}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000280)='./file0/file1\x00', r0}, 0x10) 05:06:04 executing program 3: [ 324.853056][T10273] ISOFS: Unable to identify CD-ROM format. 05:06:04 executing program 3: 05:06:04 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:04 executing program 3: [ 325.143442][T10299] ISOFS: Unable to identify CD-ROM format. 05:06:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:04 executing program 0: 05:06:04 executing program 4: 05:06:04 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:04 executing program 3: [ 325.554036][T10315] ISOFS: Unable to identify CD-ROM format. 05:06:05 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0), 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:05 executing program 4: 05:06:05 executing program 3: 05:06:05 executing program 0: 05:06:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:05 executing program 3: 05:06:05 executing program 0: [ 326.040271][T10335] ISOFS: Unable to identify CD-ROM format. 05:06:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:06 executing program 4: 05:06:06 executing program 0: 05:06:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:06 executing program 3: 05:06:06 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:06 executing program 4: 05:06:06 executing program 3: 05:06:06 executing program 0: [ 326.923309][T10355] ISOFS: Unable to identify CD-ROM format. 05:06:06 executing program 4: 05:06:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:06 executing program 3: [ 327.792789][T10376] ISOFS: Unable to identify CD-ROM format. 05:06:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:07 executing program 4: 05:06:07 executing program 0: 05:06:07 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:07 executing program 3: 05:06:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:07 executing program 4: 05:06:07 executing program 0: [ 328.262355][T10389] ISOFS: Unable to identify CD-ROM format. 05:06:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000080)=0x0) r2 = socket(0x10, 0x803, 0x0) io_submit(r1, 0x2, &(0x7f00000009c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000a80)="4f44a65809ec5888378bbe7d48c7aecf", 0x10}]) 05:06:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) 05:06:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:07 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab357bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4faf", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 328.486317][T10409] device bridge1 entered promiscuous mode [ 328.658658][T10414] ISOFS: Unable to identify CD-ROM format. 05:06:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) dup2(r0, r0) 05:06:08 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x1e24, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000000c0)=""/38) 05:06:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) 05:06:08 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) [ 329.444988][T10439] device bridge2 entered promiscuous mode [ 329.472700][T10441] ISOFS: Unable to identify CD-ROM format. 05:06:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') preadv(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}], 0x2, 0x0) 05:06:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000104050000000000ffffffffffff17f00500010003000000"], 0x1c}}, 0x0) 05:06:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:09 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 05:06:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f364602344324", 0x33}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:06:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 05:06:11 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3, &(0x7f0000000000)=@routing, 0x8) 05:06:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) dup2(r0, r0) 05:06:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r0, 0x1) 05:06:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x500) 05:06:11 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e00190349c95cdce9f8bed100000000", @ANYRES32], 0x2}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 05:06:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000200)='./file0/bus\x00', 0x0) ftruncate(r0, 0x81) 05:06:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:12 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r0, 0x100000003, 0xfb7d, 0x28120001) 05:06:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0ed70d660f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 05:06:12 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) dup2(r0, r0) 05:06:12 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "80000000000037c4"}) [ 333.325267][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 333.375023][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 05:06:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab357bf68e6faa53367f05f4ad61421349f2f", 0x5b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:06:12 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') 05:06:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}, {@map_off='map=off'}]}) 05:06:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={0x20, 0x2, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}, @CTA_ZONE={0x6}]}, 0x20}}, 0x0) 05:06:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:06:13 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:13 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48014) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000000c0)={0x3f, {0x0, 0x0, 0xffffff7f, 0x7, 0xffffffc0, 0x7e9}}) [ 334.295998][T10572] ISOFS: Unable to identify CD-ROM format. 05:06:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:06:13 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000020101080000000000000000000000002c00028006000340000000000c000280050001000000000014000b80080001007f00000108000200000000000600124000010000"], 0x48}}, 0x0) 05:06:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:14 executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000ee) lseek(r0, 0x0, 0x4) [ 334.637702][T10587] ISOFS: Unable to identify CD-ROM format. 05:06:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 335.075715][T10607] ISOFS: Unable to identify CD-ROM format. 05:06:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 05:06:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) 05:06:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}]}) 05:06:15 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab357bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4e", 0x81}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:06:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x1c}}, 0x0) [ 336.589202][T10624] ISOFS: Unable to identify CD-ROM format. 05:06:16 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0xe}}) 05:06:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}]}) 05:06:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x19, 0x0, &(0x7f0000000000)) 05:06:16 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) [ 337.179614][T10648] ISOFS: Unable to identify CD-ROM format. 05:06:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="6653070000053c07bc3376003639405cb4aed12f000000000015ffa8ee79cfde47a110126616e608ceae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d4979e65199615607672c5995c9e79066e3ceb991601d4b8a6355ddc55368aa1938f1a25958737a63d7da119b71c4444cf18e38d2b30dbb21ad45e199815491be65cb154ad160c3b3ea8100cbb96a06f8b0dd4c6ad7ec", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:06:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@unhide='unhide'}]}) 05:06:16 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffd, 0x0) 05:06:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000054002800000000000000900b7bb67aea846389b0"], 0x1e) 05:06:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 337.604468][T10670] ISOFS: Unable to identify CD-ROM format. 05:06:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x10}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x28}}], 0x1, 0x0) 05:06:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@map_off='map=off'}]}) 05:06:18 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78}, 0x78) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0xfffffc7b) 05:06:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:18 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfffd, 0x0) [ 339.621154][T10693] ISOFS: Unable to identify CD-ROM format. 05:06:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x0, 0x400000000004, 0x9}, 0x2c) 05:06:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 05:06:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x502, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 05:06:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4624, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 05:06:19 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180), 0x8) 05:06:19 executing program 1: 05:06:19 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) [ 340.532296][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.568876][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 05:06:20 executing program 4: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) creat(&(0x7f0000000040)='./bus\x00', 0x0) 05:06:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x0, 0x0, 0x300}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x11, 0x0, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "6595c3", 0x0, 0x0, 0x0, @mcast2, @empty}}}}}}, 0x62) 05:06:20 executing program 4: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) creat(&(0x7f0000000040)='./bus\x00', 0x0) 05:06:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d8680027", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:06:20 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x103b0e93b836670b, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r1+30000000}}, 0x0) tkill(r0, 0x20000000014) futex(&(0x7f00000000c0), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 05:06:20 executing program 4: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) creat(&(0x7f0000000040)='./bus\x00', 0x0) 05:06:20 executing program 4: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) creat(&(0x7f0000000040)='./bus\x00', 0x0) 05:06:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5}]}, 0x50}}, 0x0) 05:06:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:06:20 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 05:06:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x0) sendfile(r3, r4, 0x0, 0x200) 05:06:21 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chmod(0x0, 0x4a) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000004c0)={0x0, 0x0, 0x81, 0x0, 0x80, "a79309f0cbb9e87167d4c16338af90a626292e", 0x1, 0xfffe}) 05:06:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 05:06:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000002500)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cdb945", 0x10, 0x88, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[@dstopts], {0x0, 0x0, 0x8}}}}}, 0x42) 05:06:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) 05:06:23 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x20) r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r1 = epoll_create(0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 05:06:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000002500)={@void, @val, @mpls={[], @ipv6=@udp={0x0, 0x6, "cdb945", 0x10, 0x88, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[@dstopts], {0x0, 0x0, 0x8}}}}}, 0x42) 05:06:23 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 05:06:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:23 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 05:06:23 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8", 0x5a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:06:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07bc33", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:06:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timers\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1, 0x20) 05:06:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/41) 05:06:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000300), 0x4) 05:06:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r0, 0x1) 05:06:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 05:06:24 executing program 4: 05:06:24 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 05:06:24 executing program 4: 05:06:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:24 executing program 0: [ 345.645198][T10867] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 345.656957][T10867] CPU: 1 PID: 10867 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 345.665956][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.676080][T10867] Call Trace: [ 345.679394][T10867] dump_stack+0x11d/0x181 [ 345.683730][T10867] dump_header+0xaa/0x39c [ 345.688072][T10867] oom_kill_process.cold+0x10/0x15 [ 345.693186][T10867] out_of_memory+0x231/0xa60 [ 345.697799][T10867] ? __rcu_read_unlock+0x66/0x2f0 [ 345.702818][T10867] mem_cgroup_out_of_memory+0x128/0x150 [ 345.708361][T10867] try_charge+0xb6c/0xbf0 [ 345.712752][T10867] mem_cgroup_try_charge+0xd2/0x260 [ 345.718049][T10867] mem_cgroup_try_charge_delay+0x3a/0x80 [ 345.723706][T10867] wp_page_copy+0x322/0xf20 [ 345.728245][T10867] ? __read_once_size+0x41/0xe0 [ 345.733162][T10867] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 345.739078][T10867] do_wp_page+0x192/0xd20 [ 345.744100][T10867] __handle_mm_fault+0x1d16/0x2e00 [ 345.749243][T10867] handle_mm_fault+0x21b/0x530 [ 345.754018][T10867] __get_user_pages+0x485/0x1130 [ 345.758988][T10867] ? apply_mlockall_flags+0x1f8/0x2d0 [ 345.764446][T10867] populate_vma_page_range+0xe6/0x100 [ 345.769851][T10867] __mm_populate+0x168/0x2a0 [ 345.774475][T10867] __x64_sys_mlockall+0x2e3/0x320 [ 345.779573][T10867] do_syscall_64+0xcc/0x3a0 [ 345.784105][T10867] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 345.790060][T10867] RIP: 0033:0x45c449 [ 345.794034][T10867] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.813717][T10867] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 345.822182][T10867] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 345.830160][T10867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 345.838703][T10867] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.846786][T10867] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 345.854761][T10867] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 345.862902][T10867] memory: usage 307200kB, limit 307200kB, failcnt 56 [ 345.869747][T10867] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 345.876768][T10867] Memory cgroup stats for /syz2: [ 345.878762][T10867] anon 310169600 [ 345.878762][T10867] file 0 [ 345.878762][T10867] kernel_stack 294912 [ 345.878762][T10867] slab 675840 [ 345.878762][T10867] sock 0 [ 345.878762][T10867] shmem 0 [ 345.878762][T10867] file_mapped 0 [ 345.878762][T10867] file_dirty 0 [ 345.878762][T10867] file_writeback 0 [ 345.878762][T10867] anon_thp 274726912 [ 345.878762][T10867] inactive_anon 46538752 [ 345.878762][T10867] active_anon 2330624 [ 345.878762][T10867] inactive_file 0 [ 345.878762][T10867] active_file 0 [ 345.878762][T10867] unevictable 261214208 [ 345.878762][T10867] slab_reclaimable 0 [ 345.878762][T10867] slab_unreclaimable 675840 [ 345.878762][T10867] pgfault 28908 [ 345.878762][T10867] pgmajfault 0 [ 345.878762][T10867] workingset_refault 0 [ 345.878762][T10867] workingset_activate 0 [ 345.878762][T10867] workingset_nodereclaim 0 [ 345.878762][T10867] pgrefill 70 [ 345.878762][T10867] pgscan 69 [ 345.878762][T10867] pgsteal 0 [ 345.878762][T10867] pgactivate 33 [ 345.974360][T10867] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10866,uid=0 [ 345.990334][T10867] Memory cgroup out of memory: Killed process 10866 (syz-executor.2) total-vm:74836kB, anon-rss:18284kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 346.009894][ T1078] oom_reaper: reaped process 10866 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:06:26 executing program 0: 05:06:26 executing program 3: 05:06:26 executing program 4: 05:06:26 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 05:06:26 executing program 1: 05:06:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:26 executing program 0: [ 347.585535][T10881] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 347.596385][T10881] CPU: 1 PID: 10881 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 347.605068][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.615165][T10881] Call Trace: [ 347.618492][T10881] dump_stack+0x11d/0x181 [ 347.622862][T10881] dump_header+0xaa/0x39c [ 347.627220][T10881] oom_kill_process.cold+0x10/0x15 [ 347.632362][T10881] out_of_memory+0x231/0xa60 [ 347.637030][T10881] ? __rcu_read_unlock+0x66/0x2f0 [ 347.642153][T10881] mem_cgroup_out_of_memory+0x128/0x150 [ 347.647790][T10881] try_charge+0xb6c/0xbf0 [ 347.652226][T10881] mem_cgroup_try_charge+0xd2/0x260 [ 347.658508][T10881] mem_cgroup_try_charge_delay+0x3a/0x80 [ 347.664232][T10881] __handle_mm_fault+0x197f/0x2e00 [ 347.669383][T10881] handle_mm_fault+0x21b/0x530 [ 347.674170][T10881] __get_user_pages+0x485/0x1130 [ 347.679145][T10881] populate_vma_page_range+0xe6/0x100 [ 347.684541][T10881] __mm_populate+0x168/0x2a0 [ 347.689203][T10881] __x64_sys_mlockall+0x2e3/0x320 [ 347.694300][T10881] do_syscall_64+0xcc/0x3a0 [ 347.698829][T10881] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 347.704726][T10881] RIP: 0033:0x45c449 [ 347.708637][T10881] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.728271][T10881] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 347.736690][T10881] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 347.744680][T10881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 347.752716][T10881] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 347.760738][T10881] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 347.768715][T10881] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 347.776770][T10881] memory: usage 307200kB, limit 307200kB, failcnt 92 [ 347.783569][T10881] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 347.790551][T10881] Memory cgroup stats for /syz2: [ 347.790692][T10881] anon 310296576 [ 347.790692][T10881] file 0 [ 347.790692][T10881] kernel_stack 294912 [ 347.790692][T10881] slab 675840 [ 347.790692][T10881] sock 0 [ 347.790692][T10881] shmem 0 [ 347.790692][T10881] file_mapped 0 [ 347.790692][T10881] file_dirty 0 [ 347.790692][T10881] file_writeback 0 [ 347.790692][T10881] anon_thp 274726912 [ 347.790692][T10881] inactive_anon 57520128 [ 347.790692][T10881] active_anon 2330624 05:06:27 executing program 4: 05:06:27 executing program 1: 05:06:27 executing program 3: 05:06:27 executing program 0: 05:06:27 executing program 0: 05:06:27 executing program 4: [ 347.790692][T10881] inactive_file 0 [ 347.790692][T10881] active_file 0 [ 347.790692][T10881] unevictable 250462208 [ 347.790692][T10881] slab_reclaimable 0 [ 347.790692][T10881] slab_unreclaimable 675840 [ 347.790692][T10881] pgfault 29766 [ 347.790692][T10881] pgmajfault 0 [ 347.790692][T10881] workingset_refault 0 [ 347.790692][T10881] workingset_activate 0 [ 347.790692][T10881] workingset_nodereclaim 0 [ 347.790692][T10881] pgrefill 136 [ 347.790692][T10881] pgscan 135 [ 347.790692][T10881] pgsteal 0 [ 347.790692][T10881] pgactivate 99 [ 347.886140][T10881] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10296,uid=0 [ 347.901697][T10881] Memory cgroup out of memory: Killed process 10296 (syz-executor.2) total-vm:75100kB, anon-rss:18648kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 05:06:27 executing program 4: 05:06:27 executing program 0: 05:06:27 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 05:06:27 executing program 3: [ 348.504829][T10881] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 348.515291][T10881] CPU: 1 PID: 10881 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 348.524083][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.534144][T10881] Call Trace: [ 348.537446][T10881] dump_stack+0x11d/0x181 [ 348.541858][T10881] dump_header+0xaa/0x39c [ 348.546206][T10881] oom_kill_process.cold+0x10/0x15 [ 348.551410][T10881] out_of_memory+0x231/0xa60 [ 348.556015][T10881] ? css_next_descendant_pre+0x3e/0xb0 [ 348.561491][T10881] ? __rcu_read_unlock+0x66/0x2f0 [ 348.566537][T10881] mem_cgroup_out_of_memory+0x128/0x150 [ 348.572171][T10881] try_charge+0xb6c/0xbf0 [ 348.576534][T10881] mem_cgroup_try_charge+0xd2/0x260 [ 348.581755][T10881] mem_cgroup_try_charge_delay+0x3a/0x80 [ 348.587402][T10881] wp_page_copy+0x322/0xf20 [ 348.591952][T10881] ? __read_once_size+0x41/0xe0 [ 348.596816][T10881] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 348.602729][T10881] do_wp_page+0x192/0xd20 [ 348.607067][T10881] ? pmd_val+0x17/0x60 [ 348.611186][T10881] __handle_mm_fault+0x1d16/0x2e00 [ 348.616334][T10881] ? apic_timer_interrupt+0xa/0x20 [ 348.621480][T10881] handle_mm_fault+0x21b/0x530 [ 348.626295][T10881] __get_user_pages+0x485/0x1130 [ 348.631348][T10881] populate_vma_page_range+0xe6/0x100 [ 348.636740][T10881] __mm_populate+0x168/0x2a0 [ 348.641347][T10881] __x64_sys_mlockall+0x2e3/0x320 [ 348.646396][T10881] do_syscall_64+0xcc/0x3a0 [ 348.650992][T10881] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 348.656897][T10881] RIP: 0033:0x45c449 [ 348.660869][T10881] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.680524][T10881] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 348.689068][T10881] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 348.697056][T10881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 348.705063][T10881] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 348.713045][T10881] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 348.721022][T10881] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 348.729151][T10881] memory: usage 307200kB, limit 307200kB, failcnt 145 [ 348.736057][T10881] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 348.743192][T10881] Memory cgroup stats for /syz2: [ 348.745446][T10881] anon 310267904 [ 348.745446][T10881] file 0 [ 348.745446][T10881] kernel_stack 331776 [ 348.745446][T10881] slab 675840 [ 348.745446][T10881] sock 0 [ 348.745446][T10881] shmem 0 [ 348.745446][T10881] file_mapped 0 [ 348.745446][T10881] file_dirty 0 [ 348.745446][T10881] file_writeback 0 [ 348.745446][T10881] anon_thp 272629760 [ 348.745446][T10881] inactive_anon 45973504 [ 348.745446][T10881] active_anon 2330624 [ 348.745446][T10881] inactive_file 0 [ 348.745446][T10881] active_file 0 [ 348.745446][T10881] unevictable 262094848 [ 348.745446][T10881] slab_reclaimable 0 [ 348.745446][T10881] slab_unreclaimable 675840 [ 348.745446][T10881] pgfault 31119 [ 348.745446][T10881] pgmajfault 0 [ 348.745446][T10881] workingset_refault 0 [ 348.745446][T10881] workingset_activate 0 [ 348.745446][T10881] workingset_nodereclaim 0 [ 348.745446][T10881] pgrefill 136 [ 348.745446][T10881] pgscan 135 [ 348.745446][T10881] pgsteal 0 [ 348.745446][T10881] pgactivate 99 [ 348.841136][T10881] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10878,uid=0 [ 348.856967][T10881] Memory cgroup out of memory: Killed process 10878 (syz-executor.2) total-vm:74836kB, anon-rss:18284kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 348.877882][ T1078] oom_reaper: reaped process 10878 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:06:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:28 executing program 0: 05:06:28 executing program 4: 05:06:28 executing program 1: 05:06:28 executing program 3: [ 349.340296][T10920] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 349.350649][T10920] CPU: 1 PID: 10920 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 349.359330][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.369554][T10920] Call Trace: [ 349.372861][T10920] dump_stack+0x11d/0x181 [ 349.377221][T10920] dump_header+0xaa/0x39c [ 349.381669][T10920] oom_kill_process.cold+0x10/0x15 [ 349.386802][T10920] out_of_memory+0x231/0xa60 [ 349.391470][T10920] ? __rcu_read_unlock+0x66/0x2f0 [ 349.396512][T10920] mem_cgroup_out_of_memory+0x128/0x150 [ 349.402171][T10920] try_charge+0xb6c/0xbf0 [ 349.406582][T10920] mem_cgroup_try_charge+0xd2/0x260 [ 349.411803][T10920] mem_cgroup_try_charge_delay+0x3a/0x80 [ 349.417539][T10920] __handle_mm_fault+0x197f/0x2e00 [ 349.422740][T10920] handle_mm_fault+0x21b/0x530 [ 349.427524][T10920] __get_user_pages+0x485/0x1130 [ 349.432494][T10920] populate_vma_page_range+0xe6/0x100 [ 349.438028][T10920] __mm_populate+0x168/0x2a0 [ 349.442630][T10920] __x64_sys_mlockall+0x2e3/0x320 [ 349.447769][T10920] do_syscall_64+0xcc/0x3a0 [ 349.452304][T10920] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 349.458209][T10920] RIP: 0033:0x45c449 [ 349.462175][T10920] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.481789][T10920] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 349.490324][T10920] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 349.498323][T10920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 349.506311][T10920] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 349.514295][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 349.522277][T10920] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 349.530387][T10920] memory: usage 307200kB, limit 307200kB, failcnt 185 [ 349.537218][T10920] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.544188][T10920] Memory cgroup stats for /syz2: [ 349.544424][T10920] anon 310394880 [ 349.544424][T10920] file 0 [ 349.544424][T10920] kernel_stack 294912 [ 349.544424][T10920] slab 811008 [ 349.544424][T10920] sock 0 [ 349.544424][T10920] shmem 0 [ 349.544424][T10920] file_mapped 0 [ 349.544424][T10920] file_dirty 0 [ 349.544424][T10920] file_writeback 0 [ 349.544424][T10920] anon_thp 272629760 [ 349.544424][T10920] inactive_anon 57491456 [ 349.544424][T10920] active_anon 2330624 [ 349.544424][T10920] inactive_file 0 [ 349.544424][T10920] active_file 0 [ 349.544424][T10920] unevictable 250732544 [ 349.544424][T10920] slab_reclaimable 135168 [ 349.544424][T10920] slab_unreclaimable 675840 [ 349.544424][T10920] pgfault 32043 [ 349.544424][T10920] pgmajfault 0 [ 349.544424][T10920] workingset_refault 0 [ 349.544424][T10920] workingset_activate 0 [ 349.544424][T10920] workingset_nodereclaim 0 [ 349.544424][T10920] pgrefill 136 [ 349.544424][T10920] pgscan 135 [ 349.544424][T10920] pgsteal 0 [ 349.544424][T10920] pgactivate 132 [ 349.640981][T10920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10904,uid=0 [ 349.656616][T10920] Memory cgroup out of memory: Killed process 10904 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 349.677895][T10920] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 05:06:29 executing program 1: 05:06:29 executing program 3: 05:06:29 executing program 0: 05:06:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) 05:06:29 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="74fcb5", 0x3}], 0x1}}], 0x1, 0x8000) write(r0, &(0x7f0000000400)='\x00\x00', 0x2) [ 349.688361][T10920] CPU: 1 PID: 10920 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 349.695629][ T1078] oom_reaper: reaped process 10904 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 349.697078][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.718212][T10920] Call Trace: [ 349.721552][T10920] dump_stack+0x11d/0x181 [ 349.725918][T10920] dump_header+0xaa/0x39c [ 349.730273][T10920] oom_kill_process.cold+0x10/0x15 [ 349.735458][T10920] out_of_memory+0x231/0xa60 [ 349.740069][T10920] ? __rcu_read_unlock+0x66/0x2f0 [ 349.745122][T10920] mem_cgroup_out_of_memory+0x128/0x150 [ 349.750699][T10920] try_charge+0xb6c/0xbf0 [ 349.755071][T10920] mem_cgroup_try_charge+0xd2/0x260 [ 349.760305][T10920] mem_cgroup_try_charge_delay+0x3a/0x80 [ 349.765981][T10920] __handle_mm_fault+0x197f/0x2e00 [ 349.771220][T10920] handle_mm_fault+0x21b/0x530 [ 349.776058][T10920] __get_user_pages+0x485/0x1130 [ 349.781122][T10920] populate_vma_page_range+0xe6/0x100 [ 349.786524][T10920] __mm_populate+0x168/0x2a0 [ 349.791154][T10920] __x64_sys_mlockall+0x2e3/0x320 [ 349.796274][T10920] do_syscall_64+0xcc/0x3a0 [ 349.800803][T10920] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 349.806814][T10920] RIP: 0033:0x45c449 [ 349.810741][T10920] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.830390][T10920] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 349.838975][T10920] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 349.847003][T10920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 349.854964][T10920] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 349.862924][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 349.870922][T10920] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 349.879117][T10920] memory: usage 288644kB, limit 307200kB, failcnt 191 [ 349.885962][T10920] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.892870][T10920] Memory cgroup stats for /syz2: [ 349.893034][T10920] anon 291577856 [ 349.893034][T10920] file 0 [ 349.893034][T10920] kernel_stack 294912 [ 349.893034][T10920] slab 811008 [ 349.893034][T10920] sock 0 [ 349.893034][T10920] shmem 0 [ 349.893034][T10920] file_mapped 0 [ 349.893034][T10920] file_dirty 0 [ 349.893034][T10920] file_writeback 0 [ 349.893034][T10920] anon_thp 257949696 [ 349.893034][T10920] inactive_anon 42864640 [ 349.893034][T10920] active_anon 2330624 [ 349.893034][T10920] inactive_file 0 [ 349.893034][T10920] active_file 0 [ 349.893034][T10920] unevictable 246538240 [ 349.893034][T10920] slab_reclaimable 135168 [ 349.893034][T10920] slab_unreclaimable 675840 [ 349.893034][T10920] pgfault 32043 [ 349.893034][T10920] pgmajfault 0 [ 349.893034][T10920] workingset_refault 0 [ 349.893034][T10920] workingset_activate 0 [ 349.893034][T10920] workingset_nodereclaim 0 [ 349.893034][T10920] pgrefill 136 [ 349.893034][T10920] pgscan 135 [ 349.893034][T10920] pgsteal 0 [ 349.893034][T10920] pgactivate 132 05:06:29 executing program 1: 05:06:29 executing program 0: [ 349.989222][T10920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10870,uid=0 [ 350.004741][T10920] Memory cgroup out of memory: Killed process 10870 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 350.025939][ T1078] oom_reaper: reaped process 10870 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 05:06:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:29 executing program 3: 05:06:29 executing program 5: 05:06:29 executing program 4: 05:06:29 executing program 1: 05:06:29 executing program 0: 05:06:30 executing program 0: 05:06:30 executing program 1: 05:06:30 executing program 3: 05:06:30 executing program 5: 05:06:30 executing program 4: 05:06:30 executing program 0: [ 351.553316][T10954] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 351.563641][T10954] CPU: 1 PID: 10954 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 351.572298][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.582351][T10954] Call Trace: [ 351.585661][T10954] dump_stack+0x11d/0x181 [ 351.590091][T10954] dump_header+0xaa/0x39c [ 351.594426][T10954] oom_kill_process.cold+0x10/0x15 [ 351.599566][T10954] out_of_memory+0x231/0xa60 [ 351.604261][T10954] mem_cgroup_out_of_memory+0x128/0x150 [ 351.609850][T10954] try_charge+0xb6c/0xbf0 [ 351.614179][T10954] mem_cgroup_try_charge+0xd2/0x260 [ 351.619369][T10954] mem_cgroup_try_charge_delay+0x3a/0x80 [ 351.625084][T10954] wp_page_copy+0x322/0xf20 [ 351.629584][T10954] ? apic_timer_interrupt+0xa/0x20 [ 351.634807][T10954] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 351.640714][T10954] do_wp_page+0x192/0xd20 [ 351.645171][T10954] __handle_mm_fault+0x1d16/0x2e00 [ 351.650407][T10954] handle_mm_fault+0x21b/0x530 [ 351.655194][T10954] __get_user_pages+0x485/0x1130 [ 351.660128][T10954] populate_vma_page_range+0xe6/0x100 [ 351.665563][T10954] __mm_populate+0x168/0x2a0 [ 351.670198][T10954] __x64_sys_mlockall+0x2e3/0x320 [ 351.675371][T10954] do_syscall_64+0xcc/0x3a0 [ 351.679870][T10954] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 351.685749][T10954] RIP: 0033:0x45c449 [ 351.689720][T10954] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.709313][T10954] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 351.717713][T10954] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 351.725721][T10954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 351.733701][T10954] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 351.741718][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 351.749675][T10954] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 351.757768][T10954] memory: usage 307200kB, limit 307200kB, failcnt 229 [ 351.764719][T10954] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 351.771730][T10954] Memory cgroup stats for /syz2: [ 351.772555][T10954] anon 310145024 [ 351.772555][T10954] file 0 [ 351.772555][T10954] kernel_stack 331776 [ 351.772555][T10954] slab 811008 [ 351.772555][T10954] sock 0 [ 351.772555][T10954] shmem 0 [ 351.772555][T10954] file_mapped 0 [ 351.772555][T10954] file_dirty 0 [ 351.772555][T10954] file_writeback 0 [ 351.772555][T10954] anon_thp 272629760 [ 351.772555][T10954] inactive_anon 48529408 [ 351.772555][T10954] active_anon 2297856 [ 351.772555][T10954] inactive_file 0 [ 351.772555][T10954] active_file 0 [ 351.772555][T10954] unevictable 259387392 [ 351.772555][T10954] slab_reclaimable 135168 [ 351.772555][T10954] slab_unreclaimable 675840 [ 351.772555][T10954] pgfault 34584 [ 351.772555][T10954] pgmajfault 0 [ 351.772555][T10954] workingset_refault 0 [ 351.772555][T10954] workingset_activate 0 [ 351.772555][T10954] workingset_nodereclaim 0 [ 351.772555][T10954] pgrefill 136 [ 351.772555][T10954] pgscan 168 [ 351.772555][T10954] pgsteal 0 [ 351.772555][T10954] pgactivate 132 [ 351.868724][T10954] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10953,uid=0 [ 351.884687][T10954] Memory cgroup out of memory: Killed process 10953 (syz-executor.2) total-vm:74836kB, anon-rss:18284kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 351.904612][ T1078] oom_reaper: reaped process 10953 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:06:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:31 executing program 5: 05:06:31 executing program 3: 05:06:31 executing program 1: 05:06:31 executing program 4: 05:06:31 executing program 0: [ 352.106291][T10976] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 352.116579][T10976] CPU: 1 PID: 10976 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 352.125324][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.135385][T10976] Call Trace: [ 352.138745][T10976] dump_stack+0x11d/0x181 [ 352.143098][T10976] dump_header+0xaa/0x39c [ 352.147455][T10976] oom_kill_process.cold+0x10/0x15 05:06:31 executing program 5: 05:06:31 executing program 1: 05:06:31 executing program 4: [ 352.152593][T10976] out_of_memory+0x231/0xa60 [ 352.157211][T10976] ? __rcu_read_unlock+0x66/0x2f0 [ 352.162300][T10976] mem_cgroup_out_of_memory+0x128/0x150 [ 352.167920][T10976] try_charge+0xb6c/0xbf0 [ 352.172308][T10976] mem_cgroup_try_charge+0xd2/0x260 [ 352.177612][T10976] mem_cgroup_try_charge_delay+0x3a/0x80 [ 352.183301][T10976] __handle_mm_fault+0x197f/0x2e00 [ 352.188464][T10976] handle_mm_fault+0x21b/0x530 [ 352.193627][T10976] __get_user_pages+0x485/0x1130 [ 352.198691][T10976] populate_vma_page_range+0xe6/0x100 05:06:31 executing program 3: [ 352.204094][T10976] __mm_populate+0x168/0x2a0 [ 352.208719][T10976] __x64_sys_mlockall+0x2e3/0x320 [ 352.213890][T10976] do_syscall_64+0xcc/0x3a0 [ 352.218438][T10976] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 352.224379][T10976] RIP: 0033:0x45c449 [ 352.228310][T10976] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.247930][T10976] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 352.256356][T10976] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 352.264374][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 352.272363][T10976] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 352.280350][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 352.288339][T10976] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 352.296537][T10976] memory: usage 307200kB, limit 307200kB, failcnt 259 [ 352.303611][T10976] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 352.311292][T10976] Memory cgroup stats for /syz2: [ 352.311452][T10976] anon 310321152 [ 352.311452][T10976] file 0 [ 352.311452][T10976] kernel_stack 294912 [ 352.311452][T10976] slab 811008 [ 352.311452][T10976] sock 0 [ 352.311452][T10976] shmem 0 [ 352.311452][T10976] file_mapped 0 [ 352.311452][T10976] file_dirty 0 [ 352.311452][T10976] file_writeback 0 [ 352.311452][T10976] anon_thp 272629760 [ 352.311452][T10976] inactive_anon 59445248 [ 352.311452][T10976] active_anon 2297856 [ 352.311452][T10976] inactive_file 0 [ 352.311452][T10976] active_file 0 [ 352.311452][T10976] unevictable 248766464 [ 352.311452][T10976] slab_reclaimable 135168 [ 352.311452][T10976] slab_unreclaimable 675840 [ 352.311452][T10976] pgfault 35508 [ 352.311452][T10976] pgmajfault 0 [ 352.311452][T10976] workingset_refault 0 [ 352.311452][T10976] workingset_activate 0 [ 352.311452][T10976] workingset_nodereclaim 0 [ 352.311452][T10976] pgrefill 136 [ 352.311452][T10976] pgscan 168 [ 352.311452][T10976] pgsteal 0 [ 352.311452][T10976] pgactivate 132 [ 352.407465][T10976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10967,uid=0 [ 352.423344][T10976] Memory cgroup out of memory: Killed process 10967 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 352.445128][ T1078] oom_reaper: reaped process 10967 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 05:06:31 executing program 1: r0 = memfd_create(&(0x7f0000000440)='\x00\xb3y\xb1\xc4\xc5)\xa3\xb1\xc6\x9cju5(\xcd\xe2\xda\xbb\xc0\xc0\x92b\x14\xfe\x86\x00\xdb\xe5n\x06$O]\x16C\x90\xd8\x8f1E\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) 05:06:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab357bf68e6faa53367f05f4ad61421349f2f11e931e7d62ead5e7cd2157df6b2bcb47fb5", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:06:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:32 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:06:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000003) 05:06:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0x800000080000010) 05:06:32 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x800fe) sendfile(r3, r4, 0x0, 0x8000fffffffe) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00'], 0x6) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) 05:06:32 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) [ 353.056156][ T27] audit: type=1804 audit(1582607192.455:39): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir271458228/syzkaller.RoXp2Q/112/bus" dev="sda1" ino=16578 res=1 05:06:32 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) [ 353.257847][T11018] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 05:06:32 executing program 5: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 353.257893][T11018] CPU: 1 PID: 11018 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 353.257903][T11018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.257908][T11018] Call Trace: [ 353.257937][T11018] dump_stack+0x11d/0x181 [ 353.258036][T11018] dump_header+0xaa/0x39c [ 353.258061][T11018] oom_kill_process.cold+0x10/0x15 [ 353.258085][T11018] out_of_memory+0x231/0xa60 [ 353.258107][T11018] ? __rcu_read_unlock+0x66/0x2f0 [ 353.258191][T11018] mem_cgroup_out_of_memory+0x128/0x150 [ 353.258223][T11018] try_charge+0xb6c/0xbf0 [ 353.258265][T11018] mem_cgroup_try_charge+0xd2/0x260 [ 353.258374][T11018] mem_cgroup_try_charge_delay+0x3a/0x80 [ 353.258400][T11018] __handle_mm_fault+0x197f/0x2e00 [ 353.258445][T11018] handle_mm_fault+0x21b/0x530 [ 353.258473][T11018] __get_user_pages+0x485/0x1130 [ 353.258554][T11018] populate_vma_page_range+0xe6/0x100 [ 353.258581][T11018] __mm_populate+0x168/0x2a0 [ 353.258607][T11018] __x64_sys_mlockall+0x2e3/0x320 [ 353.258634][T11018] do_syscall_64+0xcc/0x3a0 [ 353.258660][T11018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 353.258673][T11018] RIP: 0033:0x45c449 [ 353.258758][T11018] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:06:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcf", 0x23}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 353.258768][T11018] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 05:06:33 executing program 5: open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 353.258786][T11018] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 353.258796][T11018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 05:06:33 executing program 1: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x1}, {@empty, 0x4e22}}, 0x44) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 353.258806][T11018] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.258817][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.258828][T11018] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 353.258994][T11018] memory: usage 307200kB, limit 307200kB, failcnt 283 [ 353.259005][T11018] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.259008][T11018] Memory cgroup stats for /syz2: [ 353.259149][T11018] anon 310104064 [ 353.259149][T11018] file 0 [ 353.259149][T11018] kernel_stack 294912 [ 353.259149][T11018] slab 811008 [ 353.259149][T11018] sock 0 [ 353.259149][T11018] shmem 0 [ 353.259149][T11018] file_mapped 0 [ 353.259149][T11018] file_dirty 0 [ 353.259149][T11018] file_writeback 0 [ 353.259149][T11018] anon_thp 270532608 [ 353.259149][T11018] inactive_anon 59420672 [ 353.259149][T11018] active_anon 2256896 [ 353.259149][T11018] inactive_file 0 [ 353.259149][T11018] active_file 0 [ 353.259149][T11018] unevictable 248500224 [ 353.259149][T11018] slab_reclaimable 135168 [ 353.259149][T11018] slab_unreclaimable 675840 [ 353.259149][T11018] pgfault 37323 [ 353.259149][T11018] pgmajfault 0 [ 353.259149][T11018] workingset_refault 0 [ 353.259149][T11018] workingset_activate 0 [ 353.259149][T11018] workingset_nodereclaim 0 [ 353.259149][T11018] pgrefill 169 [ 353.259149][T11018] pgscan 168 [ 353.259149][T11018] pgsteal 0 [ 353.259149][T11018] pgactivate 132 [ 353.259160][T11018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10995,uid=0 05:06:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) [ 353.259257][T11018] Memory cgroup out of memory: Killed process 10995 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 353.288783][T11018] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 353.288805][T11018] CPU: 1 PID: 11018 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 353.288859][T11018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.288865][T11018] Call Trace: [ 353.288893][T11018] dump_stack+0x11d/0x181 [ 353.289002][T11018] dump_header+0xaa/0x39c [ 353.289062][T11018] oom_kill_process.cold+0x10/0x15 [ 353.289085][T11018] out_of_memory+0x231/0xa60 [ 353.289108][T11018] ? __rcu_read_unlock+0x66/0x2f0 [ 353.289137][T11018] mem_cgroup_out_of_memory+0x128/0x150 [ 353.289168][T11018] try_charge+0xb6c/0xbf0 [ 353.289210][T11018] mem_cgroup_try_charge+0xd2/0x260 [ 353.289306][T11018] mem_cgroup_try_charge_delay+0x3a/0x80 [ 353.289332][T11018] __handle_mm_fault+0x197f/0x2e00 [ 353.289376][T11018] handle_mm_fault+0x21b/0x530 [ 353.289403][T11018] __get_user_pages+0x485/0x1130 [ 353.289442][T11018] populate_vma_page_range+0xe6/0x100 [ 353.289528][T11018] __mm_populate+0x168/0x2a0 [ 353.289560][T11018] __x64_sys_mlockall+0x2e3/0x320 [ 353.289587][T11018] do_syscall_64+0xcc/0x3a0 [ 353.289625][T11018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 353.289637][T11018] RIP: 0033:0x45c449 [ 353.289660][T11018] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.289670][T11018] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 353.289687][T11018] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 353.289697][T11018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 353.289707][T11018] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.289716][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.289727][T11018] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 353.289836][T11018] memory: usage 306852kB, limit 307200kB, failcnt 344 [ 353.289896][T11018] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.289979][T11018] Memory cgroup stats for /syz2: [ 353.290252][T11018] anon 309809152 [ 353.290252][T11018] file 0 [ 353.290252][T11018] kernel_stack 294912 [ 353.290252][T11018] slab 811008 [ 353.290252][T11018] sock 0 [ 353.290252][T11018] shmem 0 [ 353.290252][T11018] file_mapped 0 [ 353.290252][T11018] file_dirty 0 [ 353.290252][T11018] file_writeback 0 [ 353.290252][T11018] anon_thp 270532608 [ 353.290252][T11018] inactive_anon 59015168 [ 353.290252][T11018] active_anon 2256896 [ 353.290252][T11018] inactive_file 0 [ 353.290252][T11018] active_file 0 [ 353.290252][T11018] unevictable 248500224 [ 353.290252][T11018] slab_reclaimable 135168 [ 353.290252][T11018] slab_unreclaimable 675840 [ 353.290252][T11018] pgfault 37323 [ 353.290252][T11018] pgmajfault 0 [ 353.290252][T11018] workingset_refault 0 [ 353.290252][T11018] workingset_activate 0 [ 353.290252][T11018] workingset_nodereclaim 0 [ 353.290252][T11018] pgrefill 169 [ 353.290252][T11018] pgscan 168 [ 353.290252][T11018] pgsteal 0 [ 353.290252][T11018] pgactivate 165 [ 353.290280][T11018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10944,uid=0 [ 353.290612][T11018] Memory cgroup out of memory: Killed process 10944 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 353.306643][T11018] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 353.306671][T11018] CPU: 1 PID: 11018 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 353.306681][T11018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.306686][T11018] Call Trace: [ 353.306727][T11018] dump_stack+0x11d/0x181 [ 353.306804][T11018] dump_header+0xaa/0x39c [ 353.306848][T11018] oom_kill_process.cold+0x10/0x15 [ 353.306895][T11018] out_of_memory+0x231/0xa60 [ 353.306928][T11018] ? __rcu_read_unlock+0x66/0x2f0 [ 353.307023][T11018] mem_cgroup_out_of_memory+0x128/0x150 [ 353.307051][T11018] try_charge+0xb6c/0xbf0 [ 353.307099][T11018] mem_cgroup_try_charge+0xd2/0x260 [ 353.307191][T11018] mem_cgroup_try_charge_delay+0x3a/0x80 [ 353.307218][T11018] __handle_mm_fault+0x197f/0x2e00 [ 353.307383][T11018] handle_mm_fault+0x21b/0x530 [ 353.307445][T11018] __get_user_pages+0x485/0x1130 [ 353.307485][T11018] populate_vma_page_range+0xe6/0x100 [ 353.307510][T11018] __mm_populate+0x168/0x2a0 [ 353.307536][T11018] __x64_sys_mlockall+0x2e3/0x320 [ 353.307579][T11018] do_syscall_64+0xcc/0x3a0 [ 353.307630][T11018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 353.307643][T11018] RIP: 0033:0x45c449 [ 353.307745][T11018] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.307755][T11018] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 353.307780][T11018] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 353.307802][T11018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 353.307821][T11018] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.307831][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.307842][T11018] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 353.307875][T11018] memory: usage 306852kB, limit 307200kB, failcnt 404 [ 353.307885][T11018] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.307892][T11018] Memory cgroup stats for /syz2: [ 353.308075][T11018] anon 309858304 [ 353.308075][T11018] file 0 [ 353.308075][T11018] kernel_stack 294912 [ 353.308075][T11018] slab 811008 [ 353.308075][T11018] sock 0 [ 353.308075][T11018] shmem 0 [ 353.308075][T11018] file_mapped 0 [ 353.308075][T11018] file_dirty 0 [ 353.308075][T11018] file_writeback 0 [ 353.308075][T11018] anon_thp 270532608 [ 353.308075][T11018] inactive_anon 58744832 [ 353.308075][T11018] active_anon 2256896 [ 353.308075][T11018] inactive_file 0 [ 353.308075][T11018] active_file 0 [ 353.308075][T11018] unevictable 248905728 [ 353.308075][T11018] slab_reclaimable 135168 [ 353.308075][T11018] slab_unreclaimable 675840 [ 353.308075][T11018] pgfault 37389 [ 353.308075][T11018] pgmajfault 0 [ 353.308075][T11018] workingset_refault 0 [ 353.308075][T11018] workingset_activate 0 [ 353.308075][T11018] workingset_nodereclaim 0 [ 353.308075][T11018] pgrefill 169 [ 353.308075][T11018] pgscan 168 [ 353.308075][T11018] pgsteal 0 [ 353.308075][T11018] pgactivate 165 [ 353.308085][T11018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10800,uid=0 [ 353.308162][T11018] Memory cgroup out of memory: Killed process 10800 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 353.313421][T11018] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 353.313443][T11018] CPU: 1 PID: 11018 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 353.313452][T11018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.313457][T11018] Call Trace: [ 353.313488][T11018] dump_stack+0x11d/0x181 [ 353.313513][T11018] dump_header+0xaa/0x39c [ 353.313538][T11018] oom_kill_process.cold+0x10/0x15 [ 353.313570][T11018] out_of_memory+0x231/0xa60 [ 353.313658][T11018] ? __rcu_read_unlock+0x66/0x2f0 [ 353.313688][T11018] mem_cgroup_out_of_memory+0x128/0x150 05:06:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getpid() r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080fffffffe) 05:06:34 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 353.313719][T11018] try_charge+0xb6c/0xbf0 [ 353.313776][T11018] mem_cgroup_try_charge+0xd2/0x260 [ 353.313806][T11018] mem_cgroup_try_charge_delay+0x3a/0x80 [ 353.313830][T11018] __handle_mm_fault+0x197f/0x2e00 [ 353.313872][T11018] handle_mm_fault+0x21b/0x530 [ 353.313901][T11018] __get_user_pages+0x485/0x1130 [ 353.314005][T11018] populate_vma_page_range+0xe6/0x100 [ 353.314031][T11018] __mm_populate+0x168/0x2a0 [ 353.314120][T11018] __x64_sys_mlockall+0x2e3/0x320 [ 353.314147][T11018] do_syscall_64+0xcc/0x3a0 [ 353.314201][T11018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 353.314213][T11018] RIP: 0033:0x45c449 [ 353.314235][T11018] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.314245][T11018] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 353.314262][T11018] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 353.314272][T11018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 353.314282][T11018] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.314292][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.314302][T11018] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 353.315203][T11018] memory: usage 306852kB, limit 307200kB, failcnt 435 [ 353.315214][T11018] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.315218][T11018] Memory cgroup stats for /syz2: [ 353.315366][T11018] anon 309907456 [ 353.315366][T11018] file 0 [ 353.315366][T11018] kernel_stack 294912 [ 353.315366][T11018] slab 811008 [ 353.315366][T11018] sock 0 [ 353.315366][T11018] shmem 0 [ 353.315366][T11018] file_mapped 0 [ 353.315366][T11018] file_dirty 0 [ 353.315366][T11018] file_writeback 0 [ 353.315366][T11018] anon_thp 270532608 [ 353.315366][T11018] inactive_anon 58339328 [ 353.315366][T11018] active_anon 2256896 [ 353.315366][T11018] inactive_file 0 [ 353.315366][T11018] active_file 0 [ 353.315366][T11018] unevictable 249311232 [ 353.315366][T11018] slab_reclaimable 135168 [ 353.315366][T11018] slab_unreclaimable 675840 [ 353.315366][T11018] pgfault 37488 [ 353.315366][T11018] pgmajfault 0 [ 353.315366][T11018] workingset_refault 0 [ 353.315366][T11018] workingset_activate 0 [ 353.315366][T11018] workingset_nodereclaim 0 [ 353.315366][T11018] pgrefill 169 [ 353.315366][T11018] pgscan 168 [ 353.315366][T11018] pgsteal 0 [ 353.315366][T11018] pgactivate 165 [ 353.315377][T11018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10707,uid=0 [ 353.315534][T11018] Memory cgroup out of memory: Killed process 10707 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 353.322565][T11018] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 353.322586][T11018] CPU: 1 PID: 11018 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 353.322597][T11018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.322602][T11018] Call Trace: [ 353.322629][T11018] dump_stack+0x11d/0x181 [ 353.322652][T11018] dump_header+0xaa/0x39c [ 353.322752][T11018] oom_kill_process.cold+0x10/0x15 [ 353.322776][T11018] out_of_memory+0x231/0xa60 [ 353.322797][T11018] ? __rcu_read_unlock+0x66/0x2f0 [ 353.322827][T11018] mem_cgroup_out_of_memory+0x128/0x150 [ 353.322858][T11018] try_charge+0xb6c/0xbf0 [ 353.322906][T11018] mem_cgroup_try_charge+0xd2/0x260 [ 353.322936][T11018] mem_cgroup_try_charge_delay+0x3a/0x80 [ 353.322962][T11018] __handle_mm_fault+0x197f/0x2e00 [ 353.323007][T11018] handle_mm_fault+0x21b/0x530 [ 353.323036][T11018] __get_user_pages+0x485/0x1130 [ 353.323119][T11018] populate_vma_page_range+0xe6/0x100 [ 353.323195][T11018] __mm_populate+0x168/0x2a0 [ 353.323221][T11018] __x64_sys_mlockall+0x2e3/0x320 [ 353.323249][T11018] do_syscall_64+0xcc/0x3a0 [ 353.323304][T11018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 353.323356][T11018] RIP: 0033:0x45c449 [ 353.323442][T11018] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.323515][T11018] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 353.323533][T11018] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 353.323550][T11018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 353.323560][T11018] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.323571][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.323581][T11018] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 353.323609][T11018] memory: usage 307200kB, limit 307200kB, failcnt 488 [ 353.323619][T11018] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.323622][T11018] Memory cgroup stats for /syz2: [ 353.323828][T11018] anon 310226944 [ 353.323828][T11018] file 0 [ 353.323828][T11018] kernel_stack 294912 [ 353.323828][T11018] slab 811008 [ 353.323828][T11018] sock 0 [ 353.323828][T11018] shmem 0 [ 353.323828][T11018] file_mapped 0 [ 353.323828][T11018] file_dirty 0 [ 353.323828][T11018] file_writeback 0 [ 353.323828][T11018] anon_thp 270532608 [ 353.323828][T11018] inactive_anon 57933824 [ 353.323828][T11018] active_anon 2256896 [ 353.323828][T11018] inactive_file 0 [ 353.323828][T11018] active_file 0 [ 353.323828][T11018] unevictable 249987072 [ 353.323828][T11018] slab_reclaimable 135168 [ 353.323828][T11018] slab_unreclaimable 675840 [ 353.323828][T11018] pgfault 37653 [ 353.323828][T11018] pgmajfault 0 [ 353.323828][T11018] workingset_refault 0 [ 353.323828][T11018] workingset_activate 0 [ 353.323828][T11018] workingset_nodereclaim 0 [ 353.323828][T11018] pgrefill 169 [ 353.323828][T11018] pgscan 168 [ 353.323828][T11018] pgsteal 0 [ 353.323828][T11018] pgactivate 165 [ 353.323837][T11018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10685,uid=0 [ 353.323911][T11018] Memory cgroup out of memory: Killed process 10685 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 353.331239][T11018] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 353.331335][T11018] CPU: 1 PID: 11018 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 353.331344][T11018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.331348][T11018] Call Trace: [ 353.331377][T11018] dump_stack+0x11d/0x181 [ 353.331402][T11018] dump_header+0xaa/0x39c [ 353.331429][T11018] oom_kill_process.cold+0x10/0x15 [ 353.331453][T11018] out_of_memory+0x231/0xa60 [ 353.331474][T11018] ? __rcu_read_unlock+0x66/0x2f0 [ 353.331503][T11018] mem_cgroup_out_of_memory+0x128/0x150 [ 353.331586][T11018] try_charge+0xb6c/0xbf0 [ 353.331671][T11018] mem_cgroup_try_charge+0xd2/0x260 [ 353.331702][T11018] mem_cgroup_try_charge_delay+0x3a/0x80 [ 353.331727][T11018] __handle_mm_fault+0x197f/0x2e00 [ 353.331751][T11018] ? __const_udelay+0x36/0x40 [ 353.331790][T11018] handle_mm_fault+0x21b/0x530 [ 353.331870][T11018] __get_user_pages+0x485/0x1130 [ 353.331908][T11018] populate_vma_page_range+0xe6/0x100 [ 353.331931][T11018] __mm_populate+0x168/0x2a0 [ 353.331954][T11018] __x64_sys_mlockall+0x2e3/0x320 [ 353.332053][T11018] do_syscall_64+0xcc/0x3a0 [ 353.332132][T11018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 353.332211][T11018] RIP: 0033:0x45c449 [ 353.332233][T11018] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.332242][T11018] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 353.332276][T11018] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 353.332286][T11018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 353.332304][T11018] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.332314][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 353.332325][T11018] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 353.332392][T11018] memory: usage 307200kB, limit 307200kB, failcnt 539 [ 353.332402][T11018] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.332405][T11018] Memory cgroup stats for /syz2: [ 353.332644][T11018] anon 310243328 [ 353.332644][T11018] file 0 [ 353.332644][T11018] kernel_stack 294912 [ 353.332644][T11018] slab 811008 [ 353.332644][T11018] sock 0 [ 353.332644][T11018] shmem 0 [ 353.332644][T11018] file_mapped 0 [ 353.332644][T11018] file_dirty 0 [ 353.332644][T11018] file_writeback 0 [ 353.332644][T11018] anon_thp 270532608 [ 353.332644][T11018] inactive_anon 56176640 [ 353.332644][T11018] active_anon 2256896 [ 353.332644][T11018] inactive_file 0 [ 353.332644][T11018] active_file 0 [ 353.332644][T11018] unevictable 250392576 [ 353.332644][T11018] slab_reclaimable 135168 [ 353.332644][T11018] slab_unreclaimable 675840 [ 353.332644][T11018] pgfault 37752 [ 353.332644][T11018] pgmajfault 0 [ 353.332644][T11018] workingset_refault 0 [ 353.332644][T11018] workingset_activate 0 [ 353.332644][T11018] workingset_nodereclaim 0 [ 353.332644][T11018] pgrefill 169 [ 353.332644][T11018] pgscan 168 [ 353.332644][T11018] pgsteal 0 [ 353.332644][T11018] pgactivate 165 [ 353.332654][T11018] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10638,uid=0 [ 353.332730][T11018] Memory cgroup out of memory: Killed process 10638 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 353.336031][ T1078] oom_reaper: reaped process 10685 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 353.355242][ T1078] oom_reaper: reaped process 10638 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 353.360908][ T1078] oom_reaper: reaped process 10707 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 353.366422][ T1078] oom_reaper: reaped process 10800 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 353.375750][ T1078] oom_reaper: reaped process 10944 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 353.391736][ T1078] oom_reaper: reaped process 10995 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 353.730729][ T27] audit: type=1804 audit(1582607193.125:40): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir659569360/syzkaller.hTmkYd/76/bus" dev="sda1" ino=16724 res=1 [ 353.862995][ T27] audit: type=1804 audit(1582607193.265:41): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir659569360/syzkaller.hTmkYd/76/bus" dev="sda1" ino=16724 res=1 [ 353.921907][ T27] audit: type=1804 audit(1582607193.325:42): pid=11032 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir659569360/syzkaller.hTmkYd/76/bus" dev="sda1" ino=16724 res=1 [ 353.935979][ T27] audit: type=1804 audit(1582607193.335:43): pid=11013 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir271458228/syzkaller.RoXp2Q/112/bus" dev="sda1" ino=16578 res=1 [ 354.273949][ T27] audit: type=1804 audit(1582607193.675:44): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir659569360/syzkaller.hTmkYd/77/bus" dev="sda1" ino=16533 res=1 [ 354.306342][T11052] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 8782) [ 355.589061][T11061] FAT-fs (loop0): invalid media value (0x00) [ 355.750049][ T27] audit: type=1804 audit(1582607195.115:45): pid=11070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir271458228/syzkaller.RoXp2Q/114/bus" dev="sda1" ino=16912 res=1 [ 355.768776][T11061] FAT-fs (loop0): Can't find a valid FAT filesystem 05:06:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30}, 0x30) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 05:06:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d86800278dcff47d010000805acf", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 356.783333][ T27] audit: type=1804 audit(1582607196.115:46): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir271458228/syzkaller.RoXp2Q/114/bus" dev="sda1" ino=16912 res=1 [ 356.831784][ T27] audit: type=1804 audit(1582607196.115:47): pid=11076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir271458228/syzkaller.RoXp2Q/114/bus" dev="sda1" ino=16912 res=1 [ 356.876173][ T27] audit: type=1804 audit(1582607196.145:48): pid=11070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir271458228/syzkaller.RoXp2Q/114/bus" dev="sda1" ino=16912 res=1 05:06:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getpid() r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 356.942135][T11089] syz-executor.3 (11089): /proc/11089/oom_adj is deprecated, please use /proc/11089/oom_score_adj instead. 05:06:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30}, 0x30) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 05:06:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800004000e004, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open$dir(&(0x7f0000000000)='.\x00', 0x1a000, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="000637620003555e5689091b59672a8a29c14dadc3cab5ed450fe2f2ea21e6a23e220a67d351f7e3e71bf8c7784a744eaf295764d3c9f91d5fe01d926adc9ddc755dbde983d1347d06a30b65ef3b9726b72d3999f59b85afa20c6e8e6bc42bc9f9fce6123d6cbc43aaa9cbb67edadb419f13295ca580d9ba0329e6a514cb6eff98ce830a000058b8fa75637445c04db68699169ae8a81077d1fd0fa44786bf97c6b6947b6543b4d779de6b89c77bd98ec112004dc5b4a0bf82b809d515d7c5e3f85d9ee89abefbd18596558f04fd745f7327f06826d14048d2d59a090cf4dbc086a9beb1549128ec8a596d5a5e189474dd144653622dbf5bc4"], 0xf9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000002c80)={&(0x7f0000002300)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000002a80)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}, 0x0) socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xb8bc1000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:06:36 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x127, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x40a85321, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 05:06:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30}, 0x30) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 05:06:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'lblc\x00', 0x4}, 0x2c) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000048000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000020080000000400000c000000000000000aaaaaa9000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000002b7c1f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020fffffff90000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@empty, @loopback}, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') [ 357.774085][T11121] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 357.873879][T11121] FAT-fs (loop0): Filesystem has been set read-only [ 357.933198][T11121] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 357.984626][T11127] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 358.008737][T11127] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 358.051351][T11129] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 358.081495][T11129] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 358.090720][T11104] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 05:06:37 executing program 1: clone(0xd7e0ce5d01a5091b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, &(0x7f0000004600)=""/210, 0x2f, 0xd2, 0x8}, 0x20) 05:06:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'lblc\x00', 0x4}, 0x2c) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000048000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000020080000000400000c000000000000000aaaaaa9000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000002b7c1f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020fffffff90000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@empty, @loopback}, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') 05:06:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800004000e004, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open$dir(&(0x7f0000000000)='.\x00', 0x1a000, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="000637620003555e5689091b59672a8a29c14dadc3cab5ed450fe2f2ea21e6a23e220a67d351f7e3e71bf8c7784a744eaf295764d3c9f91d5fe01d926adc9ddc755dbde983d1347d06a30b65ef3b9726b72d3999f59b85afa20c6e8e6bc42bc9f9fce6123d6cbc43aaa9cbb67edadb419f13295ca580d9ba0329e6a514cb6eff98ce830a000058b8fa75637445c04db68699169ae8a81077d1fd0fa44786bf97c6b6947b6543b4d779de6b89c77bd98ec112004dc5b4a0bf82b809d515d7c5e3f85d9ee89abefbd18596558f04fd745f7327f06826d14048d2d59a090cf4dbc086a9beb1549128ec8a596d5a5e189474dd144653622dbf5bc4"], 0xf9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000002c80)={&(0x7f0000002300)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000002a80)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}, 0x0) socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xb8bc1000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:06:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r5 = dup2(r0, r0) write$P9_RMKNOD(r5, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 358.399753][T11140] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 358.438917][T11144] BPF:Unsupported btf_header [ 358.440085][T11140] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 05:06:39 executing program 5: pipe(&(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 05:06:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000be00000000000000002000"}) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0x6f0a77bd) 05:06:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000040)={0x0, "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"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 05:06:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ac5e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x60, 0x0, 0x1af) 05:06:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r5 = dup2(r0, r0) write$P9_RMKNOD(r5, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800004000e004, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open$dir(&(0x7f0000000000)='.\x00', 0x1a000, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="000637620003555e5689091b59672a8a29c14dadc3cab5ed450fe2f2ea21e6a23e220a67d351f7e3e71bf8c7784a744eaf295764d3c9f91d5fe01d926adc9ddc755dbde983d1347d06a30b65ef3b9726b72d3999f59b85afa20c6e8e6bc42bc9f9fce6123d6cbc43aaa9cbb67edadb419f13295ca580d9ba0329e6a514cb6eff98ce830a000058b8fa75637445c04db68699169ae8a81077d1fd0fa44786bf97c6b6947b6543b4d779de6b89c77bd98ec112004dc5b4a0bf82b809d515d7c5e3f85d9ee89abefbd18596558f04fd745f7327f06826d14048d2d59a090cf4dbc086a9beb1549128ec8a596d5a5e189474dd144653622dbf5bc4"], 0xf9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000002c80)={&(0x7f0000002300)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000002a80)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}, 0x0) socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xb8bc1000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:06:39 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 05:06:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4010ae42, &(0x7f00000003c0)={0x0, 0x0, @ioapic}) 05:06:39 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) read(r0, &(0x7f0000000340)=""/144, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="682faedcb50b697c164d38e215fbe4aeeaa9f9924ab7aec50856912de401faf856086bbf9fab2132331748bf17c084416128303ad964542e2d3b2a30fba6db55bdb66f9abf58b85cbcc671729959d81d26322432e66cd7344c9288b24b14973270ef6d9829bc1f1689155cda9dbff68b61cedebbfcfcaf6ee4f695f797d43fb9ca0e97742197c85f8a9e3febe62875e63dc3586fea82555eaf66e87c85c869c3920fb3e6375f36ffba68c0bb83186316414f90408e62786ebed94c66fa795c57511036a9775665573c", 0xc9}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 05:06:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000100)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mprotect(&(0x7f00003ce000/0x200000)=nil, 0x200000, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008) 05:06:40 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 05:06:40 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 05:06:40 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, 0x0) 05:06:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 05:06:40 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0xc0104307, 0x0) 05:06:40 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) [ 360.946640][T11223] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 360.982392][T11225] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:06:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r5 = dup2(r0, r0) write$P9_RMKNOD(r5, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:40 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 05:06:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x230, 0x0, &(0x7f0000000140)=[@acquire, @acquire, @request_death, @release={0x40086303}, @register_looper, @dead_binder_done, @clear_death, @acquire_done={0x40406300}, @free_buffer], 0x1000001ed, 0x719000, 0x0}) 05:06:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800004000e004, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open$dir(&(0x7f0000000000)='.\x00', 0x1a000, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="000637620003555e5689091b59672a8a29c14dadc3cab5ed450fe2f2ea21e6a23e220a67d351f7e3e71bf8c7784a744eaf295764d3c9f91d5fe01d926adc9ddc755dbde983d1347d06a30b65ef3b9726b72d3999f59b85afa20c6e8e6bc42bc9f9fce6123d6cbc43aaa9cbb67edadb419f13295ca580d9ba0329e6a514cb6eff98ce830a000058b8fa75637445c04db68699169ae8a81077d1fd0fa44786bf97c6b6947b6543b4d779de6b89c77bd98ec112004dc5b4a0bf82b809d515d7c5e3f85d9ee89abefbd18596558f04fd745f7327f06826d14048d2d59a090cf4dbc086a9beb1549128ec8a596d5a5e189474dd144653622dbf5bc4"], 0xf9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000002c80)={&(0x7f0000002300)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000002a80)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}, 0x0) socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xb8bc1000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:06:40 executing program 5: syz_open_dev$ndb(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 05:06:40 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000be00000000000000002000"}) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0x6f0a77bd) 05:06:40 executing program 1: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ac5e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x60, 0x0, 0x1af) 05:06:40 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 05:06:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) accept(r2, &(0x7f0000000000)=@sco={0x1f, @fixed}, 0x0) open(0x0, 0x0, 0x0) 05:06:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x2, 0x8, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc98, 0x7, @perf_bp={0x0}, 0x0, 0x2, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000080)='eth0*#\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:06:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 362.308121][T11248] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 362.318630][T11248] CPU: 1 PID: 11248 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 362.327334][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.337403][T11248] Call Trace: [ 362.340718][T11248] dump_stack+0x11d/0x181 [ 362.345175][T11248] dump_header+0xaa/0x39c [ 362.349689][T11248] oom_kill_process.cold+0x10/0x15 [ 362.354851][T11248] out_of_memory+0x231/0xa60 [ 362.359469][T11248] ? __rcu_read_unlock+0x66/0x2f0 [ 362.364534][T11248] mem_cgroup_out_of_memory+0x128/0x150 [ 362.370216][T11248] try_charge+0xb6c/0xbf0 [ 362.374664][T11248] mem_cgroup_try_charge+0xd2/0x260 [ 362.379931][T11248] mem_cgroup_try_charge_delay+0x3a/0x80 [ 362.385625][T11248] wp_page_copy+0x322/0xf20 [ 362.390165][T11248] ? apic_timer_interrupt+0xa/0x20 [ 362.395379][T11248] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 362.401323][T11248] do_wp_page+0x192/0xd20 [ 362.405756][T11248] __handle_mm_fault+0x1d16/0x2e00 [ 362.410916][T11248] ? apic_timer_interrupt+0xa/0x20 [ 362.416188][T11248] handle_mm_fault+0x21b/0x530 [ 362.421011][T11248] __get_user_pages+0x485/0x1130 [ 362.426130][T11248] populate_vma_page_range+0xe6/0x100 [ 362.431530][T11248] __mm_populate+0x168/0x2a0 [ 362.436160][T11248] __x64_sys_mlockall+0x2e3/0x320 [ 362.441291][T11248] do_syscall_64+0xcc/0x3a0 [ 362.445933][T11248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 362.451947][T11248] RIP: 0033:0x45c449 [ 362.455960][T11248] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.475583][T11248] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 362.484138][T11248] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 362.492144][T11248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 362.500129][T11248] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 05:06:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x150, 0x150, 0x0, 0x150, 0x0, 0x238, 0x238, 0x238, 0x238, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth0_virt_wifi\x00', {0x0, 0x0, 0x0, 0x0, 0x80000001, 0x80005, 0xa6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) [ 362.508117][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 362.516149][T11248] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 362.524313][T11248] memory: usage 307200kB, limit 307200kB, failcnt 568 [ 362.531292][T11248] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 362.538229][T11248] Memory cgroup stats for /syz2: [ 362.539570][T11248] anon 310181888 [ 362.539570][T11248] file 0 [ 362.539570][T11248] kernel_stack 294912 [ 362.539570][T11248] slab 811008 [ 362.539570][T11248] sock 0 [ 362.539570][T11248] shmem 0 [ 362.539570][T11248] file_mapped 0 [ 362.539570][T11248] file_dirty 0 [ 362.539570][T11248] file_writeback 0 [ 362.539570][T11248] anon_thp 270532608 [ 362.539570][T11248] inactive_anon 48492544 [ 362.539570][T11248] active_anon 2334720 [ 362.539570][T11248] inactive_file 0 [ 362.539570][T11248] active_file 0 [ 362.539570][T11248] unevictable 259387392 [ 362.539570][T11248] slab_reclaimable 135168 [ 362.539570][T11248] slab_unreclaimable 675840 [ 362.539570][T11248] pgfault 45606 [ 362.539570][T11248] pgmajfault 0 [ 362.539570][T11248] workingset_refault 0 [ 362.539570][T11248] workingset_activate 0 [ 362.539570][T11248] workingset_nodereclaim 0 [ 362.539570][T11248] pgrefill 202 [ 362.539570][T11248] pgscan 201 [ 362.539570][T11248] pgsteal 0 [ 362.539570][T11248] pgactivate 165 [ 362.635762][T11248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11244,uid=0 [ 362.651603][T11248] Memory cgroup out of memory: Killed process 11244 (syz-executor.2) total-vm:74704kB, anon-rss:18252kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 362.671532][ T1078] oom_reaper: reaped process 11244 (syz-executor.2), now anon-rss:18252kB, file-rss:56424kB, shmem-rss:0kB [ 362.744579][T11286] device bridge1 entered promiscuous mode [ 362.766583][T11288] xt_hashlimit: overflow, try lower: 0/0 [ 362.793927][T11289] device bridge_slave_0 left promiscuous mode [ 362.856942][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.985421][T11289] bridge1: port 1(bridge_slave_0) entered blocking state [ 363.014277][T11289] bridge1: port 1(bridge_slave_0) entered disabled state [ 363.029892][T11289] device bridge_slave_0 entered promiscuous mode [ 363.036842][T11289] bridge1: port 1(bridge_slave_0) entered blocking state [ 363.043956][T11289] bridge1: port 1(bridge_slave_0) entered forwarding state [ 363.055957][T11286] device bridge_slave_0 left promiscuous mode [ 363.085327][T11286] bridge1: port 1(bridge_slave_0) entered disabled state 05:06:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x3f8, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, [{0x0, 0xb, "a78ce540cd4f791153d5dea6b200000000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a803721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "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"}]}}}}}}, 0x0) 05:06:42 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) 05:06:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) accept(r2, &(0x7f0000000000)=@sco={0x1f, @fixed}, 0x0) 05:06:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r6 = dup2(r0, r0) write$P9_RMKNOD(r6, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@remote, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 363.142437][T11289] device bridge2 entered promiscuous mode 05:06:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) [ 363.235147][T11302] IPv6: addrconf: prefix option has invalid lifetime 05:06:42 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) 05:06:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 05:06:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@remote, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 363.418325][T11308] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 363.428580][T11308] CPU: 0 PID: 11308 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 363.437267][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.447336][T11308] Call Trace: [ 363.450798][T11308] dump_stack+0x11d/0x181 [ 363.455310][T11308] dump_header+0xaa/0x39c [ 363.459703][T11308] oom_kill_process.cold+0x10/0x15 05:06:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, 0x4ff0f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x3, r2}]}}}]}, 0x38}}, 0x0) [ 363.464923][T11308] out_of_memory+0x231/0xa60 [ 363.469622][T11308] ? __rcu_read_unlock+0x66/0x2f0 [ 363.474680][T11308] mem_cgroup_out_of_memory+0x128/0x150 [ 363.480287][T11308] try_charge+0xb6c/0xbf0 [ 363.484693][T11308] mem_cgroup_try_charge+0xd2/0x260 [ 363.489932][T11308] mem_cgroup_try_charge_delay+0x3a/0x80 [ 363.495591][T11308] __handle_mm_fault+0x197f/0x2e00 [ 363.500754][T11308] handle_mm_fault+0x21b/0x530 [ 363.505599][T11308] __get_user_pages+0x485/0x1130 [ 363.510642][T11308] populate_vma_page_range+0xe6/0x100 [ 363.516048][T11308] __mm_populate+0x168/0x2a0 [ 363.520710][T11308] __x64_sys_mlockall+0x2e3/0x320 [ 363.525759][T11308] do_syscall_64+0xcc/0x3a0 [ 363.530545][T11308] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 363.536452][T11308] RIP: 0033:0x45c449 [ 363.540430][T11308] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.560470][T11308] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 363.568895][T11308] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 363.576874][T11308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 363.584854][T11308] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 363.592833][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 363.600818][T11308] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 363.609106][T11308] memory: usage 307200kB, limit 307200kB, failcnt 608 [ 363.615875][T11308] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 363.622742][T11308] Memory cgroup stats for /syz2: [ 363.622916][T11308] anon 310149120 [ 363.622916][T11308] file 0 [ 363.622916][T11308] kernel_stack 294912 [ 363.622916][T11308] slab 811008 [ 363.622916][T11308] sock 0 [ 363.622916][T11308] shmem 0 [ 363.622916][T11308] file_mapped 0 [ 363.622916][T11308] file_dirty 0 [ 363.622916][T11308] file_writeback 0 [ 363.622916][T11308] anon_thp 270532608 [ 363.622916][T11308] inactive_anon 59097088 [ 363.622916][T11308] active_anon 2334720 [ 363.622916][T11308] inactive_file 0 [ 363.622916][T11308] active_file 0 [ 363.622916][T11308] unevictable 248754176 [ 363.622916][T11308] slab_reclaimable 135168 [ 363.622916][T11308] slab_unreclaimable 675840 [ 363.622916][T11308] pgfault 46563 [ 363.622916][T11308] pgmajfault 0 [ 363.622916][T11308] workingset_refault 0 [ 363.622916][T11308] workingset_activate 0 [ 363.622916][T11308] workingset_nodereclaim 0 [ 363.622916][T11308] pgrefill 202 [ 363.622916][T11308] pgscan 201 [ 363.622916][T11308] pgsteal 0 [ 363.622916][T11308] pgactivate 165 [ 363.655502][T11315] device bridge3 entered promiscuous mode [ 363.724063][T11308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11190,uid=0 [ 363.724155][T11308] Memory cgroup out of memory: Killed process 11190 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 363.766904][ T1078] oom_reaper: reaped process 11190 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 05:06:43 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) dup2(0xffffffffffffffff, r1) [ 363.905979][T11328] device sit1 entered promiscuous mode 05:06:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x6, @multicast2, 0x4e23, 0x0, 'lblc\x00', 0x22, 0x3, 0x17}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') 05:06:43 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) dup2(0xffffffffffffffff, r1) [ 364.294039][T11320] bridge3: port 1(bridge_slave_0) entered blocking state [ 364.305823][T11320] bridge3: port 1(bridge_slave_0) entered disabled state [ 364.329448][T11320] device bridge_slave_0 entered promiscuous mode [ 364.341125][T11320] bridge3: port 1(bridge_slave_0) entered blocking state [ 364.348251][T11320] bridge3: port 1(bridge_slave_0) entered forwarding state 05:06:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001300)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept(r2, &(0x7f0000000000)=@sco={0x1f, @fixed}, 0x0) 05:06:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x5450, 0x1) [ 364.386257][T11315] device bridge_slave_0 left promiscuous mode [ 364.399199][T11315] bridge3: port 1(bridge_slave_0) entered disabled state 05:06:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r6 = dup2(r0, r0) write$P9_RMKNOD(r6, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:44 executing program 5: 05:06:44 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) dup2(0xffffffffffffffff, r1) 05:06:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xd7e0ce5d01a5091b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100080000000000"], &(0x7f0000004600)=""/210, 0xa, 0xd2, 0x8}, 0x20) 05:06:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 05:06:44 executing program 0: [ 364.832584][T11360] device bridge4 entered promiscuous mode [ 364.865096][T11364] bridge4: port 1(bridge_slave_0) entered blocking state 05:06:44 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, 0xffffffffffffffff) 05:06:44 executing program 5: 05:06:44 executing program 0: [ 364.884296][T11366] BPF:Unsupported section found [ 364.890995][T11364] bridge4: port 1(bridge_slave_0) entered disabled state [ 364.949740][T11364] device bridge_slave_0 entered promiscuous mode [ 364.976548][T11364] bridge4: port 1(bridge_slave_0) entered blocking state [ 364.983826][T11364] bridge4: port 1(bridge_slave_0) entered forwarding state [ 365.059518][T11376] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 365.069835][T11376] CPU: 0 PID: 11376 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 365.078512][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.088574][T11376] Call Trace: [ 365.091958][T11376] dump_stack+0x11d/0x181 [ 365.096306][T11376] dump_header+0xaa/0x39c [ 365.100897][T11376] oom_kill_process.cold+0x10/0x15 [ 365.106068][T11376] out_of_memory+0x231/0xa60 [ 365.110693][T11376] ? __rcu_read_unlock+0x66/0x2f0 [ 365.115753][T11376] mem_cgroup_out_of_memory+0x128/0x150 [ 365.121360][T11376] try_charge+0xb6c/0xbf0 [ 365.125741][T11376] mem_cgroup_try_charge+0xd2/0x260 [ 365.131016][T11376] mem_cgroup_try_charge_delay+0x3a/0x80 [ 365.136664][T11376] __handle_mm_fault+0x197f/0x2e00 [ 365.141814][T11376] handle_mm_fault+0x21b/0x530 [ 365.146619][T11376] __get_user_pages+0x485/0x1130 [ 365.151649][T11376] populate_vma_page_range+0xe6/0x100 [ 365.157037][T11376] __mm_populate+0x168/0x2a0 [ 365.161653][T11376] __x64_sys_mlockall+0x2e3/0x320 [ 365.166693][T11376] do_syscall_64+0xcc/0x3a0 [ 365.171237][T11376] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 365.177143][T11376] RIP: 0033:0x45c449 [ 365.181063][T11376] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.200676][T11376] RSP: 002b:00007f631c5a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 05:06:44 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(r0, 0x1269, 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0xa, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setpriority(0x0, 0x0, 0xffff) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 05:06:44 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, 0xffffffffffffffff) 05:06:44 executing program 5: migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) listen(0xffffffffffffffff, 0x0) [ 365.209110][T11376] RAX: ffffffffffffffda RBX: 00007f631c5a46d4 RCX: 000000000045c449 [ 365.217113][T11376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 365.225092][T11376] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 365.233072][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 365.241130][T11376] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bfcc [ 365.249495][T11376] memory: usage 307200kB, limit 307200kB, failcnt 760 [ 365.256747][T11376] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 365.263686][T11376] Memory cgroup stats for /syz2: [ 365.263838][T11376] anon 310149120 [ 365.263838][T11376] file 0 [ 365.263838][T11376] kernel_stack 331776 [ 365.263838][T11376] slab 811008 [ 365.263838][T11376] sock 0 [ 365.263838][T11376] shmem 0 [ 365.263838][T11376] file_mapped 0 [ 365.263838][T11376] file_dirty 0 [ 365.263838][T11376] file_writeback 0 [ 365.263838][T11376] anon_thp 268435456 [ 365.263838][T11376] inactive_anon 71892992 [ 365.263838][T11376] active_anon 2310144 [ 365.263838][T11376] inactive_file 0 [ 365.263838][T11376] active_file 0 [ 365.263838][T11376] unevictable 236052480 [ 365.263838][T11376] slab_reclaimable 135168 [ 365.263838][T11376] slab_unreclaimable 675840 [ 365.263838][T11376] pgfault 48741 [ 365.263838][T11376] pgmajfault 0 [ 365.263838][T11376] workingset_refault 0 [ 365.263838][T11376] workingset_activate 0 [ 365.263838][T11376] workingset_nodereclaim 0 [ 365.263838][T11376] pgrefill 202 [ 365.263838][T11376] pgscan 201 [ 365.263838][T11376] pgsteal 0 [ 365.263838][T11376] pgactivate 165 [ 365.359873][T11376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11327,uid=0 [ 365.375403][T11376] Memory cgroup out of memory: Killed process 11327 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 365.405099][ T1078] oom_reaper: reaped process 11327 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 365.493105][T11360] device bridge_slave_0 left promiscuous mode [ 365.499371][T11360] bridge4: port 1(bridge_slave_0) entered disabled state 05:06:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r6 = dup2(r0, r0) write$P9_RMKNOD(r6, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xd7e0ce5d01a5091b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100080000000000"], &(0x7f0000004600)=""/210, 0xa, 0xd2, 0x8}, 0x20) 05:06:45 executing program 4: 05:06:45 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, 0xffffffffffffffff) 05:06:45 executing program 5: 05:06:45 executing program 0: 05:06:45 executing program 4: [ 366.002369][T11409] BPF:Unsupported section found 05:06:45 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r2, r1) 05:06:45 executing program 5: [ 366.119284][T11411] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 366.129596][T11411] CPU: 0 PID: 11411 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 366.138274][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.148334][T11411] Call Trace: [ 366.151642][T11411] dump_stack+0x11d/0x181 [ 366.156030][T11411] dump_header+0xaa/0x39c [ 366.160407][T11411] oom_kill_process.cold+0x10/0x15 [ 366.165536][T11411] out_of_memory+0x231/0xa60 [ 366.170140][T11411] ? __rcu_read_unlock+0x66/0x2f0 [ 366.175232][T11411] mem_cgroup_out_of_memory+0x128/0x150 [ 366.180794][T11411] try_charge+0xb6c/0xbf0 [ 366.185184][T11411] mem_cgroup_try_charge+0xd2/0x260 [ 366.190406][T11411] mem_cgroup_try_charge_delay+0x3a/0x80 [ 366.196068][T11411] __handle_mm_fault+0x197f/0x2e00 [ 366.201215][T11411] handle_mm_fault+0x21b/0x530 [ 366.205997][T11411] __get_user_pages+0x485/0x1130 [ 366.211030][T11411] populate_vma_page_range+0xe6/0x100 [ 366.216461][T11411] __mm_populate+0x168/0x2a0 [ 366.221134][T11411] __x64_sys_mlockall+0x2e3/0x320 [ 366.226241][T11411] do_syscall_64+0xcc/0x3a0 [ 366.230766][T11411] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 366.236660][T11411] RIP: 0033:0x45c449 [ 366.240620][T11411] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.260261][T11411] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 366.268691][T11411] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 366.276676][T11411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 366.284654][T11411] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 366.292630][T11411] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 366.300709][T11411] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 366.308866][T11411] memory: usage 307200kB, limit 307200kB, failcnt 803 [ 366.315748][T11411] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.322674][T11411] Memory cgroup stats for /syz2: [ 366.322888][T11411] anon 310116352 [ 366.322888][T11411] file 0 [ 366.322888][T11411] kernel_stack 258048 [ 366.322888][T11411] slab 946176 [ 366.322888][T11411] sock 0 [ 366.322888][T11411] shmem 0 [ 366.322888][T11411] file_mapped 0 [ 366.322888][T11411] file_dirty 0 [ 366.322888][T11411] file_writeback 0 [ 366.322888][T11411] anon_thp 268435456 [ 366.322888][T11411] inactive_anon 74166272 [ 366.322888][T11411] active_anon 2301952 05:06:45 executing program 0: 05:06:45 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="c06f6688211c327cdb883c4699269876", 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xd7e0ce5d01a5091b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100080000000000"], &(0x7f0000004600)=""/210, 0xa, 0xd2, 0x8}, 0x20) [ 366.322888][T11411] inactive_file 0 [ 366.322888][T11411] active_file 0 [ 366.322888][T11411] unevictable 233820160 [ 366.322888][T11411] slab_reclaimable 135168 [ 366.322888][T11411] slab_unreclaimable 811008 [ 366.322888][T11411] pgfault 50259 [ 366.322888][T11411] pgmajfault 0 [ 366.322888][T11411] workingset_refault 0 [ 366.322888][T11411] workingset_activate 0 [ 366.322888][T11411] workingset_nodereclaim 0 [ 366.322888][T11411] pgrefill 202 [ 366.322888][T11411] pgscan 201 [ 366.322888][T11411] pgsteal 0 [ 366.322888][T11411] pgactivate 165 [ 366.418892][T11411] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11388,uid=0 [ 366.434416][T11411] Memory cgroup out of memory: Killed process 11388 (syz-executor.2) total-vm:74968kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 366.454799][T11411] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 366.465023][T11411] CPU: 0 PID: 11411 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 366.473784][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.483849][T11411] Call Trace: [ 366.487162][T11411] dump_stack+0x11d/0x181 [ 366.491519][T11411] dump_header+0xaa/0x39c [ 366.495927][T11411] oom_kill_process.cold+0x10/0x15 [ 366.501061][T11411] out_of_memory+0x231/0xa60 [ 366.505669][T11411] ? __rcu_read_unlock+0x66/0x2f0 [ 366.510723][T11411] mem_cgroup_out_of_memory+0x128/0x150 [ 366.515252][ T1078] oom_reaper: reaped process 11388 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 366.516286][T11411] try_charge+0xb6c/0xbf0 [ 366.531697][T11411] mem_cgroup_try_charge+0xd2/0x260 [ 366.536951][T11411] mem_cgroup_try_charge_delay+0x3a/0x80 [ 366.542607][T11411] __handle_mm_fault+0x197f/0x2e00 [ 366.547916][T11411] handle_mm_fault+0x21b/0x530 [ 366.552792][T11411] __get_user_pages+0x485/0x1130 [ 366.557769][T11411] populate_vma_page_range+0xe6/0x100 [ 366.563209][T11411] __mm_populate+0x168/0x2a0 [ 366.567825][T11411] __x64_sys_mlockall+0x2e3/0x320 [ 366.572889][T11411] do_syscall_64+0xcc/0x3a0 [ 366.577413][T11411] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 366.583308][T11411] RIP: 0033:0x45c449 [ 366.587211][T11411] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.606819][T11411] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 366.615251][T11411] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 366.623231][T11411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 366.631209][T11411] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 366.639180][T11411] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 366.643703][T11425] BPF:Unsupported section found [ 366.647152][T11411] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 366.647243][T11411] memory: usage 288660kB, limit 307200kB, failcnt 809 [ 366.667081][T11411] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.673973][T11411] Memory cgroup stats for /syz2: [ 366.674125][T11411] anon 291201024 [ 366.674125][T11411] file 0 [ 366.674125][T11411] kernel_stack 258048 [ 366.674125][T11411] slab 946176 [ 366.674125][T11411] sock 0 [ 366.674125][T11411] shmem 0 [ 366.674125][T11411] file_mapped 0 [ 366.674125][T11411] file_dirty 0 [ 366.674125][T11411] file_writeback 0 [ 366.674125][T11411] anon_thp 253755392 [ 366.674125][T11411] inactive_anon 57311232 [ 366.674125][T11411] active_anon 2301952 [ 366.674125][T11411] inactive_file 0 [ 366.674125][T11411] active_file 0 [ 366.674125][T11411] unevictable 231723008 [ 366.674125][T11411] slab_reclaimable 135168 [ 366.674125][T11411] slab_unreclaimable 811008 [ 366.674125][T11411] pgfault 50259 [ 366.674125][T11411] pgmajfault 0 [ 366.674125][T11411] workingset_refault 0 [ 366.674125][T11411] workingset_activate 0 [ 366.674125][T11411] workingset_nodereclaim 0 [ 366.674125][T11411] pgrefill 202 [ 366.674125][T11411] pgscan 201 [ 366.674125][T11411] pgsteal 0 [ 366.674125][T11411] pgactivate 165 [ 366.770109][T11411] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11157,uid=0 [ 366.785608][T11411] Memory cgroup out of memory: Killed process 11157 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 366.806930][ T1078] oom_reaper: reaped process 11157 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 05:06:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:46 executing program 4: 05:06:46 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="02006800000ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 05:06:46 executing program 5: 05:06:46 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xd7e0ce5d01a5091b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100080000000000"], &(0x7f0000004600)=""/210, 0xa, 0xd2, 0x8}, 0x20) [ 367.485984][T11439] BPF:Unsupported section found 05:06:47 executing program 1: 05:06:47 executing program 4: 05:06:47 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:47 executing program 5: [ 367.712629][T11445] loop0: p1 < > p4 [ 367.725126][T11445] loop0: partition table partially beyond EOD, truncated [ 367.795511][T11445] loop0: p1 size 2 extends beyond EOD, truncated [ 367.829497][T11445] loop0: p4 start 1854537728 is beyond EOD, truncated 05:06:47 executing program 4: 05:06:47 executing program 1: [ 368.202264][T11462] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 368.227861][T11445] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 368.282825][ T2518] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.293776][ T2518] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 368.302116][ T2518] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.313566][ T2518] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 368.321853][ T2518] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.332877][ T2518] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 368.341345][ T2518] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.352333][ T2518] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 368.372358][ T2519] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.383295][ T2519] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 368.413925][ T2518] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.425630][ T2518] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 368.434213][ T2518] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.445152][ T2518] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 368.453764][ T2518] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.464844][ T2518] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 368.473307][ T2518] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 368.484311][ T2518] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 368.492553][ T2519] Buffer I/O error on dev loop0p1, logical block 0, async page read 05:06:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:48 executing program 5: 05:06:48 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) getpid() r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:48 executing program 4: 05:06:48 executing program 1: 05:06:48 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="02006800000ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 05:06:48 executing program 1: 05:06:48 executing program 4: [ 368.833747][T11484] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 368.843999][T11484] CPU: 0 PID: 11484 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 368.852753][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.862810][T11484] Call Trace: [ 368.866148][T11484] dump_stack+0x11d/0x181 [ 368.870523][T11484] dump_header+0xaa/0x39c [ 368.874872][T11484] oom_kill_process.cold+0x10/0x15 [ 368.879998][T11484] out_of_memory+0x231/0xa60 [ 368.884601][T11484] ? __rcu_read_unlock+0x66/0x2f0 [ 368.889642][T11484] mem_cgroup_out_of_memory+0x128/0x150 [ 368.895216][T11484] try_charge+0xb6c/0xbf0 [ 368.899675][T11484] mem_cgroup_try_charge+0xd2/0x260 [ 368.904905][T11484] mem_cgroup_try_charge_delay+0x3a/0x80 [ 368.910639][T11484] __handle_mm_fault+0x197f/0x2e00 [ 368.915852][T11484] handle_mm_fault+0x21b/0x530 [ 368.920705][T11484] __get_user_pages+0x485/0x1130 [ 368.925753][T11484] populate_vma_page_range+0xe6/0x100 [ 368.929433][T11482] loop0: p1 < > p4 [ 368.931147][T11484] __mm_populate+0x168/0x2a0 [ 368.931174][T11484] __x64_sys_mlockall+0x2e3/0x320 [ 368.944236][T11482] loop0: partition table partially beyond EOD, truncated [ 368.945289][T11484] do_syscall_64+0xcc/0x3a0 [ 368.945322][T11484] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 368.962728][T11484] RIP: 0033:0x45c449 [ 368.966644][T11484] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.986271][T11484] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 368.994750][T11484] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 369.002724][T11484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 369.010700][T11484] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 369.018676][T11484] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 369.026672][T11484] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 369.034904][T11484] memory: usage 307200kB, limit 307200kB, failcnt 834 [ 369.041984][T11484] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 369.048843][T11484] Memory cgroup stats for /syz2: [ 369.049099][T11484] anon 310181888 [ 369.049099][T11484] file 0 [ 369.049099][T11484] kernel_stack 331776 [ 369.049099][T11484] slab 946176 [ 369.049099][T11484] sock 0 [ 369.049099][T11484] shmem 0 [ 369.049099][T11484] file_mapped 0 [ 369.049099][T11484] file_dirty 0 [ 369.049099][T11484] file_writeback 0 05:06:48 executing program 5: 05:06:48 executing program 1: 05:06:48 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) [ 369.049099][T11484] anon_thp 268435456 [ 369.049099][T11484] inactive_anon 74002432 [ 369.049099][T11484] active_anon 2334720 [ 369.049099][T11484] inactive_file 0 [ 369.049099][T11484] active_file 0 [ 369.049099][T11484] unevictable 233988096 [ 369.049099][T11484] slab_reclaimable 135168 [ 369.049099][T11484] slab_unreclaimable 811008 [ 369.049099][T11484] pgfault 54318 [ 369.049099][T11484] pgmajfault 0 [ 369.049099][T11484] workingset_refault 0 [ 369.049099][T11484] workingset_activate 0 [ 369.049099][T11484] workingset_nodereclaim 0 [ 369.049099][T11484] pgrefill 202 [ 369.049099][T11484] pgscan 201 [ 369.049099][T11484] pgsteal 0 [ 369.049099][T11484] pgactivate 165 [ 369.145934][T11484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11459,uid=0 [ 369.152493][T11482] loop0: p1 size 2 extends beyond EOD, truncated [ 369.161582][T11484] Memory cgroup out of memory: Killed process 11459 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 369.191859][ T1078] oom_reaper: reaped process 11459 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 05:06:48 executing program 5: [ 369.285335][T11482] loop0: p4 start 1854537728 is beyond EOD, truncated [ 369.830340][T11484] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 369.840750][T11484] CPU: 0 PID: 11484 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 369.849849][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.859905][T11484] Call Trace: [ 369.863235][T11484] dump_stack+0x11d/0x181 [ 369.867577][T11484] dump_header+0xaa/0x39c [ 369.871953][T11484] oom_kill_process.cold+0x10/0x15 [ 369.877107][T11484] out_of_memory+0x231/0xa60 [ 369.881779][T11484] ? __rcu_read_unlock+0x66/0x2f0 [ 369.886825][T11484] mem_cgroup_out_of_memory+0x128/0x150 [ 369.892407][T11484] try_charge+0xb6c/0xbf0 [ 369.896984][T11484] mem_cgroup_try_charge+0xd2/0x260 [ 369.902252][T11484] mem_cgroup_try_charge_delay+0x3a/0x80 [ 369.907996][T11484] wp_page_copy+0x322/0xf20 [ 369.914353][T11484] ? __read_once_size+0x41/0xe0 [ 369.919313][T11484] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 369.925877][T11484] do_wp_page+0x192/0xd20 [ 369.930238][T11484] __handle_mm_fault+0x1d16/0x2e00 [ 369.935409][T11484] ? apic_timer_interrupt+0xa/0x20 [ 369.940617][T11484] handle_mm_fault+0x21b/0x530 [ 369.946095][T11484] __get_user_pages+0x485/0x1130 [ 369.951106][T11484] populate_vma_page_range+0xe6/0x100 [ 369.956514][T11484] __mm_populate+0x168/0x2a0 [ 369.961165][T11484] __x64_sys_mlockall+0x2e3/0x320 [ 369.966216][T11484] do_syscall_64+0xcc/0x3a0 [ 369.970755][T11484] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 369.976645][T11484] RIP: 0033:0x45c449 [ 369.980542][T11484] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.000247][T11484] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 370.008676][T11484] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 370.016649][T11484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 370.024610][T11484] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.032642][T11484] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 370.040603][T11484] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 370.048770][T11484] memory: usage 307200kB, limit 307200kB, failcnt 857 [ 370.055725][T11484] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 370.062785][T11484] Memory cgroup stats for /syz2: [ 370.063415][T11484] anon 309993472 [ 370.063415][T11484] file 0 [ 370.063415][T11484] kernel_stack 331776 [ 370.063415][T11484] slab 946176 [ 370.063415][T11484] sock 0 [ 370.063415][T11484] shmem 0 [ 370.063415][T11484] file_mapped 0 [ 370.063415][T11484] file_dirty 0 [ 370.063415][T11484] file_writeback 0 [ 370.063415][T11484] anon_thp 266338304 [ 370.063415][T11484] inactive_anon 62627840 [ 370.063415][T11484] active_anon 2334720 [ 370.063415][T11484] inactive_file 0 [ 370.063415][T11484] active_file 0 [ 370.063415][T11484] unevictable 245317632 [ 370.063415][T11484] slab_reclaimable 135168 [ 370.063415][T11484] slab_unreclaimable 811008 [ 370.063415][T11484] pgfault 55638 [ 370.063415][T11484] pgmajfault 0 [ 370.063415][T11484] workingset_refault 0 [ 370.063415][T11484] workingset_activate 0 [ 370.063415][T11484] workingset_nodereclaim 0 [ 370.063415][T11484] pgrefill 202 [ 370.063415][T11484] pgscan 201 [ 370.063415][T11484] pgsteal 0 [ 370.063415][T11484] pgactivate 165 [ 370.159908][T11484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11481,uid=0 [ 370.175711][T11484] Memory cgroup out of memory: Killed process 11481 (syz-executor.2) total-vm:74836kB, anon-rss:18284kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 370.195983][ T1078] oom_reaper: reaped process 11481 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:06:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:49 executing program 4: 05:06:49 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:49 executing program 1: 05:06:49 executing program 0: 05:06:49 executing program 5: 05:06:49 executing program 0: 05:06:49 executing program 5: 05:06:49 executing program 1: 05:06:49 executing program 4: [ 370.573320][T11518] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 370.583618][T11518] CPU: 1 PID: 11518 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 370.593513][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.606790][T11518] Call Trace: [ 370.610250][T11518] dump_stack+0x11d/0x181 [ 370.614729][T11518] dump_header+0xaa/0x39c [ 370.619082][T11518] oom_kill_process.cold+0x10/0x15 [ 370.624233][T11518] out_of_memory+0x231/0xa60 [ 370.628867][T11518] ? __rcu_read_unlock+0x66/0x2f0 [ 370.633980][T11518] mem_cgroup_out_of_memory+0x128/0x150 [ 370.639549][T11518] try_charge+0xb6c/0xbf0 [ 370.643937][T11518] mem_cgroup_try_charge+0xd2/0x260 [ 370.649220][T11518] mem_cgroup_try_charge_delay+0x3a/0x80 [ 370.655299][T11518] __handle_mm_fault+0x197f/0x2e00 [ 370.660453][T11518] handle_mm_fault+0x21b/0x530 [ 370.665298][T11518] __get_user_pages+0x485/0x1130 [ 370.670275][T11518] populate_vma_page_range+0xe6/0x100 [ 370.675691][T11518] __mm_populate+0x168/0x2a0 [ 370.680300][T11518] __x64_sys_mlockall+0x2e3/0x320 [ 370.688130][T11518] do_syscall_64+0xcc/0x3a0 [ 370.692651][T11518] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 370.698550][T11518] RIP: 0033:0x45c449 [ 370.702460][T11518] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:06:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:50 executing program 0: [ 370.722136][T11518] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 370.731140][T11518] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 370.739189][T11518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 370.747166][T11518] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.755158][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 370.763201][T11518] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 370.772161][T11518] memory: usage 307200kB, limit 307200kB, failcnt 892 [ 370.778983][T11518] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 370.785846][T11518] Memory cgroup stats for /syz2: [ 370.786045][T11518] anon 310177792 [ 370.786045][T11518] file 0 [ 370.786045][T11518] kernel_stack 331776 [ 370.786045][T11518] slab 946176 [ 370.786045][T11518] sock 0 [ 370.786045][T11518] shmem 0 [ 370.786045][T11518] file_mapped 0 [ 370.786045][T11518] file_dirty 0 [ 370.786045][T11518] file_writeback 0 [ 370.786045][T11518] anon_thp 266338304 [ 370.786045][T11518] inactive_anon 74022912 [ 370.786045][T11518] active_anon 2338816 [ 370.786045][T11518] inactive_file 0 [ 370.786045][T11518] active_file 0 [ 370.786045][T11518] unevictable 234086400 [ 370.786045][T11518] slab_reclaimable 135168 [ 370.786045][T11518] slab_unreclaimable 811008 [ 370.786045][T11518] pgfault 56562 [ 370.786045][T11518] pgmajfault 0 [ 370.786045][T11518] workingset_refault 0 [ 370.786045][T11518] workingset_activate 0 [ 370.786045][T11518] workingset_nodereclaim 0 [ 370.786045][T11518] pgrefill 202 [ 370.786045][T11518] pgscan 201 [ 370.786045][T11518] pgsteal 0 [ 370.786045][T11518] pgactivate 165 [ 370.883216][T11518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11504,uid=0 [ 370.898910][T11518] Memory cgroup out of memory: Killed process 11504 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 370.955801][ T1078] oom_reaper: reaped process 11504 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:06:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:50 executing program 1: 05:06:50 executing program 0: 05:06:50 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:50 executing program 5: 05:06:50 executing program 4: 05:06:50 executing program 5: 05:06:51 executing program 4: 05:06:51 executing program 0: 05:06:51 executing program 1: [ 371.711055][T11545] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 371.721973][T11545] CPU: 1 PID: 11545 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 371.730741][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.740979][T11545] Call Trace: [ 371.744284][T11545] dump_stack+0x11d/0x181 [ 371.748630][T11545] dump_header+0xaa/0x39c [ 371.753019][T11545] oom_kill_process.cold+0x10/0x15 [ 371.758232][T11545] out_of_memory+0x231/0xa60 [ 371.762966][T11545] ? __rcu_read_unlock+0x66/0x2f0 [ 371.768094][T11545] mem_cgroup_out_of_memory+0x128/0x150 [ 371.773673][T11545] try_charge+0xb6c/0xbf0 [ 371.778079][T11545] mem_cgroup_try_charge+0xd2/0x260 [ 371.783344][T11545] mem_cgroup_try_charge_delay+0x3a/0x80 [ 371.788984][T11545] __handle_mm_fault+0x197f/0x2e00 [ 371.794739][T11545] handle_mm_fault+0x21b/0x530 [ 371.799515][T11545] __get_user_pages+0x485/0x1130 [ 371.804488][T11545] populate_vma_page_range+0xe6/0x100 [ 371.810005][T11545] __mm_populate+0x168/0x2a0 [ 371.814616][T11545] __x64_sys_mlockall+0x2e3/0x320 [ 371.819664][T11545] do_syscall_64+0xcc/0x3a0 [ 371.825324][T11545] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 371.832016][T11545] RIP: 0033:0x45c449 [ 371.835923][T11545] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.856172][T11545] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 371.864689][T11545] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 371.872680][T11545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 371.880677][T11545] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 371.888698][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 371.896680][T11545] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 371.904835][T11545] memory: usage 307200kB, limit 307200kB, failcnt 995 05:06:51 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) [ 371.911718][T11545] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 371.918586][T11545] Memory cgroup stats for /syz2: [ 371.918806][T11545] anon 310181888 [ 371.918806][T11545] file 0 [ 371.918806][T11545] kernel_stack 294912 [ 371.918806][T11545] slab 946176 [ 371.918806][T11545] sock 0 [ 371.918806][T11545] shmem 0 [ 371.918806][T11545] file_mapped 0 [ 371.918806][T11545] file_dirty 0 [ 371.918806][T11545] file_writeback 0 [ 371.918806][T11545] anon_thp 264241152 [ 371.918806][T11545] inactive_anon 73924608 [ 371.918806][T11545] active_anon 2338816 [ 371.918806][T11545] inactive_file 0 [ 371.918806][T11545] active_file 0 [ 371.918806][T11545] unevictable 234086400 [ 371.918806][T11545] slab_reclaimable 135168 [ 371.918806][T11545] slab_unreclaimable 811008 [ 371.918806][T11545] pgfault 58938 [ 371.918806][T11545] pgmajfault 0 [ 371.918806][T11545] workingset_refault 0 [ 371.918806][T11545] workingset_activate 0 [ 371.918806][T11545] workingset_nodereclaim 0 [ 371.918806][T11545] pgrefill 235 [ 371.918806][T11545] pgscan 234 05:06:51 executing program 4: [ 371.918806][T11545] pgsteal 0 [ 371.918806][T11545] pgactivate 198 [ 372.016275][T11545] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11536,uid=0 [ 372.031779][T11545] Memory cgroup out of memory: Killed process 11536 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 372.062135][ T1078] oom_reaper: reaped process 11536 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 372.588602][T11557] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 372.599059][T11557] CPU: 0 PID: 11557 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 372.607772][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.618002][T11557] Call Trace: [ 372.623460][T11557] dump_stack+0x11d/0x181 [ 372.627794][T11557] dump_header+0xaa/0x39c [ 372.632129][T11557] oom_kill_process.cold+0x10/0x15 [ 372.637272][T11557] out_of_memory+0x231/0xa60 [ 372.641895][T11557] ? __rcu_read_unlock+0x66/0x2f0 [ 372.646928][T11557] mem_cgroup_out_of_memory+0x128/0x150 [ 372.652514][T11557] try_charge+0xb6c/0xbf0 [ 372.657002][T11557] mem_cgroup_try_charge+0xd2/0x260 [ 372.662250][T11557] mem_cgroup_try_charge_delay+0x3a/0x80 [ 372.667874][T11557] wp_page_copy+0x322/0xf20 [ 372.672370][T11557] ? __read_once_size+0x41/0xe0 [ 372.677251][T11557] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 372.683189][T11557] do_wp_page+0x192/0xd20 [ 372.687507][T11557] __handle_mm_fault+0x1d16/0x2e00 [ 372.692616][T11557] ? apic_timer_interrupt+0xa/0x20 [ 372.698312][T11557] handle_mm_fault+0x21b/0x530 [ 372.703250][T11557] __get_user_pages+0x485/0x1130 [ 372.708184][T11557] populate_vma_page_range+0xe6/0x100 [ 372.713564][T11557] __mm_populate+0x168/0x2a0 [ 372.718192][T11557] __x64_sys_mlockall+0x2e3/0x320 [ 372.723243][T11557] do_syscall_64+0xcc/0x3a0 [ 372.727760][T11557] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 372.733636][T11557] RIP: 0033:0x45c449 [ 372.737522][T11557] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.757172][T11557] RSP: 002b:00007f631c5a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 372.765587][T11557] RAX: ffffffffffffffda RBX: 00007f631c5a46d4 RCX: 000000000045c449 [ 372.773544][T11557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 372.781513][T11557] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 372.789484][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 372.797517][T11557] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bfcc [ 372.806782][T11557] memory: usage 307200kB, limit 307200kB, failcnt 1035 [ 372.813766][T11557] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 372.820772][T11557] Memory cgroup stats for /syz2: [ 372.821512][T11557] anon 309993472 [ 372.821512][T11557] file 0 [ 372.821512][T11557] kernel_stack 294912 [ 372.821512][T11557] slab 946176 [ 372.821512][T11557] sock 0 [ 372.821512][T11557] shmem 0 [ 372.821512][T11557] file_mapped 0 [ 372.821512][T11557] file_dirty 0 [ 372.821512][T11557] file_writeback 0 [ 372.821512][T11557] anon_thp 264241152 [ 372.821512][T11557] inactive_anon 62402560 [ 372.821512][T11557] active_anon 2338816 [ 372.821512][T11557] inactive_file 0 [ 372.821512][T11557] active_file 0 [ 372.821512][T11557] unevictable 245317632 [ 372.821512][T11557] slab_reclaimable 135168 [ 372.821512][T11557] slab_unreclaimable 811008 [ 372.821512][T11557] pgfault 60720 [ 372.821512][T11557] pgmajfault 0 [ 372.821512][T11557] workingset_refault 0 [ 372.821512][T11557] workingset_activate 0 [ 372.821512][T11557] workingset_nodereclaim 0 [ 372.821512][T11557] pgrefill 235 [ 372.821512][T11557] pgscan 234 [ 372.821512][T11557] pgsteal 0 [ 372.821512][T11557] pgactivate 198 [ 372.920593][T11557] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11543,uid=0 [ 372.936789][T11557] Memory cgroup out of memory: Killed process 11543 (syz-executor.2) total-vm:74836kB, anon-rss:18244kB, file-rss:56424kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 372.955951][ T1078] oom_reaper: reaped process 11543 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:06:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:52 executing program 0: 05:06:52 executing program 5: 05:06:52 executing program 4: 05:06:52 executing program 1: 05:06:52 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x77, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:52 executing program 4: 05:06:52 executing program 1: 05:06:52 executing program 0: [ 373.607747][T11575] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 373.618001][T11575] CPU: 0 PID: 11575 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 373.626672][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.636764][T11575] Call Trace: [ 373.640141][T11575] dump_stack+0x11d/0x181 [ 373.644578][T11575] dump_header+0xaa/0x39c [ 373.649018][T11575] oom_kill_process.cold+0x10/0x15 [ 373.654185][T11575] out_of_memory+0x231/0xa60 [ 373.658801][T11575] ? __rcu_read_unlock+0x66/0x2f0 [ 373.663852][T11575] mem_cgroup_out_of_memory+0x128/0x150 [ 373.669541][T11575] try_charge+0xb6c/0xbf0 [ 373.673951][T11575] mem_cgroup_try_charge+0xd2/0x260 [ 373.679176][T11575] mem_cgroup_try_charge_delay+0x3a/0x80 [ 373.684818][T11575] __handle_mm_fault+0x197f/0x2e00 [ 373.690132][T11575] ? __udelay+0x10/0x20 [ 373.694376][T11575] handle_mm_fault+0x21b/0x530 [ 373.699185][T11575] __get_user_pages+0x485/0x1130 [ 373.704160][T11575] populate_vma_page_range+0xe6/0x100 [ 373.709564][T11575] __mm_populate+0x168/0x2a0 [ 373.714503][T11575] __x64_sys_mlockall+0x2e3/0x320 [ 373.719560][T11575] do_syscall_64+0xcc/0x3a0 [ 373.724214][T11575] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 373.730120][T11575] RIP: 0033:0x45c449 [ 373.734094][T11575] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.753710][T11575] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 373.762230][T11575] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 373.770290][T11575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 373.778273][T11575] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 373.786278][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 373.794318][T11575] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 373.802857][T11575] memory: usage 307200kB, limit 307200kB, failcnt 1065 [ 373.809778][T11575] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 373.816886][T11575] Memory cgroup stats for /syz2: [ 373.817043][T11575] anon 310120448 [ 373.817043][T11575] file 0 [ 373.817043][T11575] kernel_stack 294912 [ 373.817043][T11575] slab 946176 [ 373.817043][T11575] sock 0 [ 373.817043][T11575] shmem 0 [ 373.817043][T11575] file_mapped 0 [ 373.817043][T11575] file_dirty 0 [ 373.817043][T11575] file_writeback 0 [ 373.817043][T11575] anon_thp 264241152 [ 373.817043][T11575] inactive_anon 73936896 [ 373.817043][T11575] active_anon 2334720 [ 373.817043][T11575] inactive_file 0 [ 373.817043][T11575] active_file 0 [ 373.817043][T11575] unevictable 233955328 [ 373.817043][T11575] slab_reclaimable 135168 [ 373.817043][T11575] slab_unreclaimable 811008 [ 373.817043][T11575] pgfault 61644 [ 373.817043][T11575] pgmajfault 0 [ 373.817043][T11575] workingset_refault 0 [ 373.817043][T11575] workingset_activate 0 [ 373.817043][T11575] workingset_nodereclaim 0 [ 373.817043][T11575] pgrefill 235 [ 373.817043][T11575] pgscan 234 05:06:53 executing program 5: [ 373.817043][T11575] pgsteal 0 [ 373.817043][T11575] pgactivate 198 [ 373.913527][T11575] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11559,uid=0 [ 373.929084][T11575] Memory cgroup out of memory: Killed process 11559 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 373.950037][T11575] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 373.960349][T11575] CPU: 0 PID: 11575 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 373.969044][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.979102][T11575] Call Trace: [ 373.982446][T11575] dump_stack+0x11d/0x181 [ 373.986802][T11575] dump_header+0xaa/0x39c [ 373.987781][ T1078] oom_reaper: reaped process 11559 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 373.991139][T11575] oom_kill_process.cold+0x10/0x15 05:06:53 executing program 4: [ 373.991182][T11575] out_of_memory+0x231/0xa60 [ 373.991281][T11575] ? __rcu_read_unlock+0x66/0x2f0 [ 373.991337][T11575] mem_cgroup_out_of_memory+0x128/0x150 [ 374.022591][T11575] try_charge+0xb6c/0xbf0 [ 374.027000][T11575] mem_cgroup_try_charge+0xd2/0x260 [ 374.032229][T11575] mem_cgroup_try_charge_delay+0x3a/0x80 [ 374.037899][T11575] __handle_mm_fault+0x197f/0x2e00 [ 374.043033][T11575] ? __udelay+0x10/0x20 [ 374.047219][T11575] handle_mm_fault+0x21b/0x530 [ 374.052016][T11575] __get_user_pages+0x485/0x1130 [ 374.057052][T11575] populate_vma_page_range+0xe6/0x100 [ 374.062447][T11575] __mm_populate+0x168/0x2a0 [ 374.067065][T11575] __x64_sys_mlockall+0x2e3/0x320 [ 374.072166][T11575] do_syscall_64+0xcc/0x3a0 [ 374.076689][T11575] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 374.082635][T11575] RIP: 0033:0x45c449 [ 374.086547][T11575] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 374.106171][T11575] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 374.114687][T11575] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 374.122735][T11575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 374.130721][T11575] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 374.138720][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 374.146695][T11575] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 374.154826][T11575] memory: usage 288792kB, limit 307200kB, failcnt 1071 [ 374.161792][T11575] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 374.168639][T11575] Memory cgroup stats for /syz2: [ 374.168907][T11575] anon 291438592 [ 374.168907][T11575] file 0 [ 374.168907][T11575] kernel_stack 294912 [ 374.168907][T11575] slab 946176 [ 374.168907][T11575] sock 0 [ 374.168907][T11575] shmem 0 [ 374.168907][T11575] file_mapped 0 [ 374.168907][T11575] file_dirty 0 [ 374.168907][T11575] file_writeback 0 [ 374.168907][T11575] anon_thp 251658240 [ 374.168907][T11575] inactive_anon 59510784 [ 374.168907][T11575] active_anon 2334720 [ 374.168907][T11575] inactive_file 0 [ 374.168907][T11575] active_file 135168 [ 374.168907][T11575] unevictable 229761024 [ 374.168907][T11575] slab_reclaimable 135168 [ 374.168907][T11575] slab_unreclaimable 811008 [ 374.168907][T11575] pgfault 61644 [ 374.168907][T11575] pgmajfault 0 [ 374.168907][T11575] workingset_refault 0 [ 374.168907][T11575] workingset_activate 0 [ 374.168907][T11575] workingset_nodereclaim 0 [ 374.168907][T11575] pgrefill 268 [ 374.168907][T11575] pgscan 267 [ 374.168907][T11575] pgsteal 0 [ 374.262574][T11575] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11432,uid=0 [ 374.278178][T11575] Memory cgroup out of memory: Killed process 11432 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 374.305175][ T1078] oom_reaper: reaped process 11432 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 05:06:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:54 executing program 0: 05:06:54 executing program 1: 05:06:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:54 executing program 4: 05:06:54 executing program 5: 05:06:54 executing program 5: 05:06:54 executing program 4: 05:06:54 executing program 1: 05:06:54 executing program 0: 05:06:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 05:06:54 executing program 5: [ 376.036197][T11620] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 376.046685][T11620] CPU: 0 PID: 11620 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 376.055365][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.065417][T11620] Call Trace: [ 376.068700][T11620] dump_stack+0x11d/0x181 [ 376.073120][T11620] dump_header+0xaa/0x39c [ 376.077621][T11620] oom_kill_process.cold+0x10/0x15 [ 376.082725][T11620] out_of_memory+0x231/0xa60 [ 376.087309][T11620] ? __rcu_read_unlock+0x66/0x2f0 [ 376.092331][T11620] mem_cgroup_out_of_memory+0x128/0x150 [ 376.097953][T11620] try_charge+0xb6c/0xbf0 [ 376.102293][T11620] mem_cgroup_try_charge+0xd2/0x260 [ 376.107535][T11620] mem_cgroup_try_charge_delay+0x3a/0x80 [ 376.113239][T11620] wp_page_copy+0x322/0xf20 [ 376.117740][T11620] ? __read_once_size+0x41/0xe0 [ 376.122631][T11620] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 376.128573][T11620] do_wp_page+0x192/0xd20 [ 376.132950][T11620] ? pagevec_lru_move_fn+0x16b/0x180 [ 376.138261][T11620] __handle_mm_fault+0x1d16/0x2e00 [ 376.143408][T11620] ? apic_timer_interrupt+0xa/0x20 [ 376.148518][T11620] handle_mm_fault+0x21b/0x530 [ 376.153428][T11620] __get_user_pages+0x485/0x1130 [ 376.158384][T11620] populate_vma_page_range+0xe6/0x100 [ 376.163762][T11620] __mm_populate+0x168/0x2a0 [ 376.168393][T11620] __x64_sys_mlockall+0x2e3/0x320 [ 376.173428][T11620] do_syscall_64+0xcc/0x3a0 [ 376.178058][T11620] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 376.183940][T11620] RIP: 0033:0x45c449 [ 376.187827][T11620] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.207447][T11620] RSP: 002b:00007f631c5a3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 376.215937][T11620] RAX: ffffffffffffffda RBX: 00007f631c5a46d4 RCX: 000000000045c449 [ 376.224638][T11620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 376.232597][T11620] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 376.240856][T11620] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 376.248825][T11620] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bfcc [ 376.258341][T11620] memory: usage 307200kB, limit 307200kB, failcnt 1091 [ 376.265400][T11620] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 376.272401][T11620] Memory cgroup stats for /syz2: [ 376.273136][T11620] anon 310026240 [ 376.273136][T11620] file 0 [ 376.273136][T11620] kernel_stack 294912 [ 376.273136][T11620] slab 946176 [ 376.273136][T11620] sock 0 [ 376.273136][T11620] shmem 0 [ 376.273136][T11620] file_mapped 0 [ 376.273136][T11620] file_dirty 0 [ 376.273136][T11620] file_writeback 0 [ 376.273136][T11620] anon_thp 268435456 [ 376.273136][T11620] inactive_anon 62996480 [ 376.273136][T11620] active_anon 2334720 [ 376.273136][T11620] inactive_file 0 [ 376.273136][T11620] active_file 135168 [ 376.273136][T11620] unevictable 244707328 [ 376.273136][T11620] slab_reclaimable 135168 [ 376.273136][T11620] slab_unreclaimable 811008 [ 376.273136][T11620] pgfault 64878 [ 376.273136][T11620] pgmajfault 0 [ 376.273136][T11620] workingset_refault 0 [ 376.273136][T11620] workingset_activate 0 [ 376.273136][T11620] workingset_nodereclaim 0 [ 376.273136][T11620] pgrefill 268 [ 376.273136][T11620] pgscan 267 [ 376.273136][T11620] pgsteal 0 [ 376.367200][T11620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11605,uid=0 [ 376.383205][T11620] Memory cgroup out of memory: Killed process 11605 (syz-executor.2) total-vm:74836kB, anon-rss:18252kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 376.403505][ T1078] oom_reaper: reaped process 11605 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:06:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r6 = dup2(r0, r0) write$P9_RMKNOD(r6, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:55 executing program 4: 05:06:55 executing program 5: 05:06:55 executing program 1: 05:06:55 executing program 0: 05:06:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r0) 05:06:56 executing program 5: 05:06:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r0) 05:06:56 executing program 1: [ 376.768778][T11634] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 376.779120][T11634] CPU: 0 PID: 11634 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 376.787799][T11634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.797864][T11634] Call Trace: [ 376.801164][T11634] dump_stack+0x11d/0x181 [ 376.805525][T11634] dump_header+0xaa/0x39c [ 376.809881][T11634] oom_kill_process.cold+0x10/0x15 [ 376.815016][T11634] out_of_memory+0x231/0xa60 [ 376.819684][T11634] ? __rcu_read_unlock+0x66/0x2f0 [ 376.824774][T11634] mem_cgroup_out_of_memory+0x128/0x150 [ 376.830417][T11634] try_charge+0xb6c/0xbf0 [ 376.834784][T11634] mem_cgroup_try_charge+0xd2/0x260 [ 376.840071][T11634] mem_cgroup_try_charge_delay+0x3a/0x80 [ 376.845755][T11634] __handle_mm_fault+0x197f/0x2e00 [ 376.850961][T11634] handle_mm_fault+0x21b/0x530 [ 376.855742][T11634] __get_user_pages+0x485/0x1130 [ 376.860795][T11634] populate_vma_page_range+0xe6/0x100 [ 376.866221][T11634] __mm_populate+0x168/0x2a0 [ 376.870847][T11634] __x64_sys_mlockall+0x2e3/0x320 [ 376.875895][T11634] do_syscall_64+0xcc/0x3a0 [ 376.880470][T11634] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 376.886419][T11634] RIP: 0033:0x45c449 [ 376.890341][T11634] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.909955][T11634] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 05:06:56 executing program 4: 05:06:56 executing program 0: 05:06:56 executing program 4: [ 376.918378][T11634] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 376.926360][T11634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 376.934388][T11634] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 376.942372][T11634] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 376.950369][T11634] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 376.958498][T11634] memory: usage 307200kB, limit 307200kB, failcnt 1123 [ 376.965641][T11634] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 376.972546][T11634] Memory cgroup stats for /syz2: [ 376.972702][T11634] anon 310165504 [ 376.972702][T11634] file 0 [ 376.972702][T11634] kernel_stack 294912 [ 376.972702][T11634] slab 946176 [ 376.972702][T11634] sock 0 [ 376.972702][T11634] shmem 0 [ 376.972702][T11634] file_mapped 0 [ 376.972702][T11634] file_dirty 0 [ 376.972702][T11634] file_writeback 0 [ 376.972702][T11634] anon_thp 268435456 [ 376.972702][T11634] inactive_anon 73859072 [ 376.972702][T11634] active_anon 2334720 [ 376.972702][T11634] inactive_file 0 [ 376.972702][T11634] active_file 135168 [ 376.972702][T11634] unevictable 234221568 [ 376.972702][T11634] slab_reclaimable 135168 [ 376.972702][T11634] slab_unreclaimable 811008 [ 376.972702][T11634] pgfault 65835 [ 376.972702][T11634] pgmajfault 0 [ 376.972702][T11634] workingset_refault 0 [ 376.972702][T11634] workingset_activate 0 [ 376.972702][T11634] workingset_nodereclaim 0 [ 376.972702][T11634] pgrefill 268 [ 376.972702][T11634] pgscan 267 [ 376.972702][T11634] pgsteal 0 [ 377.065744][T11634] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11595,uid=0 [ 377.081500][T11634] Memory cgroup out of memory: Killed process 11595 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 377.107013][ T1078] oom_reaper: reaped process 11595 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 05:06:57 executing program 1: 05:06:57 executing program 0: 05:06:57 executing program 5: 05:06:57 executing program 4: 05:06:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r6 = dup2(r0, r0) write$P9_RMKNOD(r6, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r0) 05:06:57 executing program 0: 05:06:57 executing program 1: 05:06:57 executing program 4: 05:06:57 executing program 5: [ 377.827835][T11661] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 377.838107][T11661] CPU: 0 PID: 11661 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 377.846786][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.856848][T11661] Call Trace: [ 377.860172][T11661] dump_stack+0x11d/0x181 [ 377.864527][T11661] dump_header+0xaa/0x39c [ 377.868887][T11661] oom_kill_process.cold+0x10/0x15 05:06:57 executing program 3: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r0, 0xffffffffffffffff) 05:06:57 executing program 4: [ 377.874044][T11661] out_of_memory+0x231/0xa60 [ 377.878658][T11661] ? __rcu_read_unlock+0x66/0x2f0 [ 377.883714][T11661] mem_cgroup_out_of_memory+0x128/0x150 [ 377.889291][T11661] try_charge+0xb6c/0xbf0 [ 377.901484][T11661] mem_cgroup_try_charge+0xd2/0x260 [ 377.906714][T11661] mem_cgroup_try_charge_delay+0x3a/0x80 [ 377.912370][T11661] __handle_mm_fault+0x197f/0x2e00 [ 377.917615][T11661] handle_mm_fault+0x21b/0x530 [ 377.922408][T11661] __get_user_pages+0x485/0x1130 [ 377.927378][T11661] populate_vma_page_range+0xe6/0x100 [ 377.932773][T11661] __mm_populate+0x168/0x2a0 [ 377.937391][T11661] __x64_sys_mlockall+0x2e3/0x320 [ 377.942476][T11661] do_syscall_64+0xcc/0x3a0 [ 377.947001][T11661] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 377.952902][T11661] RIP: 0033:0x45c449 [ 377.956822][T11661] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.976545][T11661] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 377.984967][T11661] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 377.993003][T11661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 378.001009][T11661] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 378.009028][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 378.017014][T11661] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 378.025432][T11661] memory: usage 307200kB, limit 307200kB, failcnt 1154 [ 378.032420][T11661] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 378.039323][T11661] Memory cgroup stats for /syz2: [ 378.039539][T11661] anon 310063104 [ 378.039539][T11661] file 0 [ 378.039539][T11661] kernel_stack 294912 [ 378.039539][T11661] slab 946176 [ 378.039539][T11661] sock 0 [ 378.039539][T11661] shmem 0 [ 378.039539][T11661] file_mapped 0 [ 378.039539][T11661] file_dirty 0 [ 378.039539][T11661] file_writeback 0 [ 378.039539][T11661] anon_thp 266338304 [ 378.039539][T11661] inactive_anon 84385792 [ 378.039539][T11661] active_anon 2334720 [ 378.039539][T11661] inactive_file 0 [ 378.039539][T11661] active_file 135168 [ 378.039539][T11661] unevictable 223604736 [ 378.039539][T11661] slab_reclaimable 135168 [ 378.039539][T11661] slab_unreclaimable 811008 [ 378.039539][T11661] pgfault 68376 [ 378.039539][T11661] pgmajfault 0 [ 378.039539][T11661] workingset_refault 0 [ 378.039539][T11661] workingset_activate 0 [ 378.039539][T11661] workingset_nodereclaim 0 [ 378.039539][T11661] pgrefill 268 [ 378.039539][T11661] pgscan 267 [ 378.039539][T11661] pgsteal 0 [ 378.132934][T11661] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11652,uid=0 [ 378.148451][T11661] Memory cgroup out of memory: Killed process 11652 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 05:06:57 executing program 3: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r0, 0xffffffffffffffff) 05:06:57 executing program 4: [ 378.218935][ T1078] oom_reaper: reaped process 11652 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:06:57 executing program 0: 05:06:57 executing program 3: syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r0, 0xffffffffffffffff) [ 378.841549][T11661] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 378.851848][T11661] CPU: 0 PID: 11661 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 378.860518][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.870566][T11661] Call Trace: [ 378.873908][T11661] dump_stack+0x11d/0x181 [ 378.878277][T11661] dump_header+0xaa/0x39c [ 378.882611][T11661] oom_kill_process.cold+0x10/0x15 [ 378.887708][T11661] out_of_memory+0x231/0xa60 [ 378.892292][T11661] ? __rcu_read_unlock+0x66/0x2f0 [ 378.897326][T11661] ? apic_timer_interrupt+0xa/0x20 [ 378.903233][T11661] mem_cgroup_out_of_memory+0x128/0x150 [ 378.908789][T11661] try_charge+0xb6c/0xbf0 [ 378.913127][T11661] mem_cgroup_try_charge+0xd2/0x260 [ 378.918353][T11661] mem_cgroup_try_charge_delay+0x3a/0x80 [ 378.923991][T11661] wp_page_copy+0x322/0xf20 [ 378.928565][T11661] ? __read_once_size+0x41/0xe0 [ 378.933521][T11661] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 378.939412][T11661] do_wp_page+0x192/0xd20 [ 378.943736][T11661] ? pmd_devmap_trans_unstable+0x103/0x1a0 [ 378.949547][T11661] __handle_mm_fault+0x1d16/0x2e00 [ 378.954673][T11661] handle_mm_fault+0x21b/0x530 [ 378.959485][T11661] __get_user_pages+0x485/0x1130 [ 378.964486][T11661] populate_vma_page_range+0xe6/0x100 [ 378.969844][T11661] __mm_populate+0x168/0x2a0 [ 378.974425][T11661] __x64_sys_mlockall+0x2e3/0x320 [ 378.979458][T11661] do_syscall_64+0xcc/0x3a0 [ 378.984042][T11661] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 378.989932][T11661] RIP: 0033:0x45c449 [ 378.993814][T11661] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.013423][T11661] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 379.021838][T11661] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 379.029805][T11661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 379.037779][T11661] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 379.045766][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 379.053724][T11661] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 379.062127][T11661] memory: usage 307200kB, limit 307200kB, failcnt 1210 [ 379.069173][T11661] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 379.076106][T11661] Memory cgroup stats for /syz2: [ 379.076824][T11661] anon 309932032 [ 379.076824][T11661] file 0 [ 379.076824][T11661] kernel_stack 331776 [ 379.076824][T11661] slab 946176 [ 379.076824][T11661] sock 0 [ 379.076824][T11661] shmem 0 [ 379.076824][T11661] file_mapped 0 [ 379.076824][T11661] file_dirty 0 [ 379.076824][T11661] file_writeback 0 [ 379.076824][T11661] anon_thp 266338304 [ 379.076824][T11661] inactive_anon 72929280 [ 379.076824][T11661] active_anon 2334720 [ 379.076824][T11661] inactive_file 0 [ 379.076824][T11661] active_file 135168 [ 379.076824][T11661] unevictable 234831872 [ 379.076824][T11661] slab_reclaimable 135168 [ 379.076824][T11661] slab_unreclaimable 811008 [ 379.076824][T11661] pgfault 70158 [ 379.076824][T11661] pgmajfault 0 [ 379.076824][T11661] workingset_refault 0 [ 379.076824][T11661] workingset_activate 0 [ 379.076824][T11661] workingset_nodereclaim 0 [ 379.076824][T11661] pgrefill 268 [ 379.076824][T11661] pgscan 267 [ 379.076824][T11661] pgsteal 0 [ 379.170112][T11661] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11659,uid=0 [ 379.185960][T11661] Memory cgroup out of memory: Killed process 11659 (syz-executor.2) total-vm:74836kB, anon-rss:18284kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 379.205203][ T1078] oom_reaper: reaped process 11659 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:06:58 executing program 1: 05:06:58 executing program 5: 05:06:58 executing program 0: 05:06:58 executing program 4: 05:06:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r6 = dup2(r0, r0) write$P9_RMKNOD(r6, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:06:58 executing program 3: [ 379.647519][T11692] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 379.657777][T11692] CPU: 0 PID: 11692 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 379.666454][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.676518][T11692] Call Trace: [ 379.679873][T11692] dump_stack+0x11d/0x181 [ 379.684231][T11692] dump_header+0xaa/0x39c [ 379.688573][T11692] oom_kill_process.cold+0x10/0x15 [ 379.693699][T11692] out_of_memory+0x231/0xa60 [ 379.698298][T11692] ? __rcu_read_unlock+0x66/0x2f0 [ 379.703398][T11692] mem_cgroup_out_of_memory+0x128/0x150 [ 379.709076][T11692] try_charge+0xb6c/0xbf0 [ 379.713451][T11692] mem_cgroup_try_charge+0xd2/0x260 [ 379.718827][T11692] mem_cgroup_try_charge_delay+0x3a/0x80 [ 379.724544][T11692] __handle_mm_fault+0x197f/0x2e00 [ 379.729688][T11692] handle_mm_fault+0x21b/0x530 [ 379.734469][T11692] __get_user_pages+0x485/0x1130 [ 379.739432][T11692] populate_vma_page_range+0xe6/0x100 [ 379.744813][T11692] __mm_populate+0x168/0x2a0 [ 379.749418][T11692] __x64_sys_mlockall+0x2e3/0x320 [ 379.754498][T11692] do_syscall_64+0xcc/0x3a0 [ 379.759038][T11692] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 379.764968][T11692] RIP: 0033:0x45c449 [ 379.768935][T11692] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.788546][T11692] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 379.797044][T11692] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 379.805030][T11692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 379.813012][T11692] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 379.820989][T11692] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 379.828965][T11692] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 379.837197][T11692] memory: usage 307200kB, limit 307200kB, failcnt 1241 [ 379.844132][T11692] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 379.851042][T11692] Memory cgroup stats for /syz2: [ 379.851245][T11692] anon 310059008 [ 379.851245][T11692] file 0 [ 379.851245][T11692] kernel_stack 294912 [ 379.851245][T11692] slab 946176 [ 379.851245][T11692] sock 0 [ 379.851245][T11692] shmem 0 [ 379.851245][T11692] file_mapped 0 [ 379.851245][T11692] file_dirty 0 [ 379.851245][T11692] file_writeback 0 [ 379.851245][T11692] anon_thp 266338304 [ 379.851245][T11692] inactive_anon 84422656 [ 379.851245][T11692] active_anon 2334720 05:06:59 executing program 1: [ 379.851245][T11692] inactive_file 0 [ 379.851245][T11692] active_file 135168 [ 379.851245][T11692] unevictable 223604736 [ 379.851245][T11692] slab_reclaimable 135168 [ 379.851245][T11692] slab_unreclaimable 811008 [ 379.851245][T11692] pgfault 71115 [ 379.851245][T11692] pgmajfault 0 [ 379.851245][T11692] workingset_refault 0 [ 379.851245][T11692] workingset_activate 0 [ 379.851245][T11692] workingset_nodereclaim 0 [ 379.851245][T11692] pgrefill 268 [ 379.851245][T11692] pgscan 267 [ 379.851245][T11692] pgsteal 0 05:06:59 executing program 4: 05:06:59 executing program 3: 05:06:59 executing program 0: [ 379.944987][T11692] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11682,uid=0 [ 379.960772][T11692] Memory cgroup out of memory: Killed process 11682 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 05:06:59 executing program 5: [ 380.013761][ T1078] oom_reaper: reaped process 11682 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 05:06:59 executing program 4: 05:06:59 executing program 0: 05:06:59 executing program 1: 05:06:59 executing program 4: 05:06:59 executing program 5: 05:07:00 executing program 0: 05:07:00 executing program 3: 05:07:00 executing program 1: 05:07:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x16) 05:07:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1e) 05:07:00 executing program 0: 05:07:00 executing program 1: 05:07:00 executing program 3: [ 381.203361][T11732] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 381.214335][T11732] CPU: 1 PID: 11732 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 381.223124][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.233177][T11732] Call Trace: [ 381.236478][T11732] dump_stack+0x11d/0x181 [ 381.240898][T11732] dump_header+0xaa/0x39c [ 381.245251][T11732] oom_kill_process.cold+0x10/0x15 [ 381.250462][T11732] out_of_memory+0x231/0xa60 [ 381.255068][T11732] ? __rcu_read_unlock+0x66/0x2f0 [ 381.260246][T11732] mem_cgroup_out_of_memory+0x128/0x150 [ 381.265810][T11732] try_charge+0xb6c/0xbf0 [ 381.270234][T11732] mem_cgroup_try_charge+0xd2/0x260 [ 381.275529][T11732] mem_cgroup_try_charge_delay+0x3a/0x80 [ 381.281261][T11732] __handle_mm_fault+0x197f/0x2e00 [ 381.286412][T11732] handle_mm_fault+0x21b/0x530 [ 381.291244][T11732] __get_user_pages+0x485/0x1130 [ 381.296209][T11732] populate_vma_page_range+0xe6/0x100 [ 381.301626][T11732] __mm_populate+0x168/0x2a0 [ 381.306247][T11732] __x64_sys_mlockall+0x2e3/0x320 [ 381.311294][T11732] do_syscall_64+0xcc/0x3a0 [ 381.315870][T11732] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 381.321775][T11732] RIP: 0033:0x45c449 [ 381.325697][T11732] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.345309][T11732] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 381.353732][T11732] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 381.361761][T11732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 381.369733][T11732] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 381.377716][T11732] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 381.385693][T11732] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 381.393975][T11732] memory: usage 307200kB, limit 307200kB, failcnt 1281 [ 381.400948][T11732] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 381.407795][T11732] Memory cgroup stats for /syz2: [ 381.407991][T11732] anon 310132736 [ 381.407991][T11732] file 0 [ 381.407991][T11732] kernel_stack 294912 [ 381.407991][T11732] slab 946176 [ 381.407991][T11732] sock 0 [ 381.407991][T11732] shmem 0 [ 381.407991][T11732] file_mapped 0 [ 381.407991][T11732] file_dirty 0 [ 381.407991][T11732] file_writeback 0 [ 381.407991][T11732] anon_thp 266338304 [ 381.407991][T11732] inactive_anon 86351872 [ 381.407991][T11732] active_anon 2322432 [ 381.407991][T11732] inactive_file 0 [ 381.407991][T11732] active_file 135168 [ 381.407991][T11732] unevictable 221507584 [ 381.407991][T11732] slab_reclaimable 135168 [ 381.407991][T11732] slab_unreclaimable 811008 [ 381.407991][T11732] pgfault 73392 [ 381.407991][T11732] pgmajfault 0 [ 381.407991][T11732] workingset_refault 0 [ 381.407991][T11732] workingset_activate 0 [ 381.407991][T11732] workingset_nodereclaim 0 [ 381.407991][T11732] pgrefill 268 [ 381.407991][T11732] pgscan 267 [ 381.407991][T11732] pgsteal 0 05:07:00 executing program 0: 05:07:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SECCOMP(0x15) [ 381.501274][T11732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11702,uid=0 [ 381.516844][T11732] Memory cgroup out of memory: Killed process 11702 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 05:07:01 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) [ 381.564230][T11732] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 381.574482][T11732] CPU: 1 PID: 11732 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 381.583183][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.587054][ T1078] oom_reaper: reaped process 11702 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 381.593238][T11732] Call Trace: [ 381.593268][T11732] dump_stack+0x11d/0x181 05:07:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0x0, 0x0, 0x9}}) [ 381.593299][T11732] dump_header+0xaa/0x39c [ 381.616393][T11732] oom_kill_process.cold+0x10/0x15 [ 381.621527][T11732] out_of_memory+0x231/0xa60 [ 381.626231][T11732] ? __rcu_read_unlock+0x66/0x2f0 [ 381.631284][T11732] mem_cgroup_out_of_memory+0x128/0x150 [ 381.636888][T11732] try_charge+0xb6c/0xbf0 [ 381.641268][T11732] mem_cgroup_try_charge+0xd2/0x260 [ 381.646489][T11732] mem_cgroup_try_charge_delay+0x3a/0x80 [ 381.652145][T11732] __handle_mm_fault+0x197f/0x2e00 [ 381.657392][T11732] handle_mm_fault+0x21b/0x530 [ 381.662178][T11732] __get_user_pages+0x485/0x1130 [ 381.667234][T11732] populate_vma_page_range+0xe6/0x100 [ 381.672621][T11732] __mm_populate+0x168/0x2a0 [ 381.677232][T11732] __x64_sys_mlockall+0x2e3/0x320 [ 381.682282][T11732] do_syscall_64+0xcc/0x3a0 [ 381.686876][T11732] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 381.692773][T11732] RIP: 0033:0x45c449 [ 381.696718][T11732] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.716511][T11732] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 381.724967][T11732] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 381.732950][T11732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 381.741026][T11732] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 381.749050][T11732] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 381.757035][T11732] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c 05:07:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) [ 381.765198][T11732] memory: usage 296584kB, limit 307200kB, failcnt 1319 [ 381.772179][T11732] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 381.779081][T11732] Memory cgroup stats for /syz2: [ 381.779333][T11732] anon 299421696 [ 381.779333][T11732] file 0 [ 381.779333][T11732] kernel_stack 294912 [ 381.779333][T11732] slab 946176 [ 381.779333][T11732] sock 0 [ 381.779333][T11732] shmem 0 [ 381.779333][T11732] file_mapped 0 [ 381.779333][T11732] file_dirty 0 [ 381.779333][T11732] file_writeback 0 [ 381.779333][T11732] anon_thp 257949696 [ 381.779333][T11732] inactive_anon 69754880 [ 381.779333][T11732] active_anon 2322432 [ 381.779333][T11732] inactive_file 0 [ 381.779333][T11732] active_file 135168 [ 381.779333][T11732] unevictable 227393536 [ 381.779333][T11732] slab_reclaimable 135168 [ 381.779333][T11732] slab_unreclaimable 811008 [ 381.779333][T11732] pgfault 74316 [ 381.779333][T11732] pgmajfault 0 [ 381.779333][T11732] workingset_refault 0 [ 381.779333][T11732] workingset_activate 0 [ 381.779333][T11732] workingset_nodereclaim 0 [ 381.779333][T11732] pgrefill 268 [ 381.779333][T11732] pgscan 267 [ 381.779333][T11732] pgsteal 0 [ 381.872320][T11732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11729,uid=0 [ 381.887829][T11732] Memory cgroup out of memory: Killed process 11729 (syz-executor.2) total-vm:74704kB, anon-rss:15104kB, file-rss:39080kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 05:07:01 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000400)="bc", 0x1) [ 382.033236][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 382.033256][ T27] audit: type=1804 audit(1582607221.435:50): pid=11754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir659569360/syzkaller.hTmkYd/116/bus" dev="sda1" ino=16523 res=1 05:07:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = epoll_create(0x5) epoll_wait(r2, &(0x7f00004e7fdc)=[{}], 0x1, 0x407) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000069cff4)={0x4}) [ 382.162385][ T27] audit: type=1804 audit(1582607221.565:51): pid=11760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir659569360/syzkaller.hTmkYd/116/bus" dev="sda1" ino=16523 res=1 05:07:01 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback}, {@in6=@dev, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 05:07:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/net\x00') r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 05:07:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:01 executing program 0: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) pwrite64(r0, &(0x7f0000000680)="f1", 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x0, 0x2, [{}, {}]}) 05:07:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f0000000200)) io_setup(0x10543, &(0x7f0000000100)) 05:07:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x500) 05:07:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:07:02 executing program 3: 05:07:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdbe) 05:07:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x100000000278}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x803, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(0x0, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2", 0x44) sendfile(r4, r4, &(0x7f0000000200), 0xff8) r5 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) 05:07:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = epoll_create(0x5) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x3000201c}) 05:07:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x100000000278}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(0x0, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d226", 0x45) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) sendfile(r4, r4, &(0x7f0000000200), 0xff8) r5 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00') memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) 05:07:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x100000000278}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x803, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(0x0, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2", 0x44) sendfile(r4, r4, &(0x7f0000000200), 0xff8) r5 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) 05:07:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x100000000278}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x803, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(0x0, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2", 0x44) sendfile(r4, r4, &(0x7f0000000200), 0xff8) r5 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) 05:07:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="4c0000001200ff09fffefd956fa283b724ac008000000000000000383d40150024001d001fc41182b598bc593ab68211489868c62b2ca654a6613b6aabf35d0f1cbc882b07988100000000005683a86bce76b9723bc4896c12ceade9f8c418cbf80de3e2d00b61f3566f70b6701c5211eabbb9499ebaee93f255f1f108d6f5012e94ee9328a26288ad39737739261ec1b147ad17d50d7167a33b18e17cd76e9828dc63cf299140f1c498047f28a6347085250d9a2591", 0x4c}, {&(0x7f00000000c0)="19882f8d9857c0ccecb2833d6b420a7121865ee6f205a711001df94effcd96058849be0b6b667b116606a43be95bc686f9"}, {&(0x7f0000000240)="3673c2103465db0cf2e86ea4e2b57976f6000383f5715ca731cee840fd45108752049b2a875aeaeaf1baa582a917e05b5bc2c7f0eee3cf66250348ecde4b098a26e30e90a378c2d147bb995af4f8c1ba69c8726ef7879e757d64851586db0f9eeec0ae41c7d2c8f3a4237efd62b8022905d90af9cac46fadc830ec7b81e5b5a2b94c13480604c486615372d93835e2f8320e5f"}], 0x1, 0x0, 0xffffffffffffff40}, 0x20000044) 05:07:03 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800000020000061a, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x400}], 0x0, 0x0) [ 383.910582][T11847] NFS: Device name not specified 05:07:03 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800000020000061a, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x400}], 0x0, 0x0) 05:07:03 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdbe) 05:07:03 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 05:07:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7fff, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000580)="d481e106c29b6edb226dbdcdec9fdfbc23a9f9435ab767eb5c7e60f74d7055c65c932550bdad4e1bec30932e6bdc879a5110e494d8a7d54ef30a89b9b07c4be84e6af05468f7358ea9161c7a6b362124443b456ee400efbd4e785a609da8a5d114f7492463449dc7cf046150bdbb309850edc81d43a26628c2c4cb78d76fbd87fd9393db845a9fab796b88b3af204f5c7eeb2d65821437e16b987de47ae6eff3bf5e2e1f6b79847294bcad598ddb85f4a18b84a02fdab3a0ac72aa743ad4c724c8a8b24656132667d031100658b01c58ae5565a0"}], 0x0, 0x7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r5 = creat(0x0, 0x0) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xffffffffffffbffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x803, 0xa0) connect(r6, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x0, @local}, 0x5a, {0x2, 0x4e20, @loopback}, 'wg0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000840)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r8) setresgid(0x0, r8, 0x0) lchown(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r9) setresgid(0x0, r9, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r10) setresgid(0x0, r10, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r11, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r12, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r13, 0x0) setresgid(r10, r11, r13) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f00000008c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r14 = syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r15, 0x0, 0x1) write$binfmt_elf64(r14, &(0x7f0000000540)=ANY=[@ANYRESOCT=r15], 0x17) r16 = creat(&(0x7f0000000240)='./bus\x00', 0x4d75ae3d6e59cb9b) lseek(r16, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r16, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r16, 0x100000003, 0x0, 0x28120001) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) 05:07:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) 05:07:03 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800000020000061a, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x400}], 0x0, 0x0) [ 384.529775][T11872] NFS: Device name not specified [ 384.644783][T11885] NFS: Device name not specified 05:07:04 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7fff, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000580)="d481e106c29b6edb226dbdcdec9fdfbc23a9f9435ab767eb5c7e60f74d7055c65c932550bdad4e1bec30932e6bdc879a5110e494d8a7d54ef30a89b9b07c4be84e6af05468f7358ea9161c7a6b362124443b456ee400efbd4e785a609da8a5d114f7492463449dc7cf046150bdbb309850edc81d43a26628c2c4cb78d76fbd87fd9393db845a9fab796b88b3af204f5c7eeb2d65821437e16b987de47ae6eff3bf5e2e1f6b79847294bcad598ddb85f4a18b84a02fdab3a0ac72aa743ad4c724c8a8b24656132667d031100658b01c58ae5565a0"}], 0x0, 0x7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r5 = creat(0x0, 0x0) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xffffffffffffbffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x803, 0xa0) connect(r6, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x0, @local}, 0x5a, {0x2, 0x4e20, @loopback}, 'wg0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000840)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r8) setresgid(0x0, r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r9) setresgid(0x0, r9, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r10) setresgid(0x0, r10, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r11) setresgid(0x0, r11, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r12, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r13, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r14, 0x0) setresgid(r11, r12, r14) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f00000008c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r15, 0x0, 0x1) r16 = creat(&(0x7f0000000240)='./bus\x00', 0x4d75ae3d6e59cb9b) lseek(r16, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r16, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r16, 0x100000003, 0x0, 0x28120001) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) 05:07:04 executing program 0: r0 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r0, &(0x7f0000003700)=[{&(0x7f00000001c0)="cadda8ef4f2cc6c6ed2e761d3bcefef79181e53fc96f7d0b2a1165249340732508f24707a6adb9d35b", 0x29}, {&(0x7f0000002640)="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", 0xfd1}], 0x2, 0x6) 05:07:04 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = epoll_create(0x5) epoll_wait(r4, &(0x7f00004e7fdc)=[{}], 0x1, 0x407) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000069cff4)={0x4}) 05:07:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:04 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800000020000061a, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x400}], 0x0, 0x0) 05:07:04 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r2) shutdown(r3, 0x0) [ 385.086961][T11908] NFS: Device name not specified 05:07:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae", 0x1a}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:07:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xfffffffffffffffe) 05:07:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x524, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 05:07:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7fff, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000580)="d481e106c29b6edb226dbdcdec9fdfbc23a9f9435ab767eb5c7e60f74d7055c65c932550bdad4e1bec30932e6bdc879a5110e494d8a7d54ef30a89b9b07c4be84e6af05468f7358ea9161c7a6b362124443b456ee400efbd4e785a609da8a5d114f7492463449dc7cf046150bdbb309850edc81d43a26628c2c4cb78d76fbd87fd9393db845a9fab796b88b3af204f5c7eeb2d65821437e16b987de47ae6eff3bf5e2e1f6b79847294bcad598ddb85f4a18b84a02fdab3a0ac72aa743ad4c724c8a8b24656132667d031100658b01c58ae5565a0"}], 0x0, 0x7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r5 = creat(0x0, 0x0) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xffffffffffffbffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x803, 0xa0) connect(r6, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x0, @local}, 0x5a, {0x2, 0x4e20, @loopback}, 'wg0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000840)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r8) setresgid(0x0, r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r9) setresgid(0x0, r9, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r10) setresgid(0x0, r10, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r11) setresgid(0x0, r11, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r12, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r13, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r14, 0x0) setresgid(r11, r12, r14) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f00000008c0)) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') r15 = creat(&(0x7f0000000240)='./bus\x00', 0x4d75ae3d6e59cb9b) lseek(r15, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r15, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r15, 0x100000003, 0x0, 0x28120001) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) 05:07:05 executing program 1: 05:07:05 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x524, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) [ 386.187373][ T0] NOHZ: local_softirq_pending 08 05:07:05 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7fff, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000580)="d481e106c29b6edb226dbdcdec9fdfbc23a9f9435ab767eb5c7e60f74d7055c65c932550bdad4e1bec30932e6bdc879a5110e494d8a7d54ef30a89b9b07c4be84e6af05468f7358ea9161c7a6b362124443b456ee400efbd4e785a609da8a5d114f7492463449dc7cf046150bdbb309850edc81d43a26628c2c4cb78d76fbd87fd9393db845a9fab796b88b3af204f5c7eeb2d65821437e16b987de47ae6eff3bf5e2e1f6b79847294bcad598ddb85f4a18b84a02fdab3a0ac72aa743ad4c724c8a8b24656132667d031100658b01c58ae5565a0"}], 0x0, 0x7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r5 = creat(0x0, 0x0) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xffffffffffffbffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x0, 0xa0) connect(r6, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x0, @local}, 0x5a, {0x2, 0x4e20, @loopback}, 'wg0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r8, 0x0) stat(0x0, &(0x7f00000008c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') write$binfmt_elf64(r9, &(0x7f0000000540)=ANY=[@ANYRESOCT=r10], 0x17) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x4d75ae3d6e59cb9b) lseek(r11, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r11, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r11, 0x100000003, 0x0, 0x28120001) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) 05:07:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x49f) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f"], 0x1) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) [ 387.079214][T11968] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 387.106046][T11968] FAT-fs (loop4): Filesystem has been set read-only [ 387.128862][T11968] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970769) 05:07:06 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) dup3(r0, r1, 0x0) 05:07:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000001340)='./file0\x00', 0x0, 0x0) 05:07:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7fff, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000580)="d481e106c29b6edb226dbdcdec9fdfbc23a9f9435ab767eb5c7e60f74d7055c65c932550bdad4e1bec30932e6bdc879a5110e494d8a7d54ef30a89b9b07c4be84e6af05468f7358ea9161c7a6b362124443b456ee400efbd4e785a609da8a5d114f7492463449dc7cf046150bdbb309850edc81d43a26628c2c4cb78d76fbd87fd9393db845a9fab796b88b3af204f5c7eeb2d65821437e16b987de47ae6eff3bf5e2e1f6b79847294bcad598ddb85f4a18b84a02fdab3a0ac72aa743ad4c724c8a8b24656132667d031100658b01c58ae5565a0"}], 0x0, 0x7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r5 = creat(0x0, 0x0) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xffffffffffffbffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x0, 0xa0) connect(r6, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x0, @local}, 0x5a, {0x2, 0x4e20, @loopback}, 'wg0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r8, 0x0) stat(0x0, &(0x7f00000008c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') write$binfmt_elf64(r9, &(0x7f0000000540)=ANY=[@ANYRESOCT=r10], 0x17) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x4d75ae3d6e59cb9b) lseek(r11, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r11, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r11, 0x100000003, 0x0, 0x28120001) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) 05:07:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x49f) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f"], 0x1) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 05:07:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x100000000278}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x803, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(0x0, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) r5 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r5, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2", 0x44) sendfile(r5, r5, &(0x7f0000000200), 0xff8) r6 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='Z\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) 05:07:07 executing program 5: mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chmod(&(0x7f0000000200)='./bus\x00', 0xa) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2, 0x14, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 05:07:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 388.458139][T11994] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 388.470737][T11994] FAT-fs (loop4): Filesystem has been set read-only [ 388.477521][T11994] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970769) 05:07:07 executing program 0: dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006d00), 0x400034b, 0x0) 05:07:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@cred={{0x18}}], 0x18}, 0x0) 05:07:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) pipe(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:07:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639", 0xe}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:07:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) 05:07:08 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) 05:07:08 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100)) 05:07:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) dup2(r1, r0) 05:07:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x0, [{}, {0x0, 0x3f}]}}) 05:07:09 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x66c9}]}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 05:07:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) fstat(r1, &(0x7f00000005c0)) keyctl$chown(0x4, 0x0, 0x0, 0x0) [ 390.015243][T12075] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 390.059786][T12075] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 05:07:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000000000ae47", 0x1b}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x1}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:07:09 executing program 1: futex(0x0, 0x83, 0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) ptrace$peek(0x1, r3, 0x0) 05:07:09 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x66c9}]}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 05:07:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 390.536453][T12097] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 390.548763][T12097] CPU: 1 PID: 12097 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 390.557430][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.567474][T12097] Call Trace: [ 390.570760][T12097] dump_stack+0x11d/0x181 [ 390.575111][T12097] dump_header+0xaa/0x39c [ 390.579435][T12097] oom_kill_process.cold+0x10/0x15 [ 390.584555][T12097] out_of_memory+0x231/0xa60 [ 390.589139][T12097] ? __rcu_read_unlock+0x66/0x2f0 [ 390.594235][T12097] mem_cgroup_out_of_memory+0x128/0x150 [ 390.599850][T12097] try_charge+0xb6c/0xbf0 [ 390.604178][T12097] mem_cgroup_try_charge+0xd2/0x260 [ 390.609383][T12097] mem_cgroup_try_charge_delay+0x3a/0x80 [ 390.615032][T12097] wp_page_copy+0x322/0xf20 [ 390.619567][T12097] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 390.625534][T12097] ? __read_once_size+0x41/0xe0 [ 390.630421][T12097] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 390.636305][T12097] do_wp_page+0x192/0xd20 [ 390.640634][T12097] __handle_mm_fault+0x1d16/0x2e00 [ 390.645787][T12097] handle_mm_fault+0x21b/0x530 [ 390.650610][T12097] do_page_fault+0x496/0xa3d [ 390.655211][T12097] page_fault+0x34/0x40 [ 390.659351][T12097] RIP: 0033:0x403ecf [ 390.663281][T12097] Code: e7 87 00 00 74 0f 8b 05 a3 e7 87 00 39 45 24 0f 84 d6 01 00 00 80 3d a8 e7 87 00 00 0f 85 51 03 00 00 e8 24 2d 01 00 48 89 c3 00 00 00 00 00 4b 8d 44 6d 00 48 8d 3c c5 60 83 4d 00 48 8b 47 [ 390.682889][T12097] RSP: 002b:00007f631c5a3c90 EFLAGS: 00010207 [ 390.689008][T12097] RAX: 00007f631c5a46d4 RBX: 00007f631c5a46d4 RCX: 00000000004c2ee7 [ 390.697027][T12097] RDX: 000000000001d167 RSI: 0000000000000004 RDI: 000000000076c048 [ 390.704987][T12097] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 390.712949][T12097] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 390.720908][T12097] R13: 000000000000009b R14: 00000000004c2ee7 R15: 000000000076bfcc [ 390.729797][T12097] memory: usage 307200kB, limit 307200kB, failcnt 1349 [ 390.736733][T12097] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 390.743619][T12097] Memory cgroup stats for /syz2: [ 390.743805][T12097] anon 309452800 [ 390.743805][T12097] file 0 [ 390.743805][T12097] kernel_stack 368640 [ 390.743805][T12097] slab 946176 [ 390.743805][T12097] sock 0 [ 390.743805][T12097] shmem 0 [ 390.743805][T12097] file_mapped 0 [ 390.743805][T12097] file_dirty 0 [ 390.743805][T12097] file_writeback 0 [ 390.743805][T12097] anon_thp 272629760 [ 390.743805][T12097] inactive_anon 72036352 [ 390.743805][T12097] active_anon 8929280 [ 390.743805][T12097] inactive_file 0 [ 390.743805][T12097] active_file 135168 [ 390.743805][T12097] unevictable 228532224 [ 390.743805][T12097] slab_reclaimable 135168 [ 390.743805][T12097] slab_unreclaimable 811008 [ 390.743805][T12097] pgfault 79860 [ 390.743805][T12097] pgmajfault 0 [ 390.743805][T12097] workingset_refault 0 [ 390.743805][T12097] workingset_activate 0 [ 390.743805][T12097] workingset_nodereclaim 0 [ 390.743805][T12097] pgrefill 268 [ 390.743805][T12097] pgscan 267 [ 390.743805][T12097] pgsteal 0 [ 390.836786][T12097] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12093,uid=0 [ 390.852942][T12097] Memory cgroup out of memory: Killed process 12093 (syz-executor.2) total-vm:74836kB, anon-rss:18284kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 390.871755][ T1078] oom_reaper: reaped process 12093 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:07:11 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) 05:07:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setpriority(0x2, 0x0, 0x800) 05:07:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget(0x0, 0x0, 0x0) 05:07:11 executing program 0: add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 05:07:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:11 executing program 4: dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006d00), 0x400034b, 0x7ffffff7) [ 391.816542][T12106] dns_resolver: Unsupported server list version (0) [ 391.855754][T12106] dns_resolver: Unsupported server list version (0) 05:07:11 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x1}}) 05:07:11 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) fallocate(r0, 0x20, 0x0, 0x4f95) [ 392.006247][T12109] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 392.054905][T12109] CPU: 1 PID: 12109 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 392.063642][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.073696][T12109] Call Trace: [ 392.077004][T12109] dump_stack+0x11d/0x181 [ 392.081356][T12109] dump_header+0xaa/0x39c [ 392.085705][T12109] oom_kill_process.cold+0x10/0x15 [ 392.090835][T12109] out_of_memory+0x231/0xa60 [ 392.095460][T12109] ? __rcu_read_unlock+0x66/0x2f0 [ 392.100505][T12109] mem_cgroup_out_of_memory+0x128/0x150 [ 392.106128][T12109] try_charge+0xb6c/0xbf0 [ 392.110499][T12109] mem_cgroup_try_charge+0xd2/0x260 [ 392.115721][T12109] mem_cgroup_try_charge_delay+0x3a/0x80 [ 392.121404][T12109] __handle_mm_fault+0x197f/0x2e00 [ 392.126548][T12109] handle_mm_fault+0x21b/0x530 [ 392.131340][T12109] __get_user_pages+0x485/0x1130 [ 392.136546][T12109] populate_vma_page_range+0xe6/0x100 [ 392.141955][T12109] __mm_populate+0x168/0x2a0 [ 392.146576][T12109] __x64_sys_mlockall+0x2e3/0x320 [ 392.151656][T12109] do_syscall_64+0xcc/0x3a0 [ 392.156207][T12109] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 392.162127][T12109] RIP: 0033:0x45c449 [ 392.166046][T12109] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 392.185836][T12109] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 392.194282][T12109] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 392.202262][T12109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 392.210235][T12109] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 392.218342][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 392.226378][T12109] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 392.236714][T12109] memory: usage 307200kB, limit 307200kB, failcnt 1390 [ 392.243734][T12109] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 392.251127][T12109] Memory cgroup stats for /syz2: [ 392.251333][T12109] anon 309575680 [ 392.251333][T12109] file 0 [ 392.251333][T12109] kernel_stack 331776 [ 392.251333][T12109] slab 946176 [ 392.251333][T12109] sock 0 [ 392.251333][T12109] shmem 0 [ 392.251333][T12109] file_mapped 0 [ 392.251333][T12109] file_dirty 0 [ 392.251333][T12109] file_writeback 0 [ 392.251333][T12109] anon_thp 272629760 [ 392.251333][T12109] inactive_anon 88375296 [ 392.251333][T12109] active_anon 8929280 [ 392.251333][T12109] inactive_file 0 [ 392.251333][T12109] active_file 135168 [ 392.251333][T12109] unevictable 212213760 [ 392.251333][T12109] slab_reclaimable 135168 [ 392.251333][T12109] slab_unreclaimable 811008 [ 392.251333][T12109] pgfault 80091 [ 392.251333][T12109] pgmajfault 0 [ 392.251333][T12109] workingset_refault 0 [ 392.251333][T12109] workingset_activate 0 [ 392.251333][T12109] workingset_nodereclaim 0 [ 392.251333][T12109] pgrefill 268 [ 392.251333][T12109] pgscan 267 [ 392.251333][T12109] pgsteal 0 [ 392.345571][T12109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12098,uid=0 [ 392.363383][T12109] Memory cgroup out of memory: Killed process 12098 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 392.541695][T12130] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 392.553618][T12130] CPU: 0 PID: 12130 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 392.562323][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.572391][T12130] Call Trace: [ 392.575698][T12130] dump_stack+0x11d/0x181 [ 392.580066][T12130] dump_header+0xaa/0x39c [ 392.584415][T12130] oom_kill_process.cold+0x10/0x15 [ 392.589635][T12130] out_of_memory+0x231/0xa60 [ 392.594246][T12130] ? __rcu_read_unlock+0x66/0x2f0 [ 392.599468][T12130] mem_cgroup_out_of_memory+0x128/0x150 [ 392.605067][T12130] try_charge+0xb6c/0xbf0 [ 392.609505][T12130] mem_cgroup_try_charge+0xd2/0x260 [ 392.614728][T12130] mem_cgroup_try_charge_delay+0x3a/0x80 [ 392.620487][T12130] wp_page_copy+0x322/0xf20 [ 392.625010][T12130] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 392.630935][T12130] ? __read_once_size+0x41/0xe0 [ 392.635809][T12130] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 392.641721][T12130] do_wp_page+0x192/0xd20 [ 392.646070][T12130] __handle_mm_fault+0x1d16/0x2e00 [ 392.651218][T12130] handle_mm_fault+0x21b/0x530 [ 392.655999][T12130] do_page_fault+0x496/0xa3d [ 392.660736][T12130] page_fault+0x34/0x40 [ 392.664892][T12130] RIP: 0033:0x403ecf [ 392.668798][T12130] Code: e7 87 00 00 74 0f 8b 05 a3 e7 87 00 39 45 24 0f 84 d6 01 00 00 80 3d a8 e7 87 00 00 0f 85 51 03 00 00 e8 24 2d 01 00 48 89 c3 00 00 00 00 00 4b 8d 44 6d 00 48 8d 3c c5 60 83 4d 00 48 8b 47 [ 392.688507][T12130] RSP: 002b:00007f631c5a3c90 EFLAGS: 00010207 [ 392.694584][T12130] RAX: 00007f631c5a46d4 RBX: 00007f631c5a46d4 RCX: 00000000004c2ee7 [ 392.702576][T12130] RDX: 000000000001d93d RSI: 0000000000000004 RDI: 000000000076c048 [ 392.710564][T12130] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 392.718571][T12130] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 392.726571][T12130] R13: 000000000000009b R14: 00000000004c2ee7 R15: 000000000076bfcc [ 392.739270][T12130] memory: usage 307200kB, limit 307200kB, failcnt 1442 [ 392.746207][T12130] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 392.753997][T12130] Memory cgroup stats for /syz2: [ 392.754221][T12130] anon 309477376 [ 392.754221][T12130] file 0 [ 392.754221][T12130] kernel_stack 331776 [ 392.754221][T12130] slab 946176 [ 392.754221][T12130] sock 0 [ 392.754221][T12130] shmem 0 [ 392.754221][T12130] file_mapped 0 [ 392.754221][T12130] file_dirty 0 [ 392.754221][T12130] file_writeback 0 [ 392.754221][T12130] anon_thp 270532608 [ 392.754221][T12130] inactive_anon 69881856 [ 392.754221][T12130] active_anon 8929280 [ 392.754221][T12130] inactive_file 0 [ 392.754221][T12130] active_file 135168 [ 392.754221][T12130] unevictable 230506496 [ 392.754221][T12130] slab_reclaimable 135168 [ 392.754221][T12130] slab_unreclaimable 811008 [ 392.754221][T12130] pgfault 81378 [ 392.754221][T12130] pgmajfault 0 [ 392.754221][T12130] workingset_refault 0 [ 392.754221][T12130] workingset_activate 0 [ 392.754221][T12130] workingset_nodereclaim 0 [ 392.754221][T12130] pgrefill 268 [ 392.754221][T12130] pgscan 267 [ 392.754221][T12130] pgsteal 0 [ 392.847373][T12130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12103,uid=0 [ 392.863397][T12130] Memory cgroup out of memory: Killed process 12103 (syz-executor.2) total-vm:74836kB, anon-rss:18276kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 392.882845][ T1078] oom_reaper: reaped process 12103 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:07:12 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:12 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) creat(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(r0, 0x100000003, 0x0, 0x28120001) 05:07:12 executing program 4: dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006d00), 0x400034b, 0x7ffffff7) 05:07:12 executing program 5: creat(&(0x7f0000000240)='./bus\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x0, 0x11209, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 05:07:12 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x10000000d) 05:07:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573353a400862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d846851b911fd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4a1db268e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12285daa2e5f0f0b9c0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a9"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fc", 0x57}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') pipe(0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x0) [ 393.471177][T12137] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 393.508478][T12137] CPU: 1 PID: 12137 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 393.517192][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.527274][T12137] Call Trace: [ 393.530589][T12137] dump_stack+0x11d/0x181 [ 393.534939][T12137] dump_header+0xaa/0x39c [ 393.539289][T12137] oom_kill_process.cold+0x10/0x15 [ 393.544690][T12137] out_of_memory+0x231/0xa60 [ 393.549367][T12137] mem_cgroup_out_of_memory+0x128/0x150 [ 393.554947][T12137] try_charge+0xb6c/0xbf0 [ 393.559421][T12137] mem_cgroup_try_charge+0xd2/0x260 [ 393.564800][T12137] mem_cgroup_try_charge_delay+0x3a/0x80 [ 393.570457][T12137] __handle_mm_fault+0x197f/0x2e00 [ 393.575654][T12137] handle_mm_fault+0x21b/0x530 [ 393.580456][T12137] __get_user_pages+0x485/0x1130 [ 393.585432][T12137] populate_vma_page_range+0xe6/0x100 [ 393.590897][T12137] __mm_populate+0x168/0x2a0 [ 393.595573][T12137] __x64_sys_mlockall+0x2e3/0x320 [ 393.600694][T12137] do_syscall_64+0xcc/0x3a0 [ 393.605218][T12137] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 393.611114][T12137] RIP: 0033:0x45c449 [ 393.615019][T12137] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.634632][T12137] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 393.643057][T12137] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 393.651126][T12137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 393.659106][T12137] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 05:07:13 executing program 1: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000e00)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 05:07:13 executing program 4: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x6, 0x3, 0xff}, 0x3, 0x3, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x1, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) [ 393.667124][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 393.675119][T12137] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c 05:07:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') pipe(0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 05:07:13 executing program 1: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) [ 393.842943][T12137] memory: usage 307200kB, limit 307200kB, failcnt 1476 [ 393.863598][T12137] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 393.882626][T12137] Memory cgroup stats for /syz2: [ 393.882834][T12137] anon 309583872 [ 393.882834][T12137] file 0 [ 393.882834][T12137] kernel_stack 331776 [ 393.882834][T12137] slab 946176 [ 393.882834][T12137] sock 0 [ 393.882834][T12137] shmem 0 [ 393.882834][T12137] file_mapped 0 [ 393.882834][T12137] file_dirty 0 [ 393.882834][T12137] file_writeback 0 [ 393.882834][T12137] anon_thp 270532608 [ 393.882834][T12137] inactive_anon 88367104 [ 393.882834][T12137] active_anon 8929280 [ 393.882834][T12137] inactive_file 0 [ 393.882834][T12137] active_file 135168 [ 393.882834][T12137] unevictable 212217856 [ 393.882834][T12137] slab_reclaimable 135168 [ 393.882834][T12137] slab_unreclaimable 811008 [ 393.882834][T12137] pgfault 81609 [ 393.882834][T12137] pgmajfault 0 [ 393.882834][T12137] workingset_refault 0 [ 393.882834][T12137] workingset_activate 0 [ 393.882834][T12137] workingset_nodereclaim 0 [ 393.882834][T12137] pgrefill 268 [ 393.882834][T12137] pgscan 267 [ 393.882834][T12137] pgsteal 0 [ 394.024574][T12137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12131,uid=0 [ 394.041304][T12137] Memory cgroup out of memory: Killed process 12131 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 05:07:13 executing program 3: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:13 executing program 4: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x6, 0x3, 0xff}, 0x3, 0x3, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x1, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) 05:07:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') pipe(0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 05:07:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) request_key(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') pipe(0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 05:07:14 executing program 4: syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x6, 0x3, 0xff}, 0x3, 0x3, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x1, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) 05:07:14 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x48002, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 05:07:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fc", 0x57}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{}]}) 05:07:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:14 executing program 4: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) lseek(r0, 0x0, 0x4) 05:07:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r3 = socket$alg(0x26, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 05:07:14 executing program 3: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r0, 0x0, 0x0, 0x4f95) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x78c14229}) [ 395.292647][T12211] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 395.339047][T12211] CPU: 0 PID: 12211 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 395.347759][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.357820][T12211] Call Trace: [ 395.361125][T12211] dump_stack+0x11d/0x181 [ 395.365474][T12211] dump_header+0xaa/0x39c [ 395.369851][T12211] oom_kill_process.cold+0x10/0x15 [ 395.374987][T12211] out_of_memory+0x231/0xa60 [ 395.379636][T12211] mem_cgroup_out_of_memory+0x128/0x150 [ 395.385242][T12211] try_charge+0xb6c/0xbf0 05:07:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x100000000278}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x803, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(0x0, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000580)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000), 0x1c) r5 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r5, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2", 0x44) sendfile(r5, r5, &(0x7f0000000200), 0xff8) r6 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='Z\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) [ 395.389679][T12211] mem_cgroup_try_charge+0xd2/0x260 [ 395.394900][T12211] mem_cgroup_try_charge_delay+0x3a/0x80 [ 395.400593][T12211] __handle_mm_fault+0x197f/0x2e00 [ 395.405745][T12211] handle_mm_fault+0x21b/0x530 [ 395.410546][T12211] __get_user_pages+0x485/0x1130 [ 395.415534][T12211] populate_vma_page_range+0xe6/0x100 [ 395.420926][T12211] __mm_populate+0x168/0x2a0 [ 395.425551][T12211] __x64_sys_mlockall+0x2e3/0x320 [ 395.430597][T12211] do_syscall_64+0xcc/0x3a0 [ 395.435129][T12211] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 395.441097][T12211] RIP: 0033:0x45c449 [ 395.445001][T12211] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 395.464646][T12211] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 395.473046][T12211] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 395.481003][T12211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 05:07:14 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = epoll_create(0x5) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)) [ 395.488972][T12211] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.496940][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 395.504899][T12211] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 395.513551][T12211] memory: usage 307200kB, limit 307200kB, failcnt 1517 [ 395.544656][T12211] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 395.553347][T12211] Memory cgroup stats for /syz2: [ 395.553512][T12211] anon 309661696 [ 395.553512][T12211] file 0 [ 395.553512][T12211] kernel_stack 331776 [ 395.553512][T12211] slab 946176 [ 395.553512][T12211] sock 0 [ 395.553512][T12211] shmem 0 [ 395.553512][T12211] file_mapped 0 [ 395.553512][T12211] file_dirty 0 [ 395.553512][T12211] file_writeback 0 [ 395.553512][T12211] anon_thp 270532608 [ 395.553512][T12211] inactive_anon 88473600 [ 395.553512][T12211] active_anon 8929280 [ 395.553512][T12211] inactive_file 0 [ 395.553512][T12211] active_file 135168 [ 395.553512][T12211] unevictable 212242432 [ 395.553512][T12211] slab_reclaimable 135168 [ 395.553512][T12211] slab_unreclaimable 811008 [ 395.553512][T12211] pgfault 83127 [ 395.553512][T12211] pgmajfault 0 [ 395.553512][T12211] workingset_refault 0 [ 395.553512][T12211] workingset_activate 0 [ 395.553512][T12211] workingset_nodereclaim 0 [ 395.553512][T12211] pgrefill 268 [ 395.553512][T12211] pgscan 267 [ 395.553512][T12211] pgsteal 0 [ 395.647708][T12211] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12183,uid=0 [ 395.664960][T12211] Memory cgroup out of memory: Killed process 12183 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 05:07:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect(r0, &(0x7f0000000280)=@xdp, 0x80) [ 395.697636][ T1078] oom_reaper: reaped process 12183 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:07:15 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7fff, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r4 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000580)="d481e106c29b6edb226dbdcdec9fdfbc23a9f9435ab767eb5c7e60f74d7055c65c932550bdad4e1bec30932e6bdc879a5110e494d8a7d54ef30a89b9b07c4be84e6af05468f7358ea9161c7a6b362124443b456ee400efbd4e785a609da8a5d114f7492463449dc7cf046150bdbb309850edc81d43a26628c2c4cb78d76fbd87fd9393db845a9fab796b88b3af204f5c7eeb2d65821437e16b987de47ae6eff3bf5e2e1f6b79847294bcad598ddb85f4a18b84a02fdab3a0ac72aa743ad4c724c8a8b24656132667d031100658b01c58ae5565a0"}], 0x0, 0x7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r4, 0x10, 0x0) r5 = creat(0x0, 0x0) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xffffffffffffbffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x0, 0xa0) connect(r6, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x0, @local}, 0x5a, {0x2, 0x4e20, @loopback}, 'wg0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r8, 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f00000008c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r10, 0x0, 0x1) write$binfmt_elf64(r9, &(0x7f0000000540)=ANY=[@ANYRESOCT=r10], 0x17) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x4d75ae3d6e59cb9b) lseek(r11, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r11, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r11, 0x100000003, 0x0, 0x28120001) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) 05:07:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) 05:07:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) 05:07:15 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) 05:07:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)) shutdown(r0, 0x0) 05:07:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00", 0x53}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r3 = socket$alg(0x26, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 05:07:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fallocate(r1, 0x11, 0x0, 0x2001) 05:07:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) 05:07:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 05:07:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 05:07:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x7fff, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r3 = openat$cgroup_int(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000580)="d481e106c29b6edb226dbdcdec9fdfbc23a9f9435ab767eb5c7e60f74d7055c65c932550bdad4e1bec30932e6bdc879a5110e494d8a7d54ef30a89b9b07c4be84e6af05468f7358ea9161c7a6b362124443b456ee400efbd4e785a609da8a5d114f7492463449dc7cf046150bdbb309850edc81d43a26628c2c4cb78d76fbd87fd9393db845a9fab796b88b3af204f5c7eeb2d65821437e16b987de47ae6eff3bf5e2e1f6b79847294bcad598ddb85f4a18b84a02fdab3a0ac72aa743ad4c724c8a8b24656132667d031100658b01c58ae5565a0"}], 0x0, 0x7) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80000000a) fcntl$getownex(r3, 0x10, 0x0) r4 = creat(0x0, 0x0) fcntl$getown(r4, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xffffffffffffbffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x803, 0xa0) connect(r5, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x0, @local}, 0x5a, {0x2, 0x4e20, @loopback}, 'wg0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000840)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r7) setresgid(0x0, r7, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r8) setresgid(0x0, r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r9) setresgid(0x0, r9, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(0x0, 0x0, r10) setresgid(0x0, r10, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r11, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r12, 0x0) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r13, 0x0) setresgid(r10, r11, r13) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f00000008c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r14, 0x0, 0x1) r15 = creat(&(0x7f0000000240)='./bus\x00', 0x4d75ae3d6e59cb9b) lseek(r15, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r15, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r15, 0x100000003, 0x0, 0x28120001) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) 05:07:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_TIMERSLACK(0x1e) [ 396.785424][T12282] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 396.846822][T12282] CPU: 1 PID: 12282 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 396.855538][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.865612][T12282] Call Trace: [ 396.868922][T12282] dump_stack+0x11d/0x181 [ 396.873363][T12282] dump_header+0xaa/0x39c [ 396.877710][T12282] oom_kill_process.cold+0x10/0x15 [ 396.882839][T12282] out_of_memory+0x231/0xa60 [ 396.887453][T12282] mem_cgroup_out_of_memory+0x128/0x150 [ 396.893021][T12282] try_charge+0xb6c/0xbf0 [ 396.897389][T12282] mem_cgroup_try_charge+0xd2/0x260 [ 396.902612][T12282] mem_cgroup_try_charge_delay+0x3a/0x80 [ 396.908291][T12282] __handle_mm_fault+0x197f/0x2e00 [ 396.913436][T12282] handle_mm_fault+0x21b/0x530 [ 396.918217][T12282] __get_user_pages+0x485/0x1130 [ 396.923265][T12282] populate_vma_page_range+0xe6/0x100 [ 396.928766][T12282] __mm_populate+0x168/0x2a0 [ 396.933381][T12282] __x64_sys_mlockall+0x2e3/0x320 [ 396.938426][T12282] do_syscall_64+0xcc/0x3a0 05:07:16 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x1, 0xb859}) [ 396.943032][T12282] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 396.948933][T12282] RIP: 0033:0x45c449 [ 396.952896][T12282] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.972516][T12282] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 396.981016][T12282] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 396.988998][T12282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 396.996976][T12282] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 397.004951][T12282] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 397.012930][T12282] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c 05:07:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x6}]}) 05:07:16 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000000)) [ 397.189875][T12282] memory: usage 307200kB, limit 307200kB, failcnt 1574 [ 397.212596][T12282] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 397.227797][ T27] audit: type=1326 audit(1582607236.625:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12308 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f28a code=0x0 [ 397.242678][T12282] Memory cgroup stats for /syz2: [ 397.242885][T12282] anon 309657600 [ 397.242885][T12282] file 0 [ 397.242885][T12282] kernel_stack 368640 [ 397.242885][T12282] slab 946176 [ 397.242885][T12282] sock 0 [ 397.242885][T12282] shmem 0 [ 397.242885][T12282] file_mapped 0 [ 397.242885][T12282] file_dirty 0 [ 397.242885][T12282] file_writeback 0 [ 397.242885][T12282] anon_thp 270532608 [ 397.242885][T12282] inactive_anon 88416256 [ 397.242885][T12282] active_anon 8929280 [ 397.242885][T12282] inactive_file 0 [ 397.242885][T12282] active_file 135168 [ 397.242885][T12282] unevictable 212238336 [ 397.242885][T12282] slab_reclaimable 135168 [ 397.242885][T12282] slab_unreclaimable 811008 [ 397.242885][T12282] pgfault 84645 [ 397.242885][T12282] pgmajfault 0 [ 397.242885][T12282] workingset_refault 0 [ 397.242885][T12282] workingset_activate 0 [ 397.242885][T12282] workingset_nodereclaim 0 [ 397.242885][T12282] pgrefill 268 [ 397.242885][T12282] pgscan 267 [ 397.242885][T12282] pgsteal 0 [ 397.352111][T12282] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12242,uid=0 [ 397.378988][T12282] Memory cgroup out of memory: Killed process 12242 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 397.416832][ T1078] oom_reaper: reaped process 12242 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 05:07:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00", 0x53}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:17 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000000)) 05:07:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r3 = socket$alg(0x26, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 05:07:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) 05:07:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) 05:07:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) 05:07:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00", 0x53}], 0x1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 05:07:17 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, &(0x7f0000000080)) 05:07:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r3 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)={r6, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r6, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r7 = dup2(r0, r0) write$P9_RMKNOD(r7, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) 05:07:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:07:17 executing program 1: pipe(&(0x7f0000000080)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) fcntl$dupfd(r1, 0x0, r2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 398.560917][T12358] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 398.603245][T12358] CPU: 0 PID: 12358 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 398.611970][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.622025][T12358] Call Trace: [ 398.625330][T12358] dump_stack+0x11d/0x181 [ 398.629692][T12358] dump_header+0xaa/0x39c [ 398.634043][T12358] oom_kill_process.cold+0x10/0x15 [ 398.639210][T12358] out_of_memory+0x231/0xa60 [ 398.643823][T12358] mem_cgroup_out_of_memory+0x128/0x150 [ 398.649394][T12358] try_charge+0xb6c/0xbf0 [ 398.653758][T12358] mem_cgroup_try_charge+0xd2/0x260 [ 398.659023][T12358] mem_cgroup_try_charge_delay+0x3a/0x80 [ 398.664702][T12358] __handle_mm_fault+0x197f/0x2e00 [ 398.669851][T12358] handle_mm_fault+0x21b/0x530 [ 398.674679][T12358] __get_user_pages+0x485/0x1130 [ 398.679652][T12358] populate_vma_page_range+0xe6/0x100 [ 398.685079][T12358] __mm_populate+0x168/0x2a0 [ 398.689707][T12358] __x64_sys_mlockall+0x2e3/0x320 [ 398.694814][T12358] do_syscall_64+0xcc/0x3a0 [ 398.699337][T12358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 398.705237][T12358] RIP: 0033:0x45c449 [ 398.709231][T12358] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.728858][T12358] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 398.737282][T12358] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 398.745508][T12358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 398.753490][T12358] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 398.761472][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 398.769470][T12358] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 398.787899][T12358] memory: usage 307200kB, limit 307200kB, failcnt 1610 [ 398.794888][T12358] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:07:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) 05:07:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') memfd_create(&(0x7f0000000780)='\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) 05:07:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 398.802174][T12358] Memory cgroup stats for /syz2: [ 398.802367][T12358] anon 309678080 [ 398.802367][T12358] file 0 [ 398.802367][T12358] kernel_stack 331776 [ 398.802367][T12358] slab 946176 [ 398.802367][T12358] sock 0 [ 398.802367][T12358] shmem 0 [ 398.802367][T12358] file_mapped 0 [ 398.802367][T12358] file_dirty 0 [ 398.802367][T12358] file_writeback 0 [ 398.802367][T12358] anon_thp 270532608 [ 398.802367][T12358] inactive_anon 88674304 [ 398.802367][T12358] active_anon 8929280 [ 398.802367][T12358] inactive_file 0 [ 398.802367][T12358] active_file 135168 [ 398.802367][T12358] unevictable 212377600 [ 398.802367][T12358] slab_reclaimable 135168 [ 398.802367][T12358] slab_unreclaimable 811008 [ 398.802367][T12358] pgfault 86163 [ 398.802367][T12358] pgmajfault 0 [ 398.802367][T12358] workingset_refault 0 [ 398.802367][T12358] workingset_activate 0 [ 398.802367][T12358] workingset_nodereclaim 0 [ 398.802367][T12358] pgrefill 268 [ 398.802367][T12358] pgscan 267 [ 398.802367][T12358] pgsteal 0 05:07:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') memfd_create(&(0x7f0000000780)='\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) [ 398.945757][T12358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12337,uid=0 [ 398.973163][T12358] Memory cgroup out of memory: Killed process 12337 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 05:07:18 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006d00), 0x400034b, 0x7ffffff7) [ 399.030533][ T1078] oom_reaper: reaped process 12337 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:07:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') memfd_create(&(0x7f0000000780)='\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) 05:07:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001280)=""/4105, 0x1009}], 0x1) 05:07:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000060000006a7d"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200000200000000000097d3d34473bef006325d825524ab54beb7a03a4761bca745657c1af39bb9e9878046d06fd0da6bd14636c86e90f2a75423ca9740c49d36f281af53e9490970cda84c7fed18434e67da7fdfb1c0e81de22cbcbaa207d5b61a247fbe6842cebd28a6da21a8af8cc404dfb79619bf74cb70bbc6b3f3dc09e023d1f5bcddbe05eb6598baa70a95ae181441fd58f390d4e4dbb433ec4649a0caf163ae6424c694b5f2b23cfd08e97a8d78967936f3cfe62d26441e32246b0844e1a96b53d2697e7eb0711cf1107c229d91cafba3834dfbf769741aa450a57d29a522bdaaf30ce10c29875c"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) [ 399.570510][T12358] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 399.581957][T12358] CPU: 0 PID: 12358 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 399.590702][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.600757][T12358] Call Trace: [ 399.604130][T12358] dump_stack+0x11d/0x181 [ 399.608474][T12358] dump_header+0xaa/0x39c [ 399.612954][T12358] oom_kill_process.cold+0x10/0x15 [ 399.618082][T12358] out_of_memory+0x231/0xa60 [ 399.622698][T12358] mem_cgroup_out_of_memory+0x128/0x150 [ 399.628361][T12358] try_charge+0xb6c/0xbf0 [ 399.632762][T12358] mem_cgroup_try_charge+0xd2/0x260 [ 399.638010][T12358] mem_cgroup_try_charge_delay+0x3a/0x80 [ 399.643663][T12358] wp_page_copy+0x322/0xf20 [ 399.648258][T12358] ? __read_once_size+0x41/0xe0 [ 399.653184][T12358] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 399.659093][T12358] do_wp_page+0x192/0xd20 [ 399.663438][T12358] __handle_mm_fault+0x1d16/0x2e00 [ 399.668612][T12358] handle_mm_fault+0x21b/0x530 [ 399.673392][T12358] __get_user_pages+0x485/0x1130 [ 399.678500][T12358] populate_vma_page_range+0xe6/0x100 [ 399.683907][T12358] __mm_populate+0x168/0x2a0 [ 399.688522][T12358] __x64_sys_mlockall+0x2e3/0x320 [ 399.693663][T12358] do_syscall_64+0xcc/0x3a0 [ 399.698189][T12358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 399.704094][T12358] RIP: 0033:0x45c449 [ 399.708004][T12358] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.728058][T12358] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 399.736503][T12358] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 399.744646][T12358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 399.752637][T12358] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 399.760620][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 399.768660][T12358] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 399.780381][T12358] memory: usage 307200kB, limit 307200kB, failcnt 1634 [ 399.787514][T12358] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 399.795606][T12358] Memory cgroup stats for /syz2: [ 399.795719][T12358] anon 309710848 [ 399.795719][T12358] file 0 [ 399.795719][T12358] kernel_stack 331776 [ 399.795719][T12358] slab 946176 [ 399.795719][T12358] sock 0 [ 399.795719][T12358] shmem 0 [ 399.795719][T12358] file_mapped 0 [ 399.795719][T12358] file_dirty 0 [ 399.795719][T12358] file_writeback 0 [ 399.795719][T12358] anon_thp 270532608 [ 399.795719][T12358] inactive_anon 70123520 [ 399.795719][T12358] active_anon 8929280 [ 399.795719][T12358] inactive_file 0 [ 399.795719][T12358] active_file 135168 [ 399.795719][T12358] unevictable 230772736 [ 399.795719][T12358] slab_reclaimable 135168 [ 399.795719][T12358] slab_unreclaimable 811008 [ 399.795719][T12358] pgfault 87450 [ 399.795719][T12358] pgmajfault 0 [ 399.795719][T12358] workingset_refault 0 [ 399.795719][T12358] workingset_activate 0 [ 399.795719][T12358] workingset_nodereclaim 0 [ 399.795719][T12358] pgrefill 268 [ 399.795719][T12358] pgscan 267 [ 399.795719][T12358] pgsteal 0 [ 399.890301][T12358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12357,uid=0 [ 399.905860][T12358] Memory cgroup out of memory: Killed process 12358 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 399.923717][ T1078] oom_reaper: reaped process 12358 (syz-executor.2), now anon-rss:18384kB, file-rss:56424kB, shmem-rss:0kB 05:07:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) socket$inet(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r6 = dup2(r0, r0) write$P9_RMKNOD(r6, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:19 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006d00), 0x400034b, 0x7ffffff7) 05:07:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) 05:07:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x9, &(0x7f0000000000)) 05:07:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) [ 400.061913][T12421] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 400.074257][T12423] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 05:07:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_get$pid(0x1, 0x0) [ 400.224452][T12429] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 400.234714][T12429] CPU: 0 PID: 12429 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 400.243394][T12429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.253480][T12429] Call Trace: [ 400.256864][T12429] dump_stack+0x11d/0x181 [ 400.261208][T12429] dump_header+0xaa/0x39c [ 400.265554][T12429] oom_kill_process.cold+0x10/0x15 [ 400.270693][T12429] out_of_memory+0x231/0xa60 [ 400.275309][T12429] mem_cgroup_out_of_memory+0x128/0x150 [ 400.280885][T12429] try_charge+0xb6c/0xbf0 [ 400.285352][T12429] mem_cgroup_try_charge+0xd2/0x260 [ 400.290619][T12429] mem_cgroup_try_charge_delay+0x3a/0x80 [ 400.296279][T12429] __handle_mm_fault+0x197f/0x2e00 [ 400.301487][T12429] handle_mm_fault+0x21b/0x530 [ 400.306268][T12429] __get_user_pages+0x485/0x1130 [ 400.311235][T12429] populate_vma_page_range+0xe6/0x100 [ 400.316707][T12429] __mm_populate+0x168/0x2a0 [ 400.321316][T12429] __x64_sys_mlockall+0x2e3/0x320 [ 400.326358][T12429] do_syscall_64+0xcc/0x3a0 [ 400.330917][T12429] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 400.336816][T12429] RIP: 0033:0x45c449 [ 400.340784][T12429] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.360405][T12429] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 400.368825][T12429] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 400.376804][T12429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 400.384788][T12429] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 400.392771][T12429] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 400.400818][T12429] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 400.409656][T12429] memory: usage 307200kB, limit 307200kB, failcnt 1646 [ 400.416590][T12429] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.423497][T12429] Memory cgroup stats for /syz2: [ 400.423696][T12429] anon 309772288 [ 400.423696][T12429] file 0 [ 400.423696][T12429] kernel_stack 331776 [ 400.423696][T12429] slab 946176 [ 400.423696][T12429] sock 0 [ 400.423696][T12429] shmem 0 [ 400.423696][T12429] file_mapped 0 [ 400.423696][T12429] file_dirty 0 [ 400.423696][T12429] file_writeback 0 [ 400.423696][T12429] anon_thp 270532608 [ 400.423696][T12429] inactive_anon 88592384 [ 400.423696][T12429] active_anon 8929280 [ 400.423696][T12429] inactive_file 0 [ 400.423696][T12429] active_file 135168 [ 400.423696][T12429] unevictable 212344832 [ 400.423696][T12429] slab_reclaimable 135168 [ 400.423696][T12429] slab_unreclaimable 811008 [ 400.423696][T12429] pgfault 87681 [ 400.423696][T12429] pgmajfault 0 [ 400.423696][T12429] workingset_refault 0 [ 400.423696][T12429] workingset_activate 0 [ 400.423696][T12429] workingset_nodereclaim 0 [ 400.423696][T12429] pgrefill 268 [ 400.423696][T12429] pgscan 267 [ 400.423696][T12429] pgsteal 0 [ 400.516846][T12429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12411,uid=0 [ 400.532522][T12429] Memory cgroup out of memory: Killed process 12411 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 400.552561][T12429] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 400.560338][ T1078] oom_reaper: reaped process 12411 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 400.562770][T12429] CPU: 0 PID: 12429 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 400.562792][T12429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.592649][T12429] Call Trace: [ 400.596038][T12429] dump_stack+0x11d/0x181 [ 400.600433][T12429] dump_header+0xaa/0x39c [ 400.604774][T12429] oom_kill_process.cold+0x10/0x15 [ 400.609909][T12429] out_of_memory+0x231/0xa60 [ 400.614560][T12429] mem_cgroup_out_of_memory+0x128/0x150 [ 400.620132][T12429] try_charge+0xb6c/0xbf0 [ 400.624622][T12429] mem_cgroup_try_charge+0xd2/0x260 [ 400.629903][T12429] mem_cgroup_try_charge_delay+0x3a/0x80 [ 400.635590][T12429] __handle_mm_fault+0x197f/0x2e00 [ 400.640713][T12429] handle_mm_fault+0x21b/0x530 [ 400.645482][T12429] __get_user_pages+0x485/0x1130 [ 400.650427][T12429] populate_vma_page_range+0xe6/0x100 [ 400.655807][T12429] __mm_populate+0x168/0x2a0 [ 400.660383][T12429] __x64_sys_mlockall+0x2e3/0x320 [ 400.665421][T12429] do_syscall_64+0xcc/0x3a0 [ 400.669974][T12429] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 400.675912][T12429] RIP: 0033:0x45c449 [ 400.679793][T12429] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.699406][T12429] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 400.707806][T12429] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 400.715807][T12429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 400.723870][T12429] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 400.731834][T12429] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 400.739836][T12429] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 400.747995][T12429] memory: usage 288644kB, limit 307200kB, failcnt 1652 [ 400.754924][T12429] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.761846][T12429] Memory cgroup stats for /syz2: [ 400.762038][T12429] anon 290951168 [ 400.762038][T12429] file 0 [ 400.762038][T12429] kernel_stack 331776 [ 400.762038][T12429] slab 946176 [ 400.762038][T12429] sock 0 [ 400.762038][T12429] shmem 0 [ 400.762038][T12429] file_mapped 0 [ 400.762038][T12429] file_dirty 0 [ 400.762038][T12429] file_writeback 0 [ 400.762038][T12429] anon_thp 255852544 [ 400.762038][T12429] inactive_anon 69767168 [ 400.762038][T12429] active_anon 8929280 [ 400.762038][T12429] inactive_file 0 [ 400.762038][T12429] active_file 135168 [ 400.762038][T12429] unevictable 212344832 [ 400.762038][T12429] slab_reclaimable 135168 [ 400.762038][T12429] slab_unreclaimable 811008 [ 400.762038][T12429] pgfault 87681 [ 400.762038][T12429] pgmajfault 0 [ 400.762038][T12429] workingset_refault 0 [ 400.762038][T12429] workingset_activate 0 [ 400.762038][T12429] workingset_nodereclaim 0 [ 400.762038][T12429] pgrefill 268 [ 400.762038][T12429] pgscan 267 [ 400.762038][T12429] pgsteal 0 [ 400.855207][T12429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11118,uid=0 [ 400.870799][T12429] Memory cgroup out of memory: Killed process 11118 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 400.892619][ T1078] oom_reaper: reaped process 11118 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 05:07:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:07:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) 05:07:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe) 05:07:21 executing program 0: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x2000c01a) fallocate(r0, 0x0, 0x0, 0x28120001) 05:07:21 executing program 4: 05:07:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) socket$inet(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r6 = dup2(r0, r0) write$P9_RMKNOD(r6, &(0x7f0000000000)={0xff06}, 0xffffff57) 05:07:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7}, 0x7) 05:07:21 executing program 1: 05:07:21 executing program 4: 05:07:21 executing program 0: 05:07:21 executing program 5: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 05:07:21 executing program 1: [ 402.339563][T12452] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 402.350163][T12452] CPU: 1 PID: 12452 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 402.358876][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.368940][T12452] Call Trace: [ 402.372253][T12452] dump_stack+0x11d/0x181 [ 402.376608][T12452] dump_header+0xaa/0x39c [ 402.380991][T12452] oom_kill_process.cold+0x10/0x15 [ 402.386117][T12452] out_of_memory+0x231/0xa60 [ 402.390742][T12452] mem_cgroup_out_of_memory+0x128/0x150 [ 402.396312][T12452] try_charge+0xb6c/0xbf0 [ 402.400674][T12452] mem_cgroup_try_charge+0xd2/0x260 [ 402.405935][T12452] mem_cgroup_try_charge_delay+0x3a/0x80 [ 402.411590][T12452] wp_page_copy+0x322/0xf20 [ 402.416243][T12452] ? __read_once_size+0x41/0xe0 [ 402.421135][T12452] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 402.427197][T12452] do_wp_page+0x192/0xd20 [ 402.431540][T12452] ? __handle_mm_fault+0xbd5/0x2e00 [ 402.436757][T12452] __handle_mm_fault+0x1d16/0x2e00 [ 402.441960][T12452] handle_mm_fault+0x21b/0x530 [ 402.446743][T12452] __get_user_pages+0x485/0x1130 [ 402.451807][T12452] populate_vma_page_range+0xe6/0x100 [ 402.457194][T12452] __mm_populate+0x168/0x2a0 [ 402.461800][T12452] __x64_sys_mlockall+0x2e3/0x320 [ 402.466889][T12452] do_syscall_64+0xcc/0x3a0 [ 402.471417][T12452] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 402.477313][T12452] RIP: 0033:0x45c449 [ 402.481257][T12452] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.500976][T12452] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 402.509400][T12452] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 402.517462][T12452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 402.525496][T12452] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 402.533477][T12452] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 402.541471][T12452] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 402.551563][T12452] memory: usage 307200kB, limit 307200kB, failcnt 1685 [ 402.558523][T12452] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 402.565553][T12452] Memory cgroup stats for /syz2: [ 402.567033][T12452] anon 309506048 [ 402.567033][T12452] file 0 [ 402.567033][T12452] kernel_stack 331776 [ 402.567033][T12452] slab 946176 [ 402.567033][T12452] sock 0 [ 402.567033][T12452] shmem 0 [ 402.567033][T12452] file_mapped 0 [ 402.567033][T12452] file_dirty 0 [ 402.567033][T12452] file_writeback 0 [ 402.567033][T12452] anon_thp 270532608 [ 402.567033][T12452] inactive_anon 88866816 [ 402.567033][T12452] active_anon 8957952 [ 402.567033][T12452] inactive_file 0 [ 402.567033][T12452] active_file 135168 [ 402.567033][T12452] unevictable 211492864 [ 402.567033][T12452] slab_reclaimable 135168 [ 402.567033][T12452] slab_unreclaimable 811008 [ 402.567033][T12452] pgfault 90486 [ 402.567033][T12452] pgmajfault 0 [ 402.567033][T12452] workingset_refault 0 [ 402.567033][T12452] workingset_activate 0 [ 402.567033][T12452] workingset_nodereclaim 0 [ 402.567033][T12452] pgrefill 268 [ 402.567033][T12452] pgscan 267 [ 402.567033][T12452] pgsteal 0 [ 402.660523][T12452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12446,uid=0 [ 402.700435][T12452] Memory cgroup out of memory: Killed process 12446 (syz-executor.2) total-vm:74704kB, anon-rss:18252kB, file-rss:56432kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 402.724338][ T1078] oom_reaper: reaped process 12446 (syz-executor.2), now anon-rss:18252kB, file-rss:56424kB, shmem-rss:0kB [ 404.590090][ T0] NOHZ: local_softirq_pending 08 05:07:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b", 0x39}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 05:07:24 executing program 1: 05:07:24 executing program 5: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) 05:07:24 executing program 4: 05:07:24 executing program 0: 05:07:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) socket$inet(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r6 = dup2(r0, r0) write$P9_RMKNOD(r6, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 404.969198][ C0] ================================================================== [ 404.977505][ C0] BUG: KCSAN: data-race in yama_ptracer_del / yama_ptracer_del [ 404.985249][ C0] [ 404.987689][ C0] write to 0xffff88809cb0ced0 of 1 bytes by interrupt on cpu 1: [ 404.995458][ C0] yama_ptracer_del+0x119/0x1a0 [ 405.000340][ C0] yama_task_free+0x22/0x30 [ 405.004965][ C0] security_task_free+0x43/0xa0 [ 405.009837][ C0] __put_task_struct+0xcd/0x360 [ 405.014916][ C0] delayed_put_task_struct+0x1a5/0x1d0 [ 405.020411][ C0] rcu_core+0x533/0x9f0 [ 405.024847][ C0] rcu_core_si+0x12/0x20 [ 405.028343][T12478] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 405.029262][ C0] __do_softirq+0x115/0x33f [ 405.029277][ C0] irq_exit+0xbb/0xe0 [ 405.029294][ C0] smp_apic_timer_interrupt+0xe6/0x280 [ 405.029321][ C0] apic_timer_interrupt+0xf/0x20 [ 405.039791][T12478] CPU: 1 PID: 12478 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 405.044261][ C0] __sanitizer_cov_trace_pc+0x26/0x50 [ 405.048228][T12478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.053866][ C0] copy_page_range+0xb77/0x1a00 [ 405.059526][T12478] Call Trace: [ 405.068269][ C0] dup_mm+0x74a/0xba0 [ 405.068298][ C0] copy_process+0x39d7/0x3b40 [ 405.073688][T12478] dump_stack+0x11d/0x181 [ 405.083902][ C0] _do_fork+0xfe/0x7a0 [ 405.088887][T12478] dump_header+0xaa/0x39c [ 405.092327][ C0] __x64_sys_clone+0x130/0x170 [ 405.096436][T12478] oom_kill_process.cold+0x10/0x15 [ 405.101248][ C0] do_syscall_64+0xcc/0x3a0 [ 405.105667][T12478] out_of_memory+0x231/0xa60 [ 405.109866][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 405.109932][ C0] [ 405.114298][T12478] mem_cgroup_out_of_memory+0x128/0x150 [ 405.119151][ C0] read to 0xffff88809cb0ced0 of 1 bytes by interrupt on cpu 0: [ 405.119170][ C0] yama_ptracer_del+0xd6/0x1a0 [ 405.119197][ C0] yama_task_free+0x22/0x30 [ 405.124383][T12478] try_charge+0xb6c/0xbf0 [ 405.128954][ C0] security_task_free+0x43/0xa0 [ 405.133616][T12478] mem_cgroup_try_charge+0xd2/0x260 [ 405.139460][ C0] __put_task_struct+0xcd/0x360 [ 405.141835][T12478] mem_cgroup_try_charge_delay+0x3a/0x80 [ 405.147342][ C0] delayed_put_task_struct+0x1a5/0x1d0 [ 405.154982][T12478] __handle_mm_fault+0x197f/0x2e00 [ 405.159896][ C0] rcu_core+0x533/0x9f0 [ 405.164576][T12478] handle_mm_fault+0x21b/0x530 [ 405.168873][ C0] rcu_core_si+0x12/0x20 [ 405.173746][T12478] __get_user_pages+0x485/0x1130 [ 405.178964][ C0] __do_softirq+0x115/0x33f [ 405.178980][ C0] irq_exit+0xbb/0xe0 [ 405.179010][ C0] smp_apic_timer_interrupt+0xe6/0x280 [ 405.184244][T12478] populate_vma_page_range+0xe6/0x100 [ 405.190008][ C0] apic_timer_interrupt+0xf/0x20 [ 405.195636][T12478] __mm_populate+0x168/0x2a0 [ 405.200761][ C0] __tsan_func_exit+0x0/0x10 [ 405.205007][T12478] __x64_sys_mlockall+0x2e3/0x320 [ 405.209771][ C0] anon_vma_chain_link+0x75/0x110 [ 405.209788][ C0] anon_vma_clone+0x12c/0x3c0 [ 405.209816][ C0] anon_vma_fork+0x7d/0x280 [ 405.214687][T12478] do_syscall_64+0xcc/0x3a0 [ 405.214762][T12478] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 405.219680][ C0] dup_mm+0x71e/0xba0 [ 405.224320][T12478] RIP: 0033:0x45c449 [ 405.228461][ C0] copy_process+0x39d7/0x3b40 [ 405.234115][T12478] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.239491][ C0] _do_fork+0xfe/0x7a0 [ 405.244598][T12478] RSP: 002b:00007f631c5c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 405.249340][ C0] __x64_sys_clone+0x130/0x170 [ 405.249360][ C0] do_syscall_64+0xcc/0x3a0 [ 405.249377][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 405.249380][ C0] [ 405.249385][ C0] Reported by Kernel Concurrency Sanitizer on: [ 405.249412][ C0] CPU: 0 PID: 7690 Comm: udevd Not tainted 5.6.0-rc1-syzkaller #0 [ 405.254359][T12478] RAX: ffffffffffffffda RBX: 00007f631c5c56d4 RCX: 000000000045c449 [ 405.259564][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.264771][T12478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 405.269471][ C0] ================================================================== [ 405.274517][T12478] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 405.279216][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 405.285144][T12478] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 405.423785][T12478] R13: 0000000000000736 R14: 00000000004c9b56 R15: 000000000076bf2c [ 405.431942][ C0] CPU: 0 PID: 7690 Comm: udevd Not tainted 5.6.0-rc1-syzkaller #0 [ 405.432222][T12478] memory: usage 307200kB, limit 307200kB, failcnt 1699 [ 405.439906][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.439911][ C0] Call Trace: [ 405.439917][ C0] [ 405.439947][ C0] dump_stack+0x11d/0x181 [ 405.439996][ C0] panic+0x210/0x640 [ 405.447223][T12478] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 405.457441][ C0] ? vprintk_func+0x8d/0x140 [ 405.457468][ C0] kcsan_report.cold+0xc/0x1a [ 405.457492][ C0] kcsan_setup_watchpoint+0x307/0x400 [ 405.457513][ C0] __tsan_read1+0xc2/0x100 [ 405.457528][ C0] yama_ptracer_del+0xd6/0x1a0 [ 405.457549][ C0] yama_task_free+0x22/0x30 [ 405.457580][ C0] security_task_free+0x43/0xa0 [ 405.461039][T12478] Memory cgroup stats for /syz2: [ 405.461234][T12478] anon 309514240 [ 405.461234][T12478] file 0 [ 405.461234][T12478] kernel_stack 331776 [ 405.461234][T12478] slab 946176 [ 405.461234][T12478] sock 0 [ 405.461234][T12478] shmem 0 [ 405.461234][T12478] file_mapped 0 [ 405.461234][T12478] file_dirty 0 [ 405.461234][T12478] file_writeback 0 [ 405.461234][T12478] anon_thp 270532608 [ 405.461234][T12478] inactive_anon 105029632 [ 405.461234][T12478] active_anon 8957952 [ 405.461234][T12478] inactive_file 0 [ 405.461234][T12478] active_file 135168 [ 405.461234][T12478] unevictable 195444736 [ 405.461234][T12478] slab_reclaimable 135168 [ 405.461234][T12478] slab_unreclaimable 811008 [ 405.461234][T12478] pgfault 90750 [ 405.461234][T12478] pgmajfault 0 [ 405.461234][T12478] workingset_refault 0 [ 405.461234][T12478] workingset_activate 0 [ 405.461234][T12478] workingset_nodereclaim 0 [ 405.461234][T12478] pgrefill 268 [ 405.461234][T12478] pgscan 267 [ 405.461234][T12478] pgsteal 0 [ 405.464012][ C0] __put_task_struct+0xcd/0x360 [ 405.468337][T12478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12439,uid=0 [ 405.472529][ C0] delayed_put_task_struct+0x1a5/0x1d0 [ 405.472550][ C0] rcu_core+0x533/0x9f0 [ 405.472569][ C0] ? __write_once_size.constprop.0+0x20/0x20 [ 405.472602][ C0] rcu_core_si+0x12/0x20 [ 405.479582][T12478] Memory cgroup out of memory: Killed process 12439 (syz-executor.2) total-vm:74836kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 405.484099][ C0] __do_softirq+0x115/0x33f [ 405.671178][ C0] irq_exit+0xbb/0xe0 [ 405.675307][ C0] smp_apic_timer_interrupt+0xe6/0x280 [ 405.680827][ C0] apic_timer_interrupt+0xf/0x20 [ 405.685871][ C0] [ 405.689014][ C0] RIP: 0010:__tsan_func_exit+0x0/0x10 [ 405.694540][ C0] Code: 94 02 00 65 48 03 05 67 47 ad 7e 48 89 78 10 c3 66 2e 0f 1f 84 00 00 00 00 00 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f b6 05 49 88 cf [ 405.714891][ C0] RSP: 0018:ffffc900021afad0 EFLAGS: 00000212 ORIG_RAX: ffffffffffffff13 [ 405.723489][ C0] RAX: 0000000000000162 RBX: ffff8881261865a0 RCX: ffffffff86236658 [ 405.731661][ C0] RDX: ffff888121134848 RSI: ffff888121134848 RDI: ffff888121134848 [ 405.739990][ C0] RBP: ffffc900021afaf8 R08: 0000000000000000 R09: 0000888121134848 [ 405.748196][ C0] R10: 0000888122db1b08 R11: 000088812113484f R12: ffff888121134848 [ 405.756390][ C0] R13: ffff888121134848 R14: ffff888122db1b10 R15: ffff888121134848 [ 405.764711][ C0] ? __list_add_valid+0x62/0x80 [ 405.769905][ C0] anon_vma_chain_link+0x75/0x110 [ 405.774966][ C0] anon_vma_clone+0x12c/0x3c0 [ 405.779825][ C0] anon_vma_fork+0x7d/0x280 [ 405.784698][ C0] dup_mm+0x71e/0xba0 [ 405.788950][ C0] copy_process+0x39d7/0x3b40 [ 405.793755][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 405.799918][ C0] _do_fork+0xfe/0x7a0 [ 405.804206][ C0] ? __write_once_size+0x41/0xe0 [ 405.809320][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.815816][ C0] ? __fd_install+0x117/0x230 [ 405.820730][ C0] __x64_sys_clone+0x130/0x170 [ 405.825644][ C0] do_syscall_64+0xcc/0x3a0 [ 405.830338][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 405.836609][ C0] RIP: 0033:0x7faab2adef46 [ 405.841378][ C0] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 14 25 10 00 00 00 31 d2 49 81 c2 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 31 01 00 00 85 c0 41 89 c4 0f 85 3b 01 00 [ 405.863030][ C0] RSP: 002b:00007fffa48a2230 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 405.871807][ C0] RAX: ffffffffffffffda RBX: 00007fffa48a2230 RCX: 00007faab2adef46 [ 405.879812][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 405.887984][ C0] RBP: 00007fffa48a2290 R08: 0000000000001e0a R09: 0000000000001e0a [ 405.896161][ C0] R10: 00007faab33fba70 R11: 0000000000000246 R12: 0000000000000000 [ 405.904429][ C0] R13: 00007fffa48a2250 R14: 0000000000000005 R15: 0000000000000005 [ 405.914325][ C0] Kernel Offset: disabled [ 405.918877][ C0] Rebooting in 86400 seconds..