[ 32.664762] kauditd_printk_skb: 9 callbacks suppressed [ 32.664768] audit: type=1800 audit(1574900684.776:33): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.691988] audit: type=1800 audit(1574900684.776:34): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.479014] random: sshd: uninitialized urandom read (32 bytes read) [ 37.928584] audit: type=1400 audit(1574900690.036:35): avc: denied { map } for pid=6987 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.008651] random: sshd: uninitialized urandom read (32 bytes read) [ 38.683460] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.222' (ECDSA) to the list of known hosts. [ 44.282060] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/28 00:24:56 fuzzer started [ 44.478603] audit: type=1400 audit(1574900696.586:36): avc: denied { map } for pid=6996 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.256177] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/28 00:24:58 dialing manager at 10.128.0.105:37779 2019/11/28 00:24:58 syscalls: 2530 2019/11/28 00:24:58 code coverage: enabled 2019/11/28 00:24:58 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/28 00:24:58 extra coverage: extra coverage is not supported by the kernel 2019/11/28 00:24:58 setuid sandbox: enabled 2019/11/28 00:24:58 namespace sandbox: enabled 2019/11/28 00:24:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/28 00:24:58 fault injection: enabled 2019/11/28 00:24:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/28 00:24:58 net packet injection: enabled 2019/11/28 00:24:58 net device setup: enabled 2019/11/28 00:24:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/28 00:24:58 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 47.503577] random: crng init done 00:28:31 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0xfffffff5) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x1f, 0x2, 0x3, 0x0, 0x0, 0x40, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_config_ext={0x1, 0xffff}, 0x11910, 0x100000001, 0xd38a, 0x8, 0x47, 0x10000, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f000000a480)={0x0, 0x0, &(0x7f0000009280)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) 00:28:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="66539223b46ea2d53b3154be59d591e10785363940aed12f0400db2f00000022f1f169a4000000000000009fae167c0ae7a01f8d7544727c7fbd56a4cf9b8d9331c49884af0d9e1c46d22bdbd353de9a55c1787190a82d33438fea989cb8f7ae94e753ad3a216270ba715bb8f4042ed24b4e69fb4c7645ad14798da2b465fbd10e1f4028143a362852ecbb366880e849034c3d6d515a9ea3d59567cfd283233335c2ecba7094cc", 0xa7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 00:28:32 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x23, 0x1, 0x0, 0x0, {0x4, 0xe00000000000000}, [@nested={0x8, 0x9, [@generic="8b"]}]}, 0x1c}}, 0x0) 00:28:32 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 00:28:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 00:28:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 259.848627] audit: type=1400 audit(1574900911.956:37): avc: denied { map } for pid=6996 comm="syz-fuzzer" path="/root/syzkaller-shm942060766" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 259.896057] audit: type=1400 audit(1574900911.976:38): avc: denied { map } for pid=7014 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13832 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 260.271216] IPVS: ftp: loaded support on port[0] = 21 [ 261.106269] chnl_net:caif_netlink_parms(): no params data found [ 261.114434] IPVS: ftp: loaded support on port[0] = 21 [ 261.169163] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.176310] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.183955] device bridge_slave_0 entered promiscuous mode [ 261.195174] IPVS: ftp: loaded support on port[0] = 21 [ 261.204491] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.210959] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.217935] device bridge_slave_1 entered promiscuous mode [ 261.266879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 261.284084] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 261.296125] chnl_net:caif_netlink_parms(): no params data found [ 261.328296] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 261.335946] team0: Port device team_slave_0 added [ 261.343612] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 261.351498] team0: Port device team_slave_1 added [ 261.359026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 261.372676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 261.381462] IPVS: ftp: loaded support on port[0] = 21 [ 261.462687] device hsr_slave_0 entered promiscuous mode [ 261.510510] device hsr_slave_1 entered promiscuous mode [ 261.600390] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.606838] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.613963] device bridge_slave_0 entered promiscuous mode [ 261.623130] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.629488] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.636392] device bridge_slave_1 entered promiscuous mode [ 261.648771] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 261.656549] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 261.679119] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 261.700991] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 261.746227] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 261.753789] team0: Port device team_slave_0 added [ 261.759059] chnl_net:caif_netlink_parms(): no params data found [ 261.776688] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 261.784053] team0: Port device team_slave_1 added [ 261.805704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 261.814856] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.815398] IPVS: ftp: loaded support on port[0] = 21 [ 261.821317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.821689] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.839416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.854753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 261.922422] device hsr_slave_0 entered promiscuous mode [ 261.980350] device hsr_slave_1 entered promiscuous mode [ 262.020977] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 262.027781] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.034264] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.041310] device bridge_slave_0 entered promiscuous mode [ 262.049753] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.056436] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.063423] device bridge_slave_1 entered promiscuous mode [ 262.077782] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 262.102581] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 262.114338] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 262.132774] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 262.139843] team0: Port device team_slave_0 added [ 262.153650] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 262.161436] team0: Port device team_slave_1 added [ 262.189673] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.207571] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.219061] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 262.232083] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 262.260262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 262.272441] IPVS: ftp: loaded support on port[0] = 21 [ 262.306495] chnl_net:caif_netlink_parms(): no params data found [ 262.383679] device hsr_slave_0 entered promiscuous mode [ 262.420331] device hsr_slave_1 entered promiscuous mode [ 262.482969] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 262.497519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.525579] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 262.564200] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 262.577377] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.584287] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.591641] device bridge_slave_0 entered promiscuous mode [ 262.599482] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.605947] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.613138] device bridge_slave_1 entered promiscuous mode [ 262.631839] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 262.640805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.648292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.655687] chnl_net:caif_netlink_parms(): no params data found [ 262.677653] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 262.684314] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.693447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 262.701754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 262.711814] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 262.744216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.752609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.760593] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.766954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.776825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 262.813408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.821996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.829681] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.836301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.850922] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 262.858117] team0: Port device team_slave_0 added [ 262.863958] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 262.872676] team0: Port device team_slave_1 added [ 262.879926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 262.906699] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.914030] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.921166] device bridge_slave_0 entered promiscuous mode [ 262.928287] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 262.939036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.946335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 262.953680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 262.961534] chnl_net:caif_netlink_parms(): no params data found [ 262.975312] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.982779] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.989683] device bridge_slave_1 entered promiscuous mode [ 263.001232] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.007891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.018830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 263.072443] device hsr_slave_0 entered promiscuous mode [ 263.110664] device hsr_slave_1 entered promiscuous mode [ 263.155583] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 263.163079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.187079] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 263.200725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 263.214763] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.222198] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 263.231026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.239355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.247102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.254181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.261868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.277020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 263.285978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 263.295688] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 263.302028] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.319346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.327662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.343621] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.350000] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.357620] device bridge_slave_0 entered promiscuous mode [ 263.365447] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.372541] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.379635] device bridge_slave_1 entered promiscuous mode [ 263.393511] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 263.401271] team0: Port device team_slave_0 added [ 263.408693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 263.417526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 263.426099] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 263.438156] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 263.445882] team0: Port device team_slave_1 added [ 263.452267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.460599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.468349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.476439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.484366] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.490790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.497707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.507037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 263.524922] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 263.534377] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 263.542699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 263.552152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.563012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.572543] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 263.594444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 263.604057] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 263.611001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.625414] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 263.633231] team0: Port device team_slave_0 added [ 263.639582] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 263.647795] team0: Port device team_slave_1 added [ 263.658614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.667012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.674861] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.681397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.703343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 263.718540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 263.726528] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 263.772612] device hsr_slave_0 entered promiscuous mode [ 263.810493] device hsr_slave_1 entered promiscuous mode [ 263.850802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.858670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.873317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.887939] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.895750] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 263.903219] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 263.916583] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 263.927386] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 263.949646] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 263.957242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.964493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.976238] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.983333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 264.043695] device hsr_slave_0 entered promiscuous mode [ 264.080530] device hsr_slave_1 entered promiscuous mode [ 264.120852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.127988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.135877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.143965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.152993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.165826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 264.176138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.185106] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 264.193478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.201975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.224316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.235057] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 264.242907] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.251489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 264.263414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 264.272119] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 264.283069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.293410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.304684] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 264.313400] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 264.324561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.332267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.340449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.348259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.357096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.369959] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 264.382254] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 264.396432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.404480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.413751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 264.426203] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 264.441300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.449355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.458122] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.464897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.472532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.483870] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 264.493753] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 264.500128] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.507398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 264.522361] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 264.536768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 264.545553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.553838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.562582] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.569073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.576335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.583875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.591503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.599516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.608277] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.614688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.623701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 264.646922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 264.654341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.662012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.671185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.678976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.686881] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.693349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.703873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 264.712472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.736067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 264.748441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.763339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 264.778370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.791531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.799640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.808911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.820486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 264.852661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 264.864916] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.878555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.913171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 264.930048] hrtimer: interrupt took 44313 ns [ 264.936047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.958667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 264.968522] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 264.994632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.008615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.023950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.033979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.045868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.054940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.067141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 265.081042] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 265.087197] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.094848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.109821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.118665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.133302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 265.144571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 265.159445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.172504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.184272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.193812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.207949] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 265.218116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 265.231971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 265.243433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.254267] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 265.261270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.269873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 265.281320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 265.287559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.307853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 00:28:37 executing program 0: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x470, r0) [ 265.343385] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.349874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.351419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.378617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:28:37 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) [ 265.398218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.417064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.426010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.436400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.446822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 265.473805] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 265.485880] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.507734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 00:28:37 executing program 5: dup(0xffffffffffffffff) clone(0x100, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)="c00562eee479d7dc4a0565059dde054c7cdf40e02a81a78522487eb58d604aacbefdd1a6b2ed3e97cfcef6f4710664379b6067c704e10fd8c6103d174bab23e38bdf7dd17e34e4a9d549e2541ca6977468ac0933e5d054596ead62d859222560a526c204e0081673f262720e79cfac8b0491532d3c6ce54ccbfa27af24a8ee65a5a18511b317dd61372483e792dd571963049b138bd7acce8c08b64d1de712fb44f3") [ 265.525320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.550888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.558571] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.564988] bridge0: port 2(bridge_slave_1) entered forwarding state 00:28:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newsa={0x13c, 0x10, 0x963ddcda599079f3, 0x0, 0x0, {{@in, @in=@loopback}, {@in6=@loopback, 0x0, 0x33}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 00:28:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) [ 265.587934] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 265.614804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 265.639068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 265.646897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.656857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.664822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.672913] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.679279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.689117] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 265.699333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 265.709737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.717418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.725429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.736434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.745222] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 265.754488] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 265.764499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 265.777589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 00:28:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0e85667, &(0x7f0000000000)) [ 265.787183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 00:28:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) 00:28:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xea, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 265.817565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.827022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.834838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.846065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.862839] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.869362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.878115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.878384] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 265.886071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.916220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.926702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.946428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 265.961768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 265.978006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.986882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.998747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.011076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.021474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 266.031570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 266.039544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.047355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.057892] kvm: emulating exchange as write [ 266.069259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.089512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.102423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.116074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 266.128152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 266.138527] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.146084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.162648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.171661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.179306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.192395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 266.210773] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 266.216851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.231594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.248011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.258345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 266.275468] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 266.282374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.292719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.303339] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 266.309455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.318517] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 266.329745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.337812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.354998] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 266.371610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.381123] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 266.387390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.395710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.407036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.664996] audit: type=1400 audit(1574900918.776:39): avc: denied { create } for pid=7143 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:28:38 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgctl$IPC_RMID(r2, 0x0) [ 266.698735] audit: type=1400 audit(1574900918.796:40): avc: denied { write } for pid=7143 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:28:39 executing program 1: sched_setscheduler(0x0, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 00:28:39 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@commit={'commit'}}]}) [ 267.354682] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "" [ 267.414163] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "" 00:28:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 00:28:39 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@sunit={'sunit'}}, {@logbufs={'logbufs'}}]}) 00:28:39 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000800)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000340)='trusted.overlay.origin\x00', 0xfffffffffffffffe) 00:28:39 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet(0x2, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x0) 00:28:39 executing program 1: sched_setscheduler(0x0, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 00:28:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 267.798940] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 00:28:40 executing program 1: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='uid=']) [ 267.870625] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 267.924361] ntfs: (device loop1): parse_options(): The uid option requires an argument. 00:28:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) capset(&(0x7f00000000c0), 0x0) 00:28:40 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010607031dfffd946fa2830060200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) accept4(r1, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000740)=0x80, 0xcdc78934030c8861) r2 = socket$inet(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)=@hci={0x1f, r3}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="ea338a9ebfba524a1e76f7e05465018845b8362faa69351ba2f65ff9066ef36d47621a967761ea69c1d6943103123227997314cd931afcafb12de5", 0x3b}, {&(0x7f0000000200)="0710765f2ab7e9425eaf44aa544991052c61c367ac04649e9799ae9a98c2ec54a90dde6a9c4829c696e9d4da3c7456c4e672bb3211a77b3d760f54783ba560e6ed56d3730c17658623ccd3f571a0997756fc684f2b4bc7c71ae9ac168976b0e0bf8e2c277f3830c2621ccdbf4bbcec20894b3a00a151675596fa2db0e2245b602b4317857ec69c49d09691f3bd08bef5ec02a4e0bd040483496cf53d928f329dcb6d6f4a72d5855793a7605be842a0ab25c5b47405cccca2686300ec764ce036982744e5154c", 0xc6}, {&(0x7f0000000100)="2037717d488b004eb70d67c548c83a6e6106414311ccd8a51e8c005b7aa4658f4c340f2421c4adc878ea1b8c74f257229cef74c561bc6db317a2339dd00d4595988d35ef6b70836b4589bfe851003480b639785485c100e85d1963919b482de26c15f2fa60ae5f03f30f930075cb377ea0a13c5b8f8633ce3133d5e93388eaa679ac8aafe27575da03d9def3", 0x8c}, {&(0x7f0000000300)="96af8f57f4164c61baccf69b28529fe46420cf95a42fc2abd103e1ea968a49055351513ff786982196c2e8e1e86e7b3b9e54cc9050bc03d965ef2e38314a52650404f3f0451944fde8a74fcfe67366d3d85ecabda376c9c811800a3034c1fd865f823500b08703b9887ac3b2d97ace94b5e576def90ece43eeb2b2a27512861e9c3b20b3688448ebdc8189c2dbfb1dc971f876c09eb2e289ecd1b2236bf27a58cae574bc24433e8856e4e14582499140e7e02a90beb047ff", 0xb8}, {&(0x7f00000003c0)="e7507134db91ccee7949600dc9bf5579135ea80c527f9f2d3059a8eac3882e1650933b047e49856374ec00cf", 0x2c}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1d0}}], 0x1, 0x80) [ 267.994745] XFS (loop0): Invalid superblock magic number [ 268.029741] ntfs: (device loop1): parse_options(): The uid option requires an argument. 00:28:40 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x1}) 00:28:40 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2cf, &(0x7f0000000180)={&(0x7f00000002c0)=@newsa={0x138, 0x1a, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 00:28:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo:\x10\x03\x00', {0x2, 0x0, @rand_addr=0x7ffffffc}}) [ 268.103952] audit: type=1400 audit(1574900920.216:41): avc: denied { create } for pid=7228 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 268.149362] audit: type=1400 audit(1574900920.216:42): avc: denied { write } for pid=7228 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 00:28:40 executing program 1: r0 = getpid() r1 = open(&(0x7f0000000000)='./file0\x00', 0x4bf303, 0x14) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r3, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) set_mempolicy(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x44031, 0xffffffffffffffff, 0x0) 00:28:40 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) vmsplice(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 00:28:40 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2cf, &(0x7f0000000180)={&(0x7f00000002c0)=@newsa={0x138, 0x1a, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 268.214018] audit: type=1400 audit(1574900920.216:43): avc: denied { ioctl } for pid=7228 comm="syz-executor.3" path="socket:[27445]" dev="sockfs" ino=27445 ioctlcmd=0x8933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 00:28:40 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x2cf, &(0x7f0000000180)={&(0x7f00000002c0)=@newsa={0x138, 0x1a, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) [ 268.309200] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.364683] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 268.391016] devpts: called with bogus options 00:28:40 executing program 3: 00:28:40 executing program 2: 00:28:40 executing program 0: 00:28:40 executing program 3: 00:28:40 executing program 0: 00:28:40 executing program 2: 00:28:40 executing program 3: syz_emit_ethernet(0x300500, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 00:28:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe52, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000022000104000000a6ffffffffffffffe28f139814a2b0bf0b6511932bfa21a9ba54615f6d349dab4f078f12b71406822ddc8af61121be129ca878cd55927a3d6d4ee9a52d00003ec6cf5f2b916620e885549ca6df674f8e5800f9fe4e3527417b9b0c1412faf400d106b9695b64ffa2c3dde8a49f64f82b188b9fdbd95ddbf7f18ac501460e1251d1f43718384f34e50b2c0e6bdf4069f29b6b1549e82a382687b6b79e18c01668c02a3c8aca5497eb78d70e80aa0b23365f8811998c3677b31e2aecdd643aaab724f6e98de32fcf0d24e7da1b77bb65f06ddb724a1059edfc56194b"], 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@allocspi={0xf8, 0x16, 0x1, 0x70bd26, 0x0, {{{@in=@multicast2, @in=@remote}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback}, 0x0, 0x8000}}, 0xf8}, 0x8}, 0x0) [ 268.756776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 268.777380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:28:41 executing program 1: r0 = getpid() r1 = open(&(0x7f0000000000)='./file0\x00', 0x4bf303, 0x14) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r3, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) set_mempolicy(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x44031, 0xffffffffffffffff, 0x0) [ 268.818325] audit: type=1400 audit(1574900920.926:44): avc: denied { map } for pid=7246 comm="syz-executor.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27814 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 268.890247] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.899799] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 269.163374] devpts: called with bogus options 00:28:41 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) vmsplice(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 00:28:41 executing program 0: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="13cd0f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)="1e", 0x1}], 0x3}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="12ec93badbaa8968ff780b6b7ba0294ccf3e5f5e6576ec90b40d3b620913339c92037966edc9065bae616ab9614614aadb", @ANYPTR64], 0x0, 0x39}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:28:41 executing program 2: mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', 0x0, 0x0, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffd22) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1081082) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000001c0)) ptrace$getregset(0x4205, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x20, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4479, 0xfffffffffffff000, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, "3431b6d4ebd9bc5b066a598cde04f8b1e907978bca1791ce5968d3b808ca5a9155449afffc970f33225eab59e77a9704a28df3f9350010700fbe1ed4da7db4b6", "2cfc9bb499003bd59175414ae825b9c1fca58f25b9ee26ca667d352769e74a162aec16fd5de2d46bc628d7ffce790d8fd9f58c1d91ade68f9c819fdaf77e2e9b", "5000a9e3224f461bb4d8d8c5844bf6983eaea59f03be2402a206c2b95e5b3bc7"}) dup(0xffffffffffffffff) 00:28:41 executing program 5: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001cc0)={0x8, "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", 0x1000}, 0x1006) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000240), 0x2008000fffffffe) 00:28:41 executing program 3: clone(0x7f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) 00:28:41 executing program 1: clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() nanosleep(&(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x7fc, 0x0, 0x0, 0x0, 0x145}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 00:28:41 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000200)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) vmsplice(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 00:28:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) sendfile(r3, r0, &(0x7f0000000080)=0x12c, 0x33) 00:28:41 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 269.271819] devpts: called with bogus options [ 269.273125] ptrace attach of "/root/syz-executor.1"[7302] was attempted by "/root/syz-executor.1"[7306] 00:28:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) [ 269.335533] devpts: called with bogus options 00:28:41 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="08010000920000c61e0e00000000000000000000400000016fa29fe5610500000006"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 269.404952] ptrace attach of "/root/syz-executor.1"[7331] was attempted by "/root/syz-executor.1"[7333] 00:28:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 00:28:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) 00:28:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xfff}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:28:42 executing program 1: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) 00:28:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29, 0xb}], 0x18}], 0x146, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") 00:28:42 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup2(r1, 0xffffffffffffffff) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 00:28:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000300000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000007fffffff000000000000000000000000ffffffff0100000003000000000000000000726f736530000000000000000000000069705f767469300000000000000000fc687064647001000000000000000000007465716c30000000000000000000eddcaaaaaaaaaa00000000005d6e0000ffffffff0002000000000000f0000000f0000000280100003830325f3300000000000000003f000000000000000000000000000000bf0600080000000800000000000000000000006e666163637400000000fbfaffffffffffffff0000000000000000bb00000000280000000000000073797a31000000020000000000000000000000000000000000000000006b000000000000000300006d61fe6b00000000000000000000000019bf3efa54c2da8100ff0100000000000000000000e8ffffffffffffff0000000000000000000000000000000000ea200000002000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x230) 00:28:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:42 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 00:28:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_open_dev$swradio(0x0, 0x1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) [ 270.255714] ptrace attach of "/root/syz-executor.0"[7389] was attempted by "/root/syz-executor.0"[7392] [ 270.292200] xt_nfacct: accounting object with name `syz1' does not exists 00:28:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000200), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:28:42 executing program 1: creat(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'team_slave_0\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f0000000000)={0x0, 0x101, 0x9, 0x0, 0x0, 0x3ff}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) [ 270.368995] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 00:28:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) dup3(r1, r0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) 00:28:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:42 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010607031dfffd946fa2830060200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) accept4(r1, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000740)=0x80, 0xcdc78934030c8861) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010607031dfffd946fa2830060200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', r4}) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)=@hci={0x1f, r5}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="ea338a9ebfba524a1e76f7e05465018845b8362faa69351ba2f65ff9066ef36d47621a967761ea69c1d6943103123227997314cd931afcafb12de5", 0x3b}, {&(0x7f0000000200)="0710765f2ab7e9425eaf44aa544991052c61c367ac04649e9799ae9a98c2ec54a90dde6a9c4829c696e9d4da3c7456c4e672bb3211a77b3d760f54783ba560e6ed56d3730c17658623ccd3f571a0997756fc684f2b4bc7c71ae9ac168976b0e0bf8e2c277f3830c2621ccdbf4bbcec20894b3a00a151675596fa2db0e2245b602b4317857ec69c49d09691f3bd08bef5ec02a4e0bd040483496cf53d928f329dcb6d6f4a72d5855793a7605be842a0ab25c5b47405cccca2686300ec764ce036982744e5154c", 0xc6}, {&(0x7f0000000100)="2037717d488b004eb70d67c548c83a6e6106414311ccd8a51e8c005b7aa4658f4c340f2421c4adc878ea1b8c74f257229cef74c561bc6db317a2339dd00d4595988d35ef6b70836b4589bfe851003480b639785485c100e85d1963919b482de26c15f2fa60ae5f03f30f930075cb377ea0a13c5b8f8633ce3133d5e93388eaa679ac8aafe27575da03d9def3", 0x8c}, {&(0x7f0000000300)="96af8f57f4164c61baccf69b28529fe46420cf95a42fc2abd103e1ea968a49055351513ff786982196c2e8e1e86e7b3b9e54cc9050bc03d965ef2e38314a52650404f3f0451944fde8a74fcfe67366d3d85ecabda376c9c811800a3034c1fd865f823500b08703b9887ac3b2d97ace94b5e576def90ece43eeb2b2a27512861e9c3b20b3688448ebdc8189c2dbfb1dc971f876c09eb2e289ecd1b2236bf27a58cae574bc24433e8856e4e14582499140e7e02a90beb047ff", 0xb8}, {&(0x7f00000003c0)="e7507134db91ccee7949600dc9bf5579135ea80c527f9f2d3059a8eac3882e1650933b047e49856374ec00cf", 0x2c}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1d0}}], 0x1, 0x80) [ 270.435511] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 270.454025] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 00:28:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 270.489511] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 270.492878] tpacket_rcv: packet too big, clamped from 65535 to 32624. macoff=96 00:28:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_cancel(0x0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:28:42 executing program 1: creat(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'team_slave_0\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f0000000000)={0x0, 0x101, 0x9, 0x0, 0x0, 0x3ff}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) 00:28:42 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'team_slave_0\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f0000000000)={0x0, 0x101, 0x9, 0x0, 0x0, 0x3ff}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) 00:28:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 270.950364] protocol 88fb is buggy, dev hsr_slave_0 [ 270.955604] protocol 88fb is buggy, dev hsr_slave_1 [ 270.958375] protocol 88fb is buggy, dev hsr_slave_0 [ 270.966555] protocol 88fb is buggy, dev hsr_slave_1 [ 270.974136] protocol 88fb is buggy, dev hsr_slave_0 [ 270.979664] protocol 88fb is buggy, dev hsr_slave_1 00:28:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r4, 0x0, 0x0, 0x8020003) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4"], 0xa4) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r10) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in6=@remote, 0x4e20, 0x400, 0x4e24, 0x7fff, 0x2, 0x80, 0x80, 0xb, r8, r11}, {0x7, 0x9, 0x3c, 0x4e13, 0xfffffffffffffffa, 0x32e, 0x7, 0x7}, {0x7f, 0x6, 0x7, 0xfff}, 0x1, 0x6e6bb4, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d4, 0x3c}, 0x2, @in6=@loopback, 0x3503, 0x2, 0x1, 0x6, 0x7, 0x7, 0x8}}, 0xe8) 00:28:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:43 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x4bf303, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) prctl$PR_CAPBSET_DROP(0x18, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 00:28:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) 00:28:43 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200662696321d63e1aeb485a8a16fe000000238489d4aff2c24a3ccfb6bdc43fcb38a570700000000000000288493d9545eaf370aa01a"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x136, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) 00:28:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') 00:28:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:43 executing program 4: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/hci\x00') r0 = gettid() tkill(r0, 0x3c) 00:28:43 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r11) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in6=@remote, 0x4e20, 0x400, 0x4e24, 0x7fff, 0x2, 0x80, 0x80, 0xb, r9, r12}, {0x7, 0x9, 0x3c, 0x4e13, 0xfffffffffffffffa, 0x32e, 0x7, 0x7}, {0x7f, 0x6, 0x7, 0xfff}, 0x1, 0x6e6bb4, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d4, 0x3c}, 0x2, @in6=@loopback, 0x3503, 0x2, 0x1, 0x6, 0x7, 0x7, 0x8}}, 0xe8) 00:28:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r4, @ANYRES32=r5], 0x3}}, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) 00:28:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:43 executing program 4: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 271.533978] input: syz1 as /devices/virtual/input/input5 00:28:43 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 00:28:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 271.723127] input: syz1 as /devices/virtual/input/input8 00:28:43 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r11) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in6=@remote, 0x4e20, 0x400, 0x4e24, 0x7fff, 0x2, 0x80, 0x80, 0xb, r9, r12}, {0x7, 0x9, 0x3c, 0x4e13, 0xfffffffffffffffa, 0x32e, 0x7, 0x7}, {0x7f, 0x6, 0x7, 0xfff}, 0x1, 0x6e6bb4, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d4, 0x3c}, 0x2, @in6=@loopback, 0x3503, 0x2, 0x1, 0x6, 0x7, 0x7, 0x8}}, 0xe8) 00:28:43 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) r11 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r11) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in6=@remote, 0x4e20, 0x400, 0x4e24, 0x7fff, 0x2, 0x80, 0x80, 0xb, r9, r12}, {0x7, 0x9, 0x3c, 0x4e13, 0xfffffffffffffffa, 0x32e, 0x7, 0x7}, {0x7f, 0x6, 0x7, 0xfff}, 0x1, 0x6e6bb4, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d4, 0x3c}, 0x2, @in6=@loopback, 0x3503, 0x2, 0x1, 0x6, 0x7, 0x7, 0x8}}, 0xe8) 00:28:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 272.064040] input: syz1 as /devices/virtual/input/input10 [ 272.085998] input: syz1 as /devices/virtual/input/input11 00:28:44 executing program 1: semget(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:28:44 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) lsetxattr$security_ima(0x0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000180)=@v2, 0xa, 0x2) 00:28:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:44 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 00:28:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:28:44 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=@v2, 0xa, 0x2) 00:28:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:44 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) semget(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 00:28:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 00:28:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$smack_current(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2f6465762f73657175656e6365723200002bf3df77fbb1dd1c73c25af9bb47d2d411ecd960883019fbd36949a84ecb6dcf548438e91b07edf59b1ef627034f2e566cd6a253127794b40de096943261d3a39f5df417c8041fd1f6714559ae36fe968260fb62e1f71b9efc63fa66c0f0bb082a532dd9999761ef"], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4138ae84, &(0x7f0000000180)) 00:28:44 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000, &(0x7f00000000c0)=@abs, 0x6e) 00:28:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 272.547614] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.594427] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 00:28:44 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 00:28:44 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:44 executing program 0: dup(0xffffffffffffffff) clone(0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0, &(0x7f0000000100)) 00:28:44 executing program 2: dup(0xffffffffffffffff) dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x0) 00:28:44 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0xfffffff5) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x1f, 0x2, 0x3, 0x0, 0x0, 0x40, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_config_ext={0x1}, 0x11910, 0x100000001, 0xd38a, 0x8, 0x47, 0x10000, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f000000a480)={0x0, 0x0, &(0x7f0000009280)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) 00:28:44 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:44 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) 00:28:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x165, 0x0, &(0x7f0000000340)="8cda4baefcc3a6b2bfbed4e58423a813e2297f4d58dffae482b76e6e1b49cd2edede7fcf542242d5a9fcd9a43b0216a9edab1760f03a3382f17e7a70111f64598fe750b3377fe255ac0862ac714fb19e51b99694f2e6820326470ffbfd65d99469ba3aaefdee60d26656d21f16ea7cb7f6a09b34e0ca30b225f976004ce7d1b757334f0018264809fe83be1d18b66fd8d3c5432f3c4eb260f91cc8d2dcc8106f68351a4ba4681151b316b659fe6bb05fefc4f69c7e286303e05645b6489a8dc66aeccfc4bbb9d6e9dc2319e4da9f08be969413ff36abeba2e15bd46e734905b42926b35e1e4c59ba0c25c5ccd1795776ba82f85a2ff407f4b722a2e169b14cb517c7cebc3ab8c439cb4b92a1b343f52ad0aa4fc984c8ebb4da5e83c6e5faceea73b89c8836c440a291c12dac13d0b0b4f98679b25ff71a62bfea641b035a1f59fa87cc0db4b8877684db317bb397376e00a91e4b14690a77d36b63ad503ae859b4ae1dc4d3"}) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[], 0xf5) 00:28:44 executing program 0: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:28:45 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 272.954413] sg_write: data in/out 1988606096/199 bytes for SCSI command 0xd3-- guessing data in; [ 272.954413] program syz-executor.1 not setting count and/or reply_len properly 00:28:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$smack_current(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="2f6465762f73657175656e6365723200002bf3df77fbb1dd1c73c25af9bb47d2d411ecd960883019fbd36949a84ecb6dcf548438e91b07edf59b1ef627034f2e566cd6a253127794b40de096943261d3a39f5df417c8041fd1f6714559ae36fe968260fb"], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4138ae84, &(0x7f0000000180)) 00:28:45 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="448a84011be2ff00c43119182172705e4e555c400d7b08e5cf2996bb12f77a"], 0x1}}, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x3f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x402}}, 0x68) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/24, 0x18, 0x0, 0x0, 0x2}}, 0x28) write$vnet(r0, &(0x7f000046df98)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x68) 00:28:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:45 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3800000000000000290000000400000078040409000000c0073510fbffac00b408000000fab771172100000020001000004e5e0000388022"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280)}, 0x0) 00:28:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000002c40)={@multicast1, @multicast2}, 0x10) 00:28:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:45 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000140)="1400000013000507ed0064d24ef862450558c653", 0x14}], 0x1, 0x0, 0x0, 0x300}, 0x0) 00:28:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) 00:28:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:28:45 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3800000000000000290000000400000078040409000000c0073510fbffac00b408000000fab771172100000020001000004e5e0000388022"], 0x38}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280)}, 0x0) 00:28:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 00:28:45 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 00:28:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 00:28:45 executing program 2: mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 00:28:46 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000600), 0x8) fsetxattr$security_capability(r0, &(0x7f0000000640)='security.capability\x00', 0x0, 0x0, 0x0) 00:28:46 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000000006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) 00:28:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:46 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) 00:28:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00\x00\xe7\xff\x03\x00', 0xfd}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008}) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x4000800, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, r0, 0x0) 00:28:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:46 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) [ 274.079634] tty_warn_deprecated_flags: 'syz-executor.2' is using deprecated serial flags (with no effect): 00000100 [ 274.109776] tty_warn_deprecated_flags: 'syz-executor.2' is using deprecated serial flags (with no effect): 00000100 00:28:46 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) rename(0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) msgget(0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000340)=0xfffffff9, 0x4) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1, 0x11, r1, 0x0) r2 = open(0x0, 0x141042, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000480)=""/210) utimes(&(0x7f0000000000)='./bus\x00', 0x0) 00:28:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="39000000140081ae00003c000500018311001f9f66f9ba9d2c05acb612f691f3bd3508abca1b4e7db89c40ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 00:28:46 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a0004", 0x25}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 00:28:46 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) close(r0) execve(&(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup2(r1, r1) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:28:46 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x14) creat(&(0x7f00000001c0)='./bus/file0\x00', 0x13) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000018c0)={0x0, 0x70, 0x65, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xde, 0x0, @perf_config_ext={0x0, 0xffffeffffffffffd}, 0x568b, 0x0, 0xbba, 0x4, 0x9, 0x29, 0x4}) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x4) io_setup(0x10000, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) pipe(0x0) 00:28:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="39000000140081ae00003c000500018311001f9f66f9ba9d2c05acb612f691f3bd3508abca1b4e7db89c40ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 00:28:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x46102, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x8001) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x40}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(0x0, 0x0, 0x11, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x28003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0), 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r6, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000002c0)) ptrace(0x10, r7) 00:28:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 274.834357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 00:28:47 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x0, 0x5, 0x0, 0xe9, 0x6, 0xf7, 0x8}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x144) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) 00:28:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 274.937848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 [ 274.984585] audit: type=1804 audit(1574900927.096:45): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689722827/syzkaller.ZEnnAZ/21/bus" dev="sda1" ino=16612 res=1 [ 275.136406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 [ 275.231038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 [ 275.266683] audit: type=1804 audit(1574900927.376:46): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir689722827/syzkaller.ZEnnAZ/21/bus" dev="sda1" ino=16612 res=1 [ 275.323087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 [ 275.335784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 [ 275.349297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 [ 275.362111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 [ 275.375156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 [ 275.387930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7763 comm=syz-executor.4 00:28:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x890c, &(0x7f0000000000)={@rand_addr="8179250478c9148ed1c245ca4aafdfbd"}) 00:28:47 executing program 5: unshare(0x2a000400) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20109042, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 00:28:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x80, 0x4) 00:28:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x46102, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x8001) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x40}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(0x0, 0x0, 0x11, 0xffffffffffffffff, 0x3) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x28003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x840000000002, 0x3, 0x200000000000ff) r5 = accept4$unix(r4, &(0x7f00000003c0), &(0x7f0000000100)=0x6e, 0x0) sendmmsg$inet(r5, &(0x7f0000002dc0), 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r7, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f00000002c0)) ptrace(0x10, r8) 00:28:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x0, r2}) 00:28:47 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x3d}}) 00:28:47 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:47 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x25}}) 00:28:47 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:47 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={0x0, 0x4}, 0xc) 00:28:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab", 0x4) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="fe5bcc15add63afde2b786576521c17489e9e86ab36b92e56ab041dff7bbd6f40fce9dfb71fc53766789a72a7cbe4f2c30beb17888d1c728e6414b9eac4634e53b0f06360d4033d904000000149b61a9588b3d8f524cd980fbb82f5f6e8600ddb4a3d437fcc989bcf1ec74c5c01cc44ff494e780e2722000", 0xfffffef8}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) 00:28:47 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:48 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:48 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x2b}}) 00:28:48 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003000000"], 0x3}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4c, r3}) 00:28:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:48 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x100}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)) 00:28:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 00:28:48 executing program 1: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:48 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(r0, 0xa9c63df6ea93b30e) 00:28:48 executing program 5: semop(0x0, &(0x7f0000000380)=[{}, {0x4}], 0x2) semop(0x0, &(0x7f0000000080)=[{0x0, 0xfe00, 0x800}], 0x1) 00:28:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 00:28:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:48 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) dup(r1) 00:28:49 executing program 0: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) 00:28:49 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:49 executing program 1: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) lsetxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000340)='TRUE', 0x4, 0x1) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in6=@rand_addr="9a18d97658ffb665114fb6fcb75bc0a6", {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 00:28:49 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:49 executing program 1: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400e505000000b05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000953687462001c000bc302001800010000ff7fe0cdd2a89122ba6b8f00000015fa14890150a39211097d8affffff00000000490cb7029d9fcffe2af5f75678a114ca7feb3447ce87c21c8b601eb4cd4b23ad775f1e1b32d50971fc40a266211a3a00"/124], 0x48}}, 0x0) 00:28:49 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) lsetxattr$security_smack_transmute(0x0, 0x0, &(0x7f0000000340)='TRUE', 0x4, 0x1) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in6=@rand_addr="9a18d97658ffb665114fb6fcb75bc0a6", {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 00:28:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x0, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:49 executing program 1: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:49 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000140)={0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0) 00:28:49 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x0, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:49 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080), 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000400)=""/4096, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) 00:28:49 executing program 1: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x0, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='loginuid\x00') write$P9_RLERROR(r0, 0x0, 0x0) 00:28:49 executing program 2: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:50 executing program 0: 00:28:50 executing program 1: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:50 executing program 4: 00:28:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:50 executing program 2: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:50 executing program 4: 00:28:50 executing program 0: 00:28:50 executing program 5: 00:28:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:50 executing program 4: 00:28:50 executing program 0: 00:28:50 executing program 4: 00:28:50 executing program 2: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:50 executing program 1: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:50 executing program 0: 00:28:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:50 executing program 5: 00:28:50 executing program 1: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:50 executing program 4: [ 278.249507] syz-executor.5 (7020) used greatest stack depth: 24328 bytes left 00:28:50 executing program 0: 00:28:50 executing program 2: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:50 executing program 4: 00:28:50 executing program 0: 00:28:50 executing program 1: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:50 executing program 2: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:50 executing program 1: socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:50 executing program 4: 00:28:50 executing program 5: 00:28:50 executing program 2: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:50 executing program 0: 00:28:50 executing program 4: 00:28:50 executing program 0: 00:28:50 executing program 1: socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:50 executing program 4: 00:28:50 executing program 0: 00:28:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:50 executing program 2: socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:50 executing program 0: 00:28:50 executing program 4: [ 280.261621] device bridge_slave_1 left promiscuous mode [ 280.267735] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.323224] device bridge_slave_0 left promiscuous mode [ 280.328754] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.443538] device hsr_slave_1 left promiscuous mode [ 280.494346] device hsr_slave_0 left promiscuous mode [ 280.535441] team0 (unregistering): Port device team_slave_1 removed [ 280.546385] team0 (unregistering): Port device team_slave_0 removed [ 280.557340] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 280.598059] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 280.666195] bond0 (unregistering): Released all slaves [ 282.401559] IPVS: ftp: loaded support on port[0] = 21 [ 283.329103] chnl_net:caif_netlink_parms(): no params data found [ 283.365285] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.372014] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.379005] device bridge_slave_0 entered promiscuous mode [ 283.386172] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.392651] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.399647] device bridge_slave_1 entered promiscuous mode [ 283.415778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 283.424921] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 283.441341] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 283.448409] team0: Port device team_slave_0 added [ 283.454156] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 283.461449] team0: Port device team_slave_1 added [ 283.466930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 283.474448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 283.532579] device hsr_slave_0 entered promiscuous mode [ 283.580362] device hsr_slave_1 entered promiscuous mode [ 283.660748] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 283.667887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 283.683166] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.689531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.696191] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.702593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.731432] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 283.737533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.746221] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 283.754979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.763008] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.769667] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.780188] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 283.786287] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.794715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.802380] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.808721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.818327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.826260] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.832653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.851068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.858722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.866994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.874547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.884153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.894174] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 283.900373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.913717] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 283.921632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.928352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.938534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.320384] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 00:28:57 executing program 5: 00:28:57 executing program 1: socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xe}}) 00:28:57 executing program 0: 00:28:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0b") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:57 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0) 00:28:57 executing program 2: socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:57 executing program 0: 00:28:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 00:28:57 executing program 5: 00:28:57 executing program 2: socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:28:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0b") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:57 executing program 0: 00:28:57 executing program 5: 00:28:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 00:28:57 executing program 0: 00:28:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 00:28:57 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0) 00:28:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0b") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:57 executing program 5: 00:28:57 executing program 0: 00:28:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 00:28:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 00:28:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 00:28:57 executing program 5: 00:28:57 executing program 0: 00:28:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) 00:28:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:57 executing program 0: 00:28:57 executing program 4: 00:28:57 executing program 5: 00:28:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) 00:28:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) 00:28:57 executing program 0: 00:28:57 executing program 4: 00:28:57 executing program 0: 00:28:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) 00:28:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) 00:28:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:57 executing program 4: 00:28:57 executing program 5: 00:28:58 executing program 4: 00:28:58 executing program 0: 00:28:58 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) 00:28:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b20") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:58 executing program 5: 00:28:58 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op}) 00:28:58 executing program 4: 00:28:58 executing program 0: 00:28:58 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op}) 00:28:58 executing program 5: 00:28:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b20") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:58 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op}) 00:28:58 executing program 4: 00:28:58 executing program 0: 00:28:58 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op}) 00:28:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b20") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:58 executing program 4: 00:28:58 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op}) 00:28:58 executing program 5: 00:28:58 executing program 4: 00:28:58 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000300)=@ethtool_per_queue_op}) 00:28:58 executing program 5: 00:28:58 executing program 0: 00:28:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:58 executing program 1: 00:28:58 executing program 4: 00:28:58 executing program 1: 00:28:58 executing program 5: 00:28:58 executing program 4: 00:28:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:58 executing program 0: 00:28:58 executing program 2: 00:28:58 executing program 1: 00:28:58 executing program 5: 00:28:58 executing program 4: 00:28:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:28:58 executing program 0: 00:28:58 executing program 2: 00:28:58 executing program 5: 00:28:58 executing program 1: 00:28:58 executing program 4: 00:28:58 executing program 0: 00:28:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, 0x0, 0x0) 00:28:58 executing program 2: 00:28:58 executing program 1: 00:28:58 executing program 4: 00:28:58 executing program 0: 00:28:58 executing program 2: 00:28:58 executing program 5: 00:28:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, 0x0, 0x0) 00:28:59 executing program 4: 00:28:59 executing program 1: 00:28:59 executing program 2: 00:28:59 executing program 0: 00:28:59 executing program 4: 00:28:59 executing program 5: 00:28:59 executing program 1: 00:28:59 executing program 2: 00:28:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, 0x0, 0x0) 00:28:59 executing program 0: 00:28:59 executing program 1: 00:28:59 executing program 4: 00:28:59 executing program 5: 00:28:59 executing program 2: 00:28:59 executing program 0: 00:28:59 executing program 4: 00:28:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:28:59 executing program 2: 00:28:59 executing program 5: 00:28:59 executing program 1: 00:28:59 executing program 4: 00:28:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:28:59 executing program 0: 00:28:59 executing program 2: 00:28:59 executing program 1: 00:28:59 executing program 5: 00:28:59 executing program 0: 00:28:59 executing program 4: 00:28:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") recvmmsg(r1, &(0x7f0000000300), 0x121, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 00:28:59 executing program 2: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/35}, 0x2b, 0x0, 0x0) 00:28:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:28:59 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x0, &(0x7f0000000040)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7"], 0x5e) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788"], 0xb6) close(r5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, 0x0) 00:28:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x0, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}) ioctl$TIOCGETD(r0, 0x5424, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x400) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000003c0)={'security\x00', 0x1000, "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"}, &(0x7f0000000140)=0x1024) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x11) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newneigh={0x38, 0x1c, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x9, 0x0, 0x9}, [@NDA_PROBES={0x8, 0x4, 0x6}, @NDA_DST_MAC={0xc, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_PROBES={0x8, 0x4, 0x3}]}, 0xffffffd5}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @rand_addr="cda1b69d99c902271579b27c549bd06f"}, @IFA_CACHEINFO={0x14, 0x6, {0x401, 0x6}}]}, 0x40}}, 0x0) 00:28:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32, @ANYBLOB, @ANYRES32], 0x4}}, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x0) 00:28:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) [ 287.590128] protocol 88fb is buggy, dev hsr_slave_0 [ 287.590168] protocol 88fb is buggy, dev hsr_slave_0 [ 287.596225] protocol 88fb is buggy, dev hsr_slave_1 [ 287.600636] protocol 88fb is buggy, dev hsr_slave_1 [ 287.605758] protocol 88fb is buggy, dev hsr_slave_0 [ 287.616021] protocol 88fb is buggy, dev hsr_slave_1 00:28:59 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) [ 287.678091] ptrace attach of "/root/syz-executor.4"[8391] was attempted by "/root/syz-executor.4"[8394] [ 287.747089] input: syz1 as /devices/virtual/input/input15 00:28:59 executing program 4: socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000140)="1400000013000507ed0064d24ef862450f58c653", 0x14}], 0x1, 0x0, 0x0, 0x300}, 0x0) [ 287.843329] input: syz1 as /devices/virtual/input/input17 00:29:00 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:29:00 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) 00:29:00 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) [ 288.244661] input: syz1 as /devices/virtual/input/input19 00:29:00 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) 00:29:00 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) 00:29:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'nr0\x01\x00', 0x40a2f9aa91052d17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'nr0\x01\x00', 0x40a2f9aa91052d17}) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 00:29:00 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) 00:29:00 executing program 5: r0 = socket$kcm(0xa, 0x802, 0x88) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000001280)}, 0x0) [ 288.528161] input: syz1 as /devices/virtual/input/input21 [ 288.602359] input: syz1 as /devices/virtual/input/input22 [ 288.608872] input: syz1 as /devices/virtual/input/input23 [ 288.668647] input: syz1 as /devices/virtual/input/input24 00:29:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 00:29:00 executing program 5: r0 = socket$kcm(0xa, 0x802, 0x88) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000001280)}, 0x0) 00:29:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002a001fff0100001cabec39878141b74f72a173acab0f67000000000000000058311f557560c5f8700cbc96158defb310166282b3cd28370427b097b15db20755771107ff73d302fa3651fb8b4903cf5cb0d2c5ba8534a43513c914b29faaa9a15e436813e3ee886e425d049bb7520e89c8bdba8df4768f1b5e746e1d47f6c6a453068fd338296aa0bd31530893ffaded4525313a3e7f6e360bd1ebaab9914cd8c69612c1bc16", @ANYRES32, @ANYBLOB="0000000000000000000000005c1cc40f72a9dd662b0507cf30ddc5c53adb3634afd0a8ab428962f157b08310278519a0b1900289c005c57efe831ec321ca3655783d9aed0e11d5e05226f74b552dc6508e67b717340d7210e0608956207de55ebfceab4a93ed47dc66ec1443538db3039f9c629dfcb94babe4895e3d914f3e0d3ca55f367b11779ecc9ae9abef6f9ceea6daab28e9f3031df201252a6b43fabfe72335506e0196fda7f7ae2c487d5fc4ad26b0fb8776a02868f618cb38c7e5a3b2fb784676f3c1e9bd4947e54ab96aa07b881fe68c5d61381300380000"], 0x24}}, 0x20000086) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) 00:29:01 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) 00:29:01 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) 00:29:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) 00:29:01 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000600)=""/160, 0xa0}], 0x2}}], 0x1, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 00:29:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000700)='autofs\x00', 0x0, 0x0) 00:29:01 executing program 1: clone(0x1000003102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) [ 289.141060] input: syz1 as /devices/virtual/input/input25 [ 289.259309] input: syz1 as /devices/virtual/input/input26 [ 289.305581] input: syz1 as /devices/virtual/input/input27 00:29:01 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000200)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1}) unshare(0x40600) ftruncate(r0, 0x81) 00:29:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getuid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe61) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000200)="50d9ff8c399e746c0800", 0xa, 0x10008000, 0x0, 0x0) close(r0) 00:29:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x81}}]}, 0x34}}, 0x0) 00:29:01 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0}]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000fedc95336ccdcf4a415fbb5090000006b53ffc29c81d0686c90cf2795c7c12ab3e12803060104646bcfd3955490d86365d9f9dd2125b56b5532aba54c08368832330677565a14589c"], 0x2) fallocate(r5, 0x0, 0x0, 0x8020003) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="9e11202e2f66696c65300a061149aa53b8c9a63b2e380e18e8c27b80b59369c0ca8674f06ef0acb261bb45b031067b0b1a042e4eb2c462096893bda561205a6a307cc15b3dcaddb763594d26b6e444735518108ea19c3a47381c6c3df5c7cf686a69ae64f88f5f9f996a710190d0f002dd5dcfccecc52f61306a46196a58f020907ba02064322e81efd6d5889d01bfc9dc03a8308514ad93a807f3b1c414458891dba2f4f60191cc023f6a28f5997cff38bd3e830788013f9fb553"], 0xbb) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) 00:29:01 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0), 0x1, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 00:29:01 executing program 3: unshare(0x2a000400) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20109042, 0x0) signalfd(r0, &(0x7f00000000c0), 0x8) 00:29:01 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000440)="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", 0xfc) [ 289.708693] input: syz1 as /devices/virtual/input/input29 00:29:01 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0), 0x1, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 00:29:01 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0x80004ec, 0x0, 0x0) 00:29:01 executing program 4: syz_mount_image$btrfs(&(0x7f00000002c0)='btrfs\x00', &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={[{@check_int_print_mask={'check_int_print_mask'}}, {@subvolid={'subvolid'}}]}) 00:29:02 executing program 1: syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@data_writeback='data=writeback'}, {@norecovery='norecovery'}, {@norgrplvb='norgrplvb'}, {@quota_off='quota=off'}]}) 00:29:02 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000440)="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", 0xfc) [ 289.931333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.973418] gfs2: not a GFS2 filesystem [ 289.976872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.015165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.074408] gfs2: not a GFS2 filesystem 00:29:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffff85a70000000000000702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d6405000000000045040000000000000704000000000000b704000010000020720700fe00000000850000002e000000b5000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) 00:29:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) 00:29:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00040063", 0x27}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 00:29:02 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000100000002000000"], 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002680)=[{0x0, 0x16, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="04000000"], 0x18}], 0x379c1994a1e28f, 0x0) 00:29:02 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2820}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x24000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r1, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) io_cancel(r1, 0x0, &(0x7f0000000600)) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='net/snmp\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) 00:29:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 290.331961] device bridge_slave_0 left promiscuous mode [ 290.337663] bridge0: port 1(bridge_slave_0) entered disabled state 00:29:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0) socket$inet6(0xa, 0x2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2a) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = syz_open_procfs(0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r5, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x20002200b, 0x2, 0x0, 0x5, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000640)='[\b)\xb4\"\x16p#\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000d52ff0), 0x0) close(0xffffffffffffffff) socket(0x1, 0x0, 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000d52ff0), 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0x0) accept$inet(r6, &(0x7f0000000600)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000005c0)) [ 290.509044] selinux_nlmsg_perm: 15 callbacks suppressed [ 290.509057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 [ 290.557391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 [ 290.578233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 [ 290.591170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 [ 290.617545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 [ 290.640276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 [ 290.653891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 [ 290.666823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 [ 290.679221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 [ 290.692572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8637 comm=syz-executor.0 00:29:02 executing program 3: mount$bpf(0x20000000, &(0x7f0000000880)='./file0\x00', 0x0, 0x1013, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea110200000500", 0x27}], 0x1) fstat(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6}}, {{@in=@local}, 0x0, @in6=@mcast1}}, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@loopback}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) fstat(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xff8b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 00:29:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f00000003c0)=""/149, &(0x7f0000000340)=0x95) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0xb6a23c0d3ad59a37}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x2, 0x1000000000) open(&(0x7f0000000100)='./file0\x00', 0x400000, 0x12e) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000001c0)={0x0, 0x2, 0x7ff, 0x500000}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000540)="5c49307fb8b2e057ae49b1ce14223f9417aa9f75087e9c3fe9d0e7681122584a62ee9570b1679275908be01e6ce766541bfd352e765ae64c346d829336788ba3dc81dc0cdf182b815a249632f456d6314dc559e891719bb18e6e877854f593c98051cb4ebb6ceb793ef8b15f655ed3bbaa93cbdf74864eb7bfaba6184c50e940da0eb62c60d48eb8f4085a285b1dee559f994f6d8dc8f0df51943276f7656af6732ce9a75edda82fba67034f68ba408e84fb6e9bfd773cad37d03fb8e9c3f98a8a6783a18f3fc8814204ee665701b97bec96cb449aade7e74927d0cdce7bacf904ae6d2485c59bbb6a1c74964be4205da298a7ceeec12802fea8f0513bb80b9a") clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x2710}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r5, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/fscreate\x00', 0x2, 0x0) fstatfs(r6, &(0x7f0000000200)=""/3) 00:29:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0x27}, {0x80000006}]}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x400000000003}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x40000000000004f, 0x0) 00:29:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 00:29:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0) socket$inet6(0xa, 0x2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2a) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = syz_open_procfs(0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r5, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x20002200b, 0x2, 0x0, 0x5, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000640)='[\b)\xb4\"\x16p#\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000d52ff0), 0x0) close(0xffffffffffffffff) socket(0x1, 0x0, 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000d52ff0), 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0x0) accept$inet(r6, &(0x7f0000000600)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000005c0)) [ 290.716845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.726578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.735595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:29:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 00:29:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f00000001c0), 0x4) [ 291.083877] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.145979] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 291.165309] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.175159] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 00:29:03 executing program 0: io_setup(0x1ff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "545557cce770baec"}, 0x9, 0x0) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(0x0) socket$inet_udplite(0x2, 0x2, 0x88) 00:29:03 executing program 1: io_setup(0x1ff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "545557cce770baec"}, 0x9, 0x0) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 00:29:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000400)={0xfc56}, 0x4) 00:29:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400e573a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000001aee6e04ec53ef636b15faffffff0000000000"], 0x48}}, 0x0) 00:29:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 00:29:03 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1f7) 00:29:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r1 = accept(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x40000000000056c, 0x0, 0x0) [ 291.299618] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.327554] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 00:29:03 executing program 4: 00:29:03 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x1f7) 00:29:03 executing program 5: 00:29:03 executing program 4: 00:29:03 executing program 2: 00:29:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000002400e505000000b05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000080001006874010000dfaae0cdd2a8fa22ba6b8f0000001aee6e04ec5389ef636b15faffffff00000000000e480800f2540f83f401f21d4840490cb7029d9fcffe2af58b601eb4cd4b23ad775f1e1b32d50971fc40a266211a"], 0x48}}, 0x0) 00:29:03 executing program 3: 00:29:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x2a) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = syz_open_procfs(r2, &(0x7f0000000940)='net/sockstat6\x00\xcf\xb7Pg\xdb\x88j\x17\xad\x9f\xd9#\x01\xddWs\xfdF#]\xf9\x97\xad\xa6%./B\xb3E\x05V\x97\xebZQ_\xc4\x06]N\x11\xbeyu_\xc4\xedx]V\"\x06\xcd\x8f\xca\xbb \xc7o1\t5dl\xb0\xcaE\xb8\xceS;\\\xe2Lt\x9e\",\xdc\xbe$\x1e3:I_\v\x8d\xdas\x9e\x1bA\tC\xc5\xdf\xdb\xb8\xf2\x84\xf9$t\xf8}HX\x8b=7\x18\xce') sendfile(r3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r4, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x485, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x20002200b, 0x2, 0x0, 0x5, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000640)='[\b)\xb4\"\x16p#\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) close(0xffffffffffffffff) socket(0x1, 0x0, 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000080)={0x3, 0x2}) accept$inet(r5, &(0x7f0000000600)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0x247) 00:29:03 executing program 0: io_setup(0x1ff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "545557cce770baec"}, 0x9, 0x0) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(0x0) socket$inet_udplite(0x2, 0x2, 0x88) 00:29:03 executing program 2: 00:29:03 executing program 3: [ 291.651704] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:03 executing program 2: 00:29:03 executing program 3: 00:29:03 executing program 1: 00:29:03 executing program 5: 00:29:03 executing program 0: [ 291.772437] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:03 executing program 4: 00:29:04 executing program 3: 00:29:04 executing program 2: 00:29:04 executing program 4: 00:29:04 executing program 5: 00:29:04 executing program 1: 00:29:04 executing program 0: 00:29:04 executing program 4: 00:29:04 executing program 2: 00:29:04 executing program 3: 00:29:04 executing program 5: 00:29:04 executing program 0: 00:29:04 executing program 1: 00:29:04 executing program 3: 00:29:04 executing program 2: 00:29:04 executing program 4: 00:29:04 executing program 5: 00:29:04 executing program 1: 00:29:04 executing program 3: 00:29:04 executing program 2: 00:29:04 executing program 0: 00:29:04 executing program 4: 00:29:04 executing program 1: 00:29:04 executing program 5: 00:29:04 executing program 3: 00:29:04 executing program 4: 00:29:04 executing program 2: 00:29:04 executing program 0: 00:29:04 executing program 1: 00:29:04 executing program 5: 00:29:04 executing program 4: 00:29:04 executing program 2: 00:29:04 executing program 0: 00:29:04 executing program 3: 00:29:04 executing program 1: 00:29:04 executing program 4: 00:29:04 executing program 0: 00:29:04 executing program 3: 00:29:04 executing program 2: 00:29:04 executing program 5: 00:29:04 executing program 1: 00:29:04 executing program 0: 00:29:04 executing program 4: 00:29:04 executing program 3: 00:29:04 executing program 5: 00:29:04 executing program 1: 00:29:04 executing program 2: 00:29:04 executing program 4: 00:29:04 executing program 1: 00:29:04 executing program 3: 00:29:04 executing program 0: 00:29:04 executing program 2: 00:29:04 executing program 4: 00:29:04 executing program 0: 00:29:04 executing program 3: 00:29:04 executing program 5: 00:29:04 executing program 1: 00:29:04 executing program 2: 00:29:04 executing program 0: 00:29:04 executing program 4: 00:29:05 executing program 1: 00:29:05 executing program 3: 00:29:05 executing program 5: 00:29:05 executing program 2: 00:29:05 executing program 0: 00:29:05 executing program 4: 00:29:05 executing program 2: 00:29:05 executing program 3: 00:29:05 executing program 1: 00:29:05 executing program 5: 00:29:05 executing program 4: 00:29:05 executing program 0: 00:29:05 executing program 3: 00:29:05 executing program 5: 00:29:05 executing program 2: 00:29:05 executing program 1: 00:29:05 executing program 0: 00:29:05 executing program 1: 00:29:05 executing program 4: 00:29:05 executing program 3: 00:29:05 executing program 5: 00:29:05 executing program 2: 00:29:05 executing program 4: 00:29:05 executing program 3: 00:29:05 executing program 0: 00:29:05 executing program 2: 00:29:05 executing program 5: 00:29:05 executing program 4: 00:29:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) 00:29:05 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:29:05 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000180)=@v2, 0xa, 0x2) 00:29:05 executing program 2: 00:29:05 executing program 5: 00:29:05 executing program 4: 00:29:05 executing program 2: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:29:05 executing program 4: socket(0x80000000000000a, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x1a0}]) 00:29:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setuid(0x0) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=@report={0x170, 0x20, 0x200, 0x0, 0x0, {0x32, {@in6=@empty, @in=@remote, 0x4e21, 0x0, 0x4e24, 0x0, 0x77cb008687ed7fc4, 0x20, 0x20}}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @sec_ctx={0xc0, 0x8, {0xba, 0x8, 0x1, 0x4, 0xb2, "7f3454c51ebcaf8dbb25fabe36d7836c4963de72ccebbda58f73ed2d6f40f9be4a9cf4be2b248bca19b4fbb8c242b355a8269b52730c6d43cccebf2209eb959099061bf2b3d194e45d1734e8d2fb5d206f6b2afa0da10a40003286b7df3f408c6ced25436ce9c80d47057475861efe1f2a405e731ff38f0681418f6711fb31d5d62b34da12ce71e7b6398709b7d011d7b08eeaae04dcbf3d891126bd44cbb8b6fd6b0e1d9cb904b043569e0052499faadbcb"}}, @lastused={0xc}, @replay_val={0x10, 0xa, {0x70bd2a}}]}, 0x170}}, 0x2080) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x6, 0xdf}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 00:29:05 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet(0x2, 0x0, 0x0) dup(r0) 00:29:05 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) [ 293.840621] audit: type=1400 audit(1574900945.956:47): avc: denied { read } for pid=8928 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:29:06 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDGKBENT(r0, 0x4b46, 0x0) [ 294.146878] Dev loop4: unable to read RDB block 1 [ 294.154859] loop4: unable to read partition table [ 294.160872] loop4: partition table beyond EOD, truncated [ 294.166734] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 00:29:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) 00:29:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = dup(r0) r3 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x99\x11\f\a\tB\xa8\xe9\xb6\xfe\xb5\xb5\\o\xee\x1e\xde\xdb\x0fY\xe1p\x9dZ\x7f\x87]\xc2\xda?,x\xa9\xe0\v\xb43\xbc\x01o\xd56G\xdd\x06q\x06\xea\xc2$\xb0X\x90\x82\xcd\xfb\xd0_\xfe\x0f\xd0d\x8bhZ\xae\\\x9f\xb4H\xd5\x81)o\xb8\xc5\xd1\xcd\xac\xae\xa9\xbf\xb0\x82\xabT?\xc9@\x872)\xcf+a\xc8\xf4\xc6\xe8\'\xcb)X1\xc8\x1a\xfa\xba\x14\x98\xddO\x13\xaa{Qn\xd26\x06\x12&\xe79j\x80\x9am\x19\x01\x9cN\xd4\x02\xdb\xf6\xfd\xdbkV\x82s\x8b\xbd\xcb@\xbd\xa4\x97\xbe\x83\xcc\xb4\x1f\xe3\x1b\x92\xc4\x8b\xdf\xb9\x86g\x95', 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'nbd\x00'}], 0xa, "463542faf80425b358d45a05144aed014a4f8c2535125042221d70ff47c37ec2a40f0bfa91b79d49601bfe0a908fb1c3875eb558233fbfd2abebff183a91cb2855622e0de790c86e50e56f21b29d386dbe44a3b48eb8ccf4275d70a97177e981eee671b02ed56fee52d973d1ad5109"}, 0x7f) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x31) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000000c0)={0x1, 0x80000001, 0x2, 0x401}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x4e24, @remote}}) recvmmsg(0xffffffffffffffff, &(0x7f0000003d80), 0x0, 0x0, 0x0) 00:29:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x19) listen(r0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x68, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x11, "549d9caa46c7369eeb0f291cf81f49"}, @window={0x3, 0x3}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xfde7}, @fastopen={0x22, 0x5, "80a506"}, @sack={0x5, 0xa, [0x0, 0x0]}, @sack={0x5, 0x6}, @md5sig={0x13, 0x12, "723bbc28d151e98ff40853ff25518127"}, @fastopen={0x22, 0x6, "4dbe91c9"}]}}}}}}}}, 0x0) 00:29:06 executing program 4: socket(0x80000000000000a, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x1a0}]) 00:29:06 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x8, &(0x7f00000004c0)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 00:29:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x34}) 00:29:06 executing program 2: r0 = socket$packet(0x11, 0x8000000000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x4000000000001004}]}, 0x10) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000400), 0x40000000000017a, 0x0) 00:29:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[], 0xf5) [ 294.458277] Dev loop4: unable to read RDB block 1 [ 294.515195] loop4: unable to read partition table [ 294.603059] loop4: partition table beyond EOD, truncated [ 294.653294] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 00:29:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setuid(0x0) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=@report={0x170, 0x20, 0x200, 0x0, 0x0, {0x32, {@in6=@empty, @in=@remote, 0x4e21, 0x0, 0x4e24, 0x0, 0x77cb008687ed7fc4, 0x20, 0x20}}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @sec_ctx={0xc0, 0x8, {0xba, 0x8, 0x1, 0x4, 0xb2, "7f3454c51ebcaf8dbb25fabe36d7836c4963de72ccebbda58f73ed2d6f40f9be4a9cf4be2b248bca19b4fbb8c242b355a8269b52730c6d43cccebf2209eb959099061bf2b3d194e45d1734e8d2fb5d206f6b2afa0da10a40003286b7df3f408c6ced25436ce9c80d47057475861efe1f2a405e731ff38f0681418f6711fb31d5d62b34da12ce71e7b6398709b7d011d7b08eeaae04dcbf3d891126bd44cbb8b6fd6b0e1d9cb904b043569e0052499faadbcb"}}, @lastused={0xc}, @replay_val={0x10, 0xa, {0x70bd2a}}]}, 0x170}}, 0x2080) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x6, 0xdf}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) [ 294.710129] protocol 88fb is buggy, dev hsr_slave_0 [ 294.715311] protocol 88fb is buggy, dev hsr_slave_1 00:29:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x34}) 00:29:06 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000140)="1400000013000507ed0064d24ef862450f58c653", 0x14}], 0x1, 0x0, 0x0, 0x300}, 0x0) 00:29:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="39000000140081ae00003c000500018311001f9f66f9ba9d2c05acb612f691f3bd3508abca1b4e7db89c40ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) [ 294.790138] protocol 88fb is buggy, dev hsr_slave_0 [ 294.795452] protocol 88fb is buggy, dev hsr_slave_1 00:29:07 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@commit={'commit'}}], [{@fowner_gt={'fowner>'}}]}) 00:29:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="39000000140081ae00003c000500018311001f9f66f9ba9d2c05acb612f691f3bd3508abca1b4e7db89c40ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 00:29:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xb779ef21efb66f11}) 00:29:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000280)={@random="7a4bd4211b65", @local, [], {@llc_tr={0x11, {@snap={0xab, 0x0, "81", "903e75"}}}}}, 0x0) 00:29:07 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002a001fff0100"/20, @ANYRES32, @ANYBLOB="0000000000000000000000005c1cc40f72a9dd662b0507cf30ddc5c53adb3634afd0a8ab428962f157b08310278519a0b1900289c005c57efe831ec321ca3655783d9aed0e11d5e05226f74b552dc6508e67b717340d7210e0608956207de55ebfceab4a93ed47dc66ec1443538db3039f9c629dfcb94babe4895e3d914f3e0d3ca55f367b11779ecc9ae9abef6f9ceea6daab28e9f3031df201252a6b43fabfe72335506e0196fda7f7ae2c487d5fc4ad26b0fb8776a02868f618cb38c7e5a3b2fb784676f3c1e9bd4947e54ab96aa07b881fe68c5d61381300380000"], 0x24}}, 0x20000086) r0 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x30a, 0x0) [ 295.195077] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.201952] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.209277] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "fowner>00000000000000000000" [ 295.235093] bridge0: port 2(bridge_slave_1) entered blocking state 00:29:07 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xfffffffffffffe93, 0x1000) write$binfmt_script(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/617], 0x244) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x80, 0x0) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80000, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000380)=0x9) r4 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write$P9_RLOPEN(r6, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x1}}}, 0x14f) splice(r5, 0x0, r7, 0x0, 0x18, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'nr0\x00'}, 0x18) write$P9_RLOPEN(r2, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r8, 0x0, 0x116) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1847) listen(r3, 0x200000000002) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f00000003c0)={0x200000, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x1, 0x1}) 00:29:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xfff}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:29:07 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff6e, &(0x7f0000000100), 0x0, 0x0, 0xffffffffffffff8d}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='bond0\x00') [ 295.241627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.248414] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.254856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.261759] device bridge0 entered promiscuous mode [ 295.267468] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 295.275822] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.282387] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.289104] device bridge0 left promiscuous mode [ 295.301623] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.308042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.314792] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.321198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.394348] device bridge0 entered promiscuous mode [ 295.400233] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 295.454132] kvm: pic: non byte read [ 295.468369] kvm: pic: non byte write [ 295.475661] kvm: pic: non byte read [ 295.479569] kvm: pic: non byte write [ 295.484364] kvm: pic: single mode not supported [ 295.484567] kvm: pic: non byte read [ 295.495761] kvm: pic: non byte write [ 295.499765] kvm: pic: single mode not supported [ 295.499865] kvm: pic: non byte read [ 295.510976] kvm: pic: non byte write [ 295.515024] kvm: pic: single mode not supported [ 295.515122] kvm: pic: non byte read [ 295.529206] kvm: pic: non byte write [ 295.533864] kvm: pic: single mode not supported [ 295.533960] kvm: pic: non byte read [ 295.546778] kvm: pic: non byte write [ 295.551576] kvm: pic: single mode not supported [ 295.551853] kvm: pic: non byte read [ 295.564588] kvm: pic: non byte write [ 295.568638] kvm: pic: single mode not supported [ 295.568734] kvm: pic: non byte read [ 295.579163] kvm: pic: non byte write [ 295.587400] kvm: pic: single mode not supported [ 295.587501] kvm: pic: non byte read [ 295.597258] kvm: pic: non byte write [ 295.605037] kvm: pic: single mode not supported [ 295.605132] kvm: pic: non byte read [ 295.615108] kvm: pic: non byte write [ 295.619895] kvm: pic: single mode not supported [ 295.624280] kvm: pic: single mode not supported 00:29:07 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xfffffffffffffe93, 0x1000) write$binfmt_script(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="2321202e2f46696c6530202a2d206d696d7a5f74797065766d6e6520427b23406d64f3c5198e5d9e09d87f1bc5113573756d5e086435730100000000000000657972696e67736563635bbe2bb1757269747976626f786e0274316b0a1138594b54e624129a76db695350b27626469a23841f65fb68aaf3be8dca87b37960257354c9e2f969795d72ce9f41ca5586e6d02dbcc410b0019384c30b316ca1d3a1a645afb515f1086cae351ae3aa680d9c608e390a2524db84b163a87cd6e430617750e8126921cddb2c5f4b9b6187b6fd36858973590224cc15567f9b4772118123a2c4b666eb63d688011927ecdb5c5af597ec8c09675ef993d9a60797f0981d2150fe6dc2d895ae40001bac683e39cc8b83f81d723027dffbb4793952725b2e695d194868d5ac6b7235f8568b2efa6d686f59e4c295b5c90d0e9739518b51f5d59dd0080023f785ce8688e0a696cd171ac14ee0e073cb27bf17773a6007749c3a3938eeea11cca554f6f2ce9735a9a92c2375f971fbea36754f8073bc5f1ce6bd63c34b08bdd7eec6f377ecb840d7fe19e9b53fc8dd8ec62687ea0d6a3f0166a063010100006e514e3a071ea550e1b5187c0eb6ad0b901a90b94bb63649cb8d0eed4d3f5d775fcbd2595695eeabc4475520e104270f5eba0c97338a06382cd0ee0c28a6a88935271f5360b8b748304cdb030bf08c906fa6e772338ae2b6c01f6f330000000000001af7b1c8cd0c150b2a593861000000aa28e582f03e2b5014008044b9fb65151bdd2d5112d4b68cde3e928ae20c011bbc59e7d1db6dd41266fb99189d88c9a47a83109561c18b0a6bcf2f8b3e5c807b00"/617], 0x244) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x80, 0x0) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80000, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000380)=0x9) r4 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write$P9_RLOPEN(r6, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x1}}}, 0x14f) splice(r5, 0x0, r7, 0x0, 0x18, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'nr0\x00'}, 0x18) write$P9_RLOPEN(r2, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r8, 0x0, 0x116) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1847) listen(r3, 0x200000000002) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f00000003c0)={0x200000, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x1, 0x1}) 00:29:07 executing program 0: socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="39000000140081ae00003c000500018311001f9f66f9ba9d2c05acb612f691f3bd3508abca1b4e7db89c40ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 00:29:07 executing program 1: socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="39000000140081ae00003c000500018311001f9f66f9ba9d2c05acb612f691f3bd3508abca1b4e7db89c40ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 00:29:07 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'s\xc7z', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 00:29:07 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xfffffffffffffe93, 0x1000) write$binfmt_script(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="2321202e2f46696c6530202a2d206d696d7a5f74797065766d6e6520427b23406d64f3c5198e5d9e09d87f1bc5113573756d5e086435730100000000000000657972696e67736563635bbe2bb1757269747976626f786e0274316b0a1138594b54e624129a76db695350b27626469a23841f65fb68aaf3be8dca87b37960257354c9e2f969795d72ce9f41ca5586e6d02dbcc410b0019384c30b316ca1d3a1a645afb515f1086cae351ae3aa680d9c608e390a2524db84b163a87cd6e430617750e8126921cddb2c5f4b9b6187b6fd36858973590224cc15567f9b4772118123a2c4b666eb63d688011927ecdb5c5af597ec8c09675ef993d9a60797f0981d2150fe6dc2d895ae40001bac683e39cc8b83f81d723027dffbb4793952725b2e695d194868d5ac6b7235f8568b2efa6d686f59e4c295b5c90d0e9739518b51f5d59dd0080023f785ce8688e0a696cd171ac14ee0e073cb27bf17773a6007749c3a3938eeea11cca554f6f2ce9735a9a92c2375f971fbea36754f8073bc5f1ce6bd63c34b08bdd7eec6f377ecb840d7fe19e9b53fc8dd8ec62687ea0d6a3f0166a063010100006e514e3a071ea550e1b5187c0eb6ad0b901a90b94bb63649cb8d0eed4d3f5d775fcbd2595695eeabc4475520e104270f5eba0c97338a06382cd0ee0c28a6a88935271f5360b8b748304cdb030bf08c906fa6e772338ae2b6c01f6f330000000000001af7b1c8cd0c150b2a593861000000aa28e582f03e2b5014008044b9fb65151bdd2d5112d4b68cde3e928ae20c011bbc59e7d1db6dd41266fb99189d88c9a47a83109561c18b0a6bcf2f8b3e5c807b00"/617], 0x244) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x80, 0x0) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80000, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000380)=0x9) r4 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write$P9_RLOPEN(r6, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x1}}}, 0x14f) splice(r5, 0x0, r7, 0x0, 0x18, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'nr0\x00'}, 0x18) write$P9_RLOPEN(r2, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r8, 0x0, 0x116) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1847) listen(r3, 0x200000000002) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f00000003c0)={0x200000, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x1, 0x1}) 00:29:07 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xfffffffffffffe93, 0x1000) write$binfmt_script(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/617], 0x244) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x80, 0x0) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80000, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000380)=0x9) r4 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write$P9_RLOPEN(r6, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x1}}}, 0x14f) splice(r5, 0x0, r7, 0x0, 0x18, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'nr0\x00'}, 0x18) write$P9_RLOPEN(r2, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r8, 0x0, 0x116) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1847) listen(r3, 0x200000000002) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f00000003c0)={0x200000, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x1, 0x1}) 00:29:07 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xfffffffffffffe93, 0x1000) write$binfmt_script(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/617], 0x244) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x80, 0x0) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80000, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000380)=0x9) r4 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write$P9_RLOPEN(r6, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x1}}}, 0x14f) splice(r5, 0x0, r7, 0x0, 0x18, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'nr0\x00'}, 0x18) write$P9_RLOPEN(r2, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r8, 0x0, 0x116) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1847) listen(r3, 0x200000000002) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f00000003c0)={0x200000, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x1, 0x1}) 00:29:08 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'s\xc7z', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x50c04) keyctl$revoke(0x3, r0) 00:29:08 executing program 0: socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="39000000140081ae00003c000500018311001f9f66f9ba9d2c05acb612f691f3bd3508abca1b4e7db89c40ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 00:29:08 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff00000000000000fffff7", @ANYRES32], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 00:29:08 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) 00:29:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x2a, 0x82d}, 0x14}}, 0x0) 00:29:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/159, 0x9f}], 0x1, 0x10400003) 00:29:08 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xfffffffffffffe93, 0x1000) write$binfmt_script(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/617], 0x244) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x80, 0x0) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80000, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000380)=0x9) r4 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write$P9_RLOPEN(r6, &(0x7f0000000080)={0x18, 0xd, 0x0, {{0x0, 0x1}}}, 0x14f) splice(r5, 0x0, r7, 0x0, 0x18, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'nr0\x00'}, 0x18) write$P9_RLOPEN(r2, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}}}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') read$FUSE(r8, 0x0, 0x116) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x1847) listen(r3, 0x200000000002) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f00000003c0)={0x200000, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x1, 0x1}) [ 296.278268] selinux_nlmsg_perm: 15 callbacks suppressed [ 296.278281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 [ 296.310288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 00:29:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001300192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0ff00ff05000000000a0001000b0ac2d00b0ccbd8", 0x58}], 0x1) 00:29:08 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000001100)) 00:29:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x10000, &(0x7f0000000040)) [ 296.367539] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.1'. 00:29:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0xffffffffffffffe9}, {&(0x7f0000001140)="6653a8990785363940aed12f0400db2f00000022f1f169a4000000000000009f1f8d75442ce71022fe50377a22cb", 0x2e}], 0x4, 0x5) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000700)='./bus\x00', 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 00:29:08 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.stat\x00', 0x275a, 0x0) 00:29:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0xb, &(0x7f0000000740)=0x116, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) [ 296.452158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 [ 296.563877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 [ 296.628200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 [ 296.662600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 [ 296.677689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 [ 296.690663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 [ 296.703619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 [ 296.716865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 00:29:08 executing program 3: r0 = userfaultfd(0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) [ 296.821665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9107 comm=syz-executor.1 00:29:09 executing program 1: socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000980)=""/131, 0x83}, 0x1ff}, {{&(0x7f0000000a40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000ac0)=""/198, 0xc6}, {&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/143, 0x8f}, {&(0x7f0000001900)=""/69, 0x45}, {0x0}, {0x0}, {&(0x7f0000000fc0)=""/137, 0x89}], 0x7, &(0x7f0000001200)=""/75, 0x4b}}, {{0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}}], 0x3, 0x30104, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={'veth0_to_bond\x00', 0xff}) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/183, &(0x7f0000000000)=0x8) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003000000"], 0x3}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr="8179780478c9148ed1c245ca4aafdfbd", 0x4a, r3}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 00:29:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000104c0)='.\x00', 0x0, 0x28) 00:29:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr="8179250478c9148ed1c245ca4aafdfbd", 0x0, r2}) 00:29:09 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r1, &(0x7f0000000040), 0x10) 00:29:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr="8179780378c9148ed1c245ca4aafdfbd", 0x0, r2}) 00:29:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910270000000000c5000000000000109500000000000000"], &(0x7f0000000100)='G\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) 00:29:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) [ 299.192062] Bluetooth: hci0 command 0x1003 tx timeout [ 299.199778] Bluetooth: hci0 sending frame failed (-49) 00:29:11 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) r1 = gettid() fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, r1}) 00:29:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 00:29:11 executing program 1: r0 = memfd_create(&(0x7f0000000000)='&\x00', 0x4) fallocate(r0, 0x10, 0x0, 0x1) 00:29:11 executing program 4: r0 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r0, &(0x7f0000005d00)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x10000000000001, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x0) 00:29:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000000702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d6402000000000045040000000000000704000000000000b704000010000020720700fe00000000850000002e000000b5000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) 00:29:11 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') lseek(r0, 0x0, 0x3) 00:29:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 00:29:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 00:29:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000004002000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d6405000000000045040000000000000704000000000000b704000010000020720700fe00000000850000002e000000b5000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) [ 301.270204] Bluetooth: hci0 command 0x1001 tx timeout [ 301.275537] Bluetooth: hci0 sending frame failed (-49) [ 303.350469] Bluetooth: hci0 command 0x1009 tx timeout 00:29:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:19 executing program 4: 00:29:19 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 00:29:19 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 00:29:19 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x215, 0x200007fd, &(0x7f0000e68000), 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0), 0x4) 00:29:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 00:29:19 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x1f7) 00:29:19 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 00:29:19 executing program 3: io_setup(0x1ff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0), 0x1, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000001c0)=0x18, 0x4) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) 00:29:19 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 00:29:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400e505000000b05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000953687462001c0002001800010000ff7fe0cdd2a89122ba6b8f0000001aee6e04ec53ef636b15fa14890150a39211097d8affffff00000000490cb7029d9fcffe2af5f75678a114ca7feb3447ce87c21c8b601eb4cd4b23ad775f1e1b32d50971fc40a266211a3a00"/133], 0x48}}, 0x0) 00:29:20 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "545557cce770baeca91c868caec958"}, 0x10, 0x0) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 309.830142] Bluetooth: hci0 command 0x1003 tx timeout [ 309.835503] Bluetooth: hci0 sending frame failed (-49) [ 311.910201] Bluetooth: hci0 command 0x1001 tx timeout [ 311.915515] Bluetooth: hci0 sending frame failed (-49) [ 313.990231] Bluetooth: hci0 command 0x1009 tx timeout 00:29:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:30 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "545557cce770baeca91c868caec958"}, 0x10, 0x0) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 00:29:30 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000001c0)=0x18, 0x4) pipe(0x0) close(0xffffffffffffffff) 00:29:30 executing program 3: io_setup(0x1ff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0), 0x1, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000001c0)=0x18, 0x4) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) 00:29:30 executing program 5: 00:29:30 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080), 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000400)=""/4096, &(0x7f00000001c0)=0x1000) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) 00:29:30 executing program 5: 00:29:30 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080), 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000400)=""/4096, &(0x7f00000001c0)=0x1000) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) 00:29:30 executing program 3: io_setup(0x1ff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000140)='security.evm\x00', &(0x7f00000000c0), 0x1, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000001c0)=0x18, 0x4) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) 00:29:30 executing program 5: 00:29:30 executing program 2: 00:29:30 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080), 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000400)=""/4096, &(0x7f00000001c0)=0x1000) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) [ 318.880531] device bridge_slave_1 left promiscuous mode [ 318.886078] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.930751] device bridge_slave_0 left promiscuous mode [ 318.936312] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.044992] device hsr_slave_1 left promiscuous mode [ 319.095432] device hsr_slave_0 left promiscuous mode [ 319.154800] team0 (unregistering): Port device team_slave_1 removed [ 319.164938] team0 (unregistering): Port device team_slave_0 removed [ 319.174383] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 319.213448] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 319.293467] bond0 (unregistering): Released all slaves [ 320.070150] Bluetooth: hci0 command 0x1003 tx timeout [ 320.075603] Bluetooth: hci0 sending frame failed (-49) [ 322.150145] Bluetooth: hci0 command 0x1001 tx timeout [ 322.155654] Bluetooth: hci0 sending frame failed (-49) [ 324.230159] Bluetooth: hci0 command 0x1009 tx timeout 00:29:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:40 executing program 5: io_setup(0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000140)='security.evm\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000001c0)=0x18, 0x4) pipe(0x0) close(0xffffffffffffffff) 00:29:40 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x200000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) sendfile(r2, r1, 0x0, 0x1f7) 00:29:40 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000001c0)=0x18, 0x4) pipe(0x0) close(0xffffffffffffffff) 00:29:40 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080), 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000400)=""/4096, &(0x7f00000001c0)=0x1000) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) 00:29:40 executing program 3: 00:29:40 executing program 3: 00:29:40 executing program 4: 00:29:40 executing program 2: 00:29:40 executing program 3: 00:29:40 executing program 4: 00:29:40 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) [ 330.230219] Bluetooth: hci0 command 0x1003 tx timeout [ 330.236002] Bluetooth: hci0 sending frame failed (-49) [ 330.271384] IPVS: ftp: loaded support on port[0] = 21 [ 331.133430] chnl_net:caif_netlink_parms(): no params data found [ 331.167702] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.174505] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.182257] device bridge_slave_0 entered promiscuous mode [ 331.188998] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.195624] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.203088] device bridge_slave_1 entered promiscuous mode [ 331.218475] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 331.227831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 331.246263] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 331.253725] team0: Port device team_slave_0 added [ 331.260174] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 331.267269] team0: Port device team_slave_1 added [ 331.273099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 331.281220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 331.343673] device hsr_slave_0 entered promiscuous mode [ 331.380502] device hsr_slave_1 entered promiscuous mode [ 331.441111] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 331.449295] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 331.464842] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.471445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.478314] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.484876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.517531] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 331.524348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.534879] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 331.544019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.551308] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.558045] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.567672] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 331.573963] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.582735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.590957] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.597426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.610479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.618468] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.624958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.634559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.643529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.657584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.669591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.680085] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 331.686631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.694992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.702648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.716848] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 331.723706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.733757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.741041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.751827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.130613] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 332.310268] Bluetooth: hci0 command 0x1001 tx timeout [ 332.315740] Bluetooth: hci0 sending frame failed (-49) [ 333.660485] device bridge_slave_1 left promiscuous mode [ 333.666103] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.740903] device bridge_slave_0 left promiscuous mode [ 333.746430] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.892663] device hsr_slave_1 left promiscuous mode [ 333.933050] device hsr_slave_0 left promiscuous mode [ 333.975340] team0 (unregistering): Port device team_slave_1 removed [ 333.986148] team0 (unregistering): Port device team_slave_0 removed [ 333.995701] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 334.033890] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 334.103043] bond0 (unregistering): Released all slaves [ 334.400206] Bluetooth: hci0 command 0x1009 tx timeout 00:29:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:50 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=""/259, &(0x7f0000000140)=0x103) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) socketpair(0x2, 0x803, 0xd4, &(0x7f0000000000)) 00:29:50 executing program 5: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=""/259, &(0x7f0000000140)=0x103) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) syz_read_part_table(0x9, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="50b819d842d3acda6af0219ab6ef1663eb4edcb6a6745aafdcf06d428e8fe3d028ba8e", 0x23, 0x6}]) 00:29:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000002c0)) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @loopback}, 0x130, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x48e3423399deff26, 0x4, 0x9, 0x0, 0x84efaca474e8f76c}) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @rand_addr="cda1b69d99c902271579b27c549bd06f"}, @IFA_CACHEINFO={0x14, 0x6, {0x401, 0x6}}]}, 0x40}}, 0x0) 00:29:50 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000240)=""/259, &(0x7f0000000140)=0x103) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, 0x0) 00:29:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x40, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000002c0)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x48e3423399deff26, 0x4, 0x9, 0x0, 0x84efaca474e8f76c}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x11) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newneigh={0x38, 0x1c, 0x2, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, 0x9, 0x0, 0x9}, [@NDA_PROBES={0x8, 0x4, 0x6}, @NDA_DST_MAC={0xc, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_PROBES={0x8, 0x4, 0x3}]}, 0xffffffd5}}, 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @rand_addr="cda1b69d99c902271579b27c549bd06f"}, @IFA_CACHEINFO={0x14, 0x6, {0x401, 0x6}}]}, 0x40}}, 0x0) [ 338.456804] ptrace attach of "/root/syz-executor.4"[9348] was attempted by "/root/syz-executor.4"[9351] 00:29:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x8001000, @mcast1, 0x3ff}}, 0x0, 0x9, 0x0, "0a59dfda53a4f3cda78b2f3f0f1df0a7baddac1fdad49c5c5de51d053dfcd7140db955dc7ad57f1bcae48388936fe7795a5c4ba8409aba49b240375b1a6cd7db40d07be0eb15b1980859fe80501777a8"}, 0xd8) r3 = dup(r0) r4 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x99\x11\f\a\tB\xa8\xe9\xb6\xfe\xb5\xb5\\o\xee\x1e\xde\xdb\x0fY\xe1p\x9dZ\x7f\x87]\xc2\xda?,x\xa9\xe0\v\xb43\xbc\x01o\xd56G\xdd\x06q\x06\xea\xc2$\xb0X\x90\x82\xcd\xfb\xd0_\xfe\x0f\xd0d\x8bhZ\xae\\\x9f\xb4H\xd5\x81)o\xb8\xc5\xd1\xcd\xac\xae\xa9\xbf\xb0\x82\xabT?\xc9@\x872)\xcf+a\xc8\xf4\xc6\xe8\'\xcb)X1\xc8\x1a\xfa\xba\x14\x98\xddO\x13\xaa{Qn\xd26\x06\x12&\xe79j\x80\x9am\x19\x01\x9cN\xd4\x02\xdb\xf6\xfd\xdbkV\x82s\x8b\xbd\xcb@\xbd\xa4\x97\xbe\x83\xcc\xb4\x1f\xe3\x1b\x92\xc4\x8b\xdf\xb9\x86g\x95', 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f6669496530206e6264000a463542faf80425b358d45a05144aed810000000000000042221f70ff47c37ec2a40f0bfa91b79d49601bfe0a908fb1c38767b558233fbfd2abebff1835717da71ddd493a91cb2855622effe790c86e50e56f21b29d386dbe44b48eb8ccf4275d70a97177e981eee671b02ed56fb3"], 0x7f) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x31) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x1b}, 0x2, 0x54a4df0a8b53c2c9, 0xff, 0x1, 0xa3b2}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000000c0)={0x1, 0x80000001, 0x2, 0x401}) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000003d80), 0x0, 0x0, 0x0) 00:29:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x8001000, @mcast1, 0x3ff}}, 0x0, 0x9, 0x0, "0a59dfda53a4f3cda78b2f3f0f1df0a7baddac1fdad49c5c5de51d053dfcd7140db955dc7ad57f1bcae48388936fe7795a5c4ba8409aba49b240375b1a6cd7db40d07be0eb15b1980859fe80501777a8"}, 0xd8) r3 = dup(r0) r4 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x99\x11\f\a\tB\xa8\xe9\xb6\xfe\xb5\xb5\\o\xee\x1e\xde\xdb\x0fY\xe1p\x9dZ\x7f\x87]\xc2\xda?,x\xa9\xe0\v\xb43\xbc\x01o\xd56G\xdd\x06q\x06\xea\xc2$\xb0X\x90\x82\xcd\xfb\xd0_\xfe\x0f\xd0d\x8bhZ\xae\\\x9f\xb4H\xd5\x81)o\xb8\xc5\xd1\xcd\xac\xae\xa9\xbf\xb0\x82\xabT?\xc9@\x872)\xcf+a\xc8\xf4\xc6\xe8\'\xcb)X1\xc8\x1a\xfa\xba\x14\x98\xddO\x13\xaa{Qn\xd26\x06\x12&\xe79j\x80\x9am\x19\x01\x9cN\xd4\x02\xdb\xf6\xfd\xdbkV\x82s\x8b\xbd\xcb@\xbd\xa4\x97\xbe\x83\xcc\xb4\x1f\xe3\x1b\x92\xc4\x8b\xdf\xb9\x86g\x95', 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f6669496530206e6264000a463542faf80425b358d45a05144aed810000000000000042221f70ff47c37ec2a40f0bfa91b79d49601bfe0a908fb1c38767b558233fbfd2abebff1835717da71ddd493a91cb2855622effe790c86e50e56f21b29d386dbe44b48eb8ccf4275d70a97177e981eee671b02ed56fb3"], 0x7f) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x31) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x1b}, 0x2, 0x54a4df0a8b53c2c9, 0xff, 0x1, 0xa3b2}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000000c0)={0x1, 0x80000001, 0x2, 0x401}) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000003d80), 0x0, 0x0, 0x0) 00:29:51 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 00:29:51 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 00:29:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x8001000, @mcast1, 0x3ff}}, 0x0, 0x9, 0x0, "0a59dfda53a4f3cda78b2f3f0f1df0a7baddac1fdad49c5c5de51d053dfcd7140db955dc7ad57f1bcae48388936fe7795a5c4ba8409aba49b240375b1a6cd7db40d07be0eb15b1980859fe80501777a8"}, 0xd8) r3 = dup(r0) r4 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x99\x11\f\a\tB\xa8\xe9\xb6\xfe\xb5\xb5\\o\xee\x1e\xde\xdb\x0fY\xe1p\x9dZ\x7f\x87]\xc2\xda?,x\xa9\xe0\v\xb43\xbc\x01o\xd56G\xdd\x06q\x06\xea\xc2$\xb0X\x90\x82\xcd\xfb\xd0_\xfe\x0f\xd0d\x8bhZ\xae\\\x9f\xb4H\xd5\x81)o\xb8\xc5\xd1\xcd\xac\xae\xa9\xbf\xb0\x82\xabT?\xc9@\x872)\xcf+a\xc8\xf4\xc6\xe8\'\xcb)X1\xc8\x1a\xfa\xba\x14\x98\xddO\x13\xaa{Qn\xd26\x06\x12&\xe79j\x80\x9am\x19\x01\x9cN\xd4\x02\xdb\xf6\xfd\xdbkV\x82s\x8b\xbd\xcb@\xbd\xa4\x97\xbe\x83\xcc\xb4\x1f\xe3\x1b\x92\xc4\x8b\xdf\xb9\x86g\x95', 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f6669496530206e6264000a463542faf80425b358d45a05144aed810000000000000042221f70ff47c37ec2a40f0bfa91b79d49601bfe0a908fb1c38767b558233fbfd2abebff1835717da71ddd493a91cb2855622effe790c86e50e56f21b29d386dbe44b48eb8ccf4275d70a97177e981eee671b02ed56fb3"], 0x7f) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x31) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x1b}, 0x2, 0x54a4df0a8b53c2c9, 0xff, 0x1, 0xa3b2}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000000c0)={0x1, 0x80000001, 0x2, 0x401}) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000003d80), 0x0, 0x0, 0x0) 00:29:51 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=""/259, &(0x7f0000000140)=0x103) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) socketpair(0x2, 0x803, 0xd4, &(0x7f0000000000)) 00:29:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000200)=0x10000000003e, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x8001000, @mcast1, 0x3ff}}, 0x0, 0x9, 0x0, "0a59dfda53a4f3cda78b2f3f0f1df0a7baddac1fdad49c5c5de51d053dfcd7140db955dc7ad57f1bcae48388936fe7795a5c4ba8409aba49b240375b1a6cd7db40d07be0eb15b1980859fe80501777a8"}, 0xd8) r3 = dup(r0) r4 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x99\x11\f\a\tB\xa8\xe9\xb6\xfe\xb5\xb5\\o\xee\x1e\xde\xdb\x0fY\xe1p\x9dZ\x7f\x87]\xc2\xda?,x\xa9\xe0\v\xb43\xbc\x01o\xd56G\xdd\x06q\x06\xea\xc2$\xb0X\x90\x82\xcd\xfb\xd0_\xfe\x0f\xd0d\x8bhZ\xae\\\x9f\xb4H\xd5\x81)o\xb8\xc5\xd1\xcd\xac\xae\xa9\xbf\xb0\x82\xabT?\xc9@\x872)\xcf+a\xc8\xf4\xc6\xe8\'\xcb)X1\xc8\x1a\xfa\xba\x14\x98\xddO\x13\xaa{Qn\xd26\x06\x12&\xe79j\x80\x9am\x19\x01\x9cN\xd4\x02\xdb\xf6\xfd\xdbkV\x82s\x8b\xbd\xcb@\xbd\xa4\x97\xbe\x83\xcc\xb4\x1f\xe3\x1b\x92\xc4\x8b\xdf\xb9\x86g\x95', 0x0) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f6669496530206e6264000a463542faf80425b358d45a05144aed810000000000000042221f70ff47c37ec2a40f0bfa91b79d49601bfe0a908fb1c38767b558233fbfd2abebff1835717da71ddd493a91cb2855622effe790c86e50e56f21b29d386dbe44b48eb8ccf4275d70a97177e981eee671b02ed56fb3"], 0x7f) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x31) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x1b}, 0x2, 0x54a4df0a8b53c2c9, 0xff, 0x1, 0xa3b2}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000000c0)={0x1, 0x80000001, 0x2, 0x401}) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, '\x00\x00\x00\x00\x00\x00i\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', '\x00', "0082f2ff00"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000003d80), 0x0, 0x0, 0x0) 00:29:51 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 00:29:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 341.391599] IPVS: ftp: loaded support on port[0] = 21 [ 342.369308] chnl_net:caif_netlink_parms(): no params data found [ 342.404199] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.410818] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.417802] device bridge_slave_0 entered promiscuous mode [ 342.424682] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.431151] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.438002] device bridge_slave_1 entered promiscuous mode [ 342.455469] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 342.464902] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 342.481135] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 342.488273] team0: Port device team_slave_0 added [ 342.494120] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 342.501458] team0: Port device team_slave_1 added [ 342.506943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 342.514638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 342.573775] device hsr_slave_0 entered promiscuous mode [ 342.620473] device hsr_slave_1 entered promiscuous mode [ 342.661003] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 342.668176] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 342.683304] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.689665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.696343] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.702766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.732614] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 342.738981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.748124] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 342.758020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.765293] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.772488] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.783969] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 342.790317] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.798863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.807037] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.813421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.824197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.832084] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.838863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.853813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.862063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.876880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.887302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.897839] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 342.904965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.912882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.920941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.928529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.940310] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 342.951579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.958180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.965552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.360437] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 00:29:56 executing program 1: io_setup(0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000001c0)=0x18, 0x4) pipe(0x0) close(0xffffffffffffffff) 00:29:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) dup2(r0, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:29:56 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=""/259, &(0x7f0000000140)=0x103) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) socketpair(0x2, 0x803, 0xd4, &(0x7f0000000000)) 00:29:56 executing program 2: io_setup(0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) 00:29:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xea, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:29:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:56 executing program 5: 00:29:56 executing program 2: io_setup(0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) 00:29:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:56 executing program 3: 00:29:56 executing program 1: io_setup(0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000001c0)=0x18, 0x4) pipe(0x0) close(0xffffffffffffffff) 00:29:56 executing program 3: 00:29:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:57 executing program 4: 00:29:57 executing program 5: 00:29:57 executing program 3: 00:29:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:57 executing program 2: 00:29:57 executing program 1: 00:29:57 executing program 2: 00:29:57 executing program 3: 00:29:57 executing program 2: 00:29:57 executing program 1: 00:29:57 executing program 4: 00:29:57 executing program 2: 00:29:57 executing program 3: 00:29:57 executing program 5: 00:29:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:57 executing program 2: 00:29:57 executing program 1: 00:29:57 executing program 4: 00:29:57 executing program 3: 00:29:57 executing program 5: 00:29:57 executing program 2: 00:29:57 executing program 1: 00:29:57 executing program 4: 00:29:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:57 executing program 2: 00:29:57 executing program 3: 00:29:57 executing program 4: 00:29:57 executing program 1: 00:29:57 executing program 5: 00:29:57 executing program 2: 00:29:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:57 executing program 3: 00:29:57 executing program 1: 00:29:57 executing program 4: 00:29:57 executing program 5: 00:29:57 executing program 2: 00:29:57 executing program 4: 00:29:57 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080)=0x2ecb, 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xfc7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100000000007fd, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) getsockopt$sock_buf(r0, 0x1, 0xa54751aa6759af06, &(0x7f0000000400)=""/4096, &(0x7f00000001c0)=0x1000) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0xf2480) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) close(r1) 00:29:57 executing program 3: 00:29:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:57 executing program 2: 00:29:57 executing program 5: 00:29:57 executing program 4: 00:29:57 executing program 3: 00:29:57 executing program 2: 00:29:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:57 executing program 5: 00:29:57 executing program 3: 00:29:57 executing program 4: 00:29:58 executing program 4: 00:29:58 executing program 2: 00:29:58 executing program 3: 00:29:58 executing program 5: 00:29:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080)=0x2ecb, 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xfc7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100000000007fd, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) getsockopt$sock_buf(r0, 0x1, 0xa54751aa6759af06, &(0x7f0000000400)=""/4096, &(0x7f00000001c0)=0x1000) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0xf2480) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) close(r1) 00:29:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:58 executing program 2: 00:29:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:29:58 executing program 2: 00:29:58 executing program 4: 00:29:58 executing program 3: 00:29:58 executing program 5: 00:29:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080)=0x2ecb, 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xfc7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100000000007fd, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) getsockopt$sock_buf(r0, 0x1, 0xa54751aa6759af06, &(0x7f0000000400)=""/4096, &(0x7f00000001c0)=0x1000) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0xf2480) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) close(r1) 00:29:58 executing program 4: 00:29:58 executing program 2: 00:29:58 executing program 3: 00:29:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 00:29:58 executing program 5: 00:29:58 executing program 4: 00:29:58 executing program 2: 00:29:58 executing program 3: 00:29:58 executing program 4: 00:29:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 00:29:58 executing program 5: 00:29:58 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000080)=0x2ecb, 0xcbc8e3185b27c9d1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xfc7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100000000007fd, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) getsockopt$sock_buf(r0, 0x1, 0xa54751aa6759af06, &(0x7f0000000400)=""/4096, &(0x7f00000001c0)=0x1000) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x6, 0xf2480) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000030, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) close(r1) 00:29:58 executing program 2: 00:29:58 executing program 3: 00:29:58 executing program 4: 00:29:58 executing program 5: 00:29:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 00:29:58 executing program 2: 00:29:58 executing program 3: 00:29:58 executing program 4: 00:29:58 executing program 5: 00:29:58 executing program 2: 00:29:58 executing program 3: [ 346.930519] device bridge_slave_1 left promiscuous mode [ 346.936102] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.991052] device bridge_slave_0 left promiscuous mode [ 346.996866] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.157052] device hsr_slave_1 left promiscuous mode [ 347.213518] device hsr_slave_0 left promiscuous mode [ 347.273621] team0 (unregistering): Port device team_slave_1 removed [ 347.286877] team0 (unregistering): Port device team_slave_0 removed [ 347.296852] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 347.373381] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 347.444293] bond0 (unregistering): Released all slaves [ 349.091457] IPVS: ftp: loaded support on port[0] = 21 [ 350.068992] chnl_net:caif_netlink_parms(): no params data found [ 350.104722] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.111422] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.118414] device bridge_slave_0 entered promiscuous mode [ 350.125342] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.131882] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.138778] device bridge_slave_1 entered promiscuous mode [ 350.154704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 350.164264] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 350.180166] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 350.187263] team0: Port device team_slave_0 added [ 350.192964] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 350.200011] team0: Port device team_slave_1 added [ 350.205448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 350.213119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 350.263597] device hsr_slave_0 entered promiscuous mode [ 350.300454] device hsr_slave_1 entered promiscuous mode [ 350.340757] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 350.347794] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 350.361280] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.367634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.374283] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.380676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.407493] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 350.414122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.423070] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 350.432209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.439219] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.446175] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.455794] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 350.462756] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.471095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.478800] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.485355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.501119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.508699] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.515194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.522808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.530903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.539983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.552695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.562073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.573931] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 350.579974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.587123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.600425] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 350.607687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.614926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.624557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.060407] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 00:30:03 executing program 1: 00:30:03 executing program 4: 00:30:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 00:30:03 executing program 5: 00:30:03 executing program 2: 00:30:03 executing program 3: 00:30:03 executing program 2: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="13cd0f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)="e7", 0x1}], 0x3}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="12ec93badbaa8968ff780b6b7ba0294ccf3e5f5e6576ec90b40d3b620913339c92", @ANYPTR64, @ANYRES64, @ANYPTR64], 0x0, 0x39}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:30:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0}) 00:30:04 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0x80) shutdown(r1, 0x0) 00:30:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1400000013001963103652646f121f1101b17f04", 0x14}], 0x1) 00:30:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b20") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 351.919510] ptrace attach of "/root/syz-executor.2"[9698] was attempted by "/root/syz-executor.2"[9703] 00:30:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 352.690528] device bridge_slave_1 left promiscuous mode [ 352.696230] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.760939] device bridge_slave_0 left promiscuous mode [ 352.768742] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.907099] device hsr_slave_1 left promiscuous mode [ 352.943766] device hsr_slave_0 left promiscuous mode [ 353.022928] team0 (unregistering): Port device team_slave_1 removed [ 353.034977] team0 (unregistering): Port device team_slave_0 removed [ 353.044663] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 353.075452] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 353.136690] bond0 (unregistering): Released all slaves [ 353.910161] Bluetooth: hci0 command 0x1003 tx timeout [ 353.915551] Bluetooth: hci0 sending frame failed (-49) [ 354.940964] IPVS: ftp: loaded support on port[0] = 21 [ 355.762903] chnl_net:caif_netlink_parms(): no params data found [ 355.796042] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.802708] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.809631] device bridge_slave_0 entered promiscuous mode [ 355.816555] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.823181] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.830344] device bridge_slave_1 entered promiscuous mode [ 355.845990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 355.855470] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 355.873024] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 355.880226] team0: Port device team_slave_0 added [ 355.885800] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 355.893038] team0: Port device team_slave_1 added [ 355.898414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 355.906896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 355.963693] device hsr_slave_0 entered promiscuous mode [ 356.000296] Bluetooth: hci0 command 0x1001 tx timeout [ 356.005622] Bluetooth: hci0 sending frame failed (-49) [ 356.011322] device hsr_slave_1 entered promiscuous mode [ 356.050901] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 356.058223] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 356.072113] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.078604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.085283] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.091677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.120110] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 356.126458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.134972] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 356.144702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.152634] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.159310] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.168956] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 356.175266] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.184966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.192861] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.199195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.209290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.217049] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.223595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.240945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.248885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.257122] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.269984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.279984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.292604] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 356.298978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.306928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.314792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.327299] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 356.335560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 356.342735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.356091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.760517] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 358.070751] Bluetooth: hci0 command 0x1009 tx timeout 00:30:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 00:30:14 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b20") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 362.127321] FAULT_INJECTION: forcing a failure. [ 362.127321] name failslab, interval 1, probability 0, space 0, times 1 [ 362.158448] Bluetooth: hci0: Frame reassembly failed (-84) [ 362.163155] CPU: 1 PID: 9750 Comm: syz-executor.5 Not tainted 4.14.156-syzkaller #0 [ 362.172155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.181600] Call Trace: [ 362.184346] dump_stack+0x142/0x197 [ 362.188300] should_fail.cold+0x10f/0x159 [ 362.192547] should_failslab+0xdb/0x130 [ 362.196565] __kmalloc+0x2f0/0x7a0 [ 362.200194] ? kernfs_fop_write+0x30a/0x450 [ 362.204527] kernfs_fop_write+0x30a/0x450 [ 362.208771] __vfs_write+0x105/0x6b0 [ 362.212580] ? __lock_is_held+0xb6/0x140 [ 362.216662] ? kernfs_fop_open+0xc90/0xc90 [ 362.221010] ? kernel_read+0x120/0x120 [ 362.224885] ? __lock_is_held+0xb6/0x140 [ 362.228988] ? check_preemption_disabled+0x3c/0x250 [ 362.234470] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 362.239997] ? rcu_read_lock_sched_held+0x110/0x130 [ 362.245014] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 362.249785] ? __sb_start_write+0x153/0x2f0 [ 362.254113] vfs_write+0x198/0x500 [ 362.257640] SyS_write+0xfd/0x230 [ 362.261132] ? SyS_read+0x230/0x230 [ 362.264834] ? do_syscall_64+0x53/0x640 [ 362.268805] ? SyS_read+0x230/0x230 [ 362.272424] do_syscall_64+0x1e8/0x640 [ 362.276303] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.281169] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 362.286357] RIP: 0033:0x45a649 [ 362.289533] RSP: 002b:00007f5ee3706c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.297235] RAX: ffffffffffffffda RBX: 00007f5ee3706c90 RCX: 000000000045a649 [ 362.304615] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 362.311880] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.319138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ee37076d4 00:30:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b20") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:14 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 362.326388] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000006 00:30:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 364.230127] Bluetooth: hci0 command 0x1003 tx timeout [ 364.236387] Bluetooth: hci0 sending frame failed (-49) [ 366.310186] Bluetooth: hci0 command 0x1001 tx timeout [ 366.315677] Bluetooth: hci0 sending frame failed (-49) [ 368.390298] Bluetooth: hci0 command 0x1009 tx timeout 00:30:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 00:30:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x0, 0xff) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:24 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:24 executing program 5 (fault-call:4 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 372.357525] FAULT_INJECTION: forcing a failure. [ 372.357525] name failslab, interval 1, probability 0, space 0, times 0 [ 372.379621] CPU: 1 PID: 9795 Comm: syz-executor.5 Not tainted 4.14.156-syzkaller #0 [ 372.387554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.387587] Call Trace: [ 372.387614] dump_stack+0x142/0x197 [ 372.403211] should_fail.cold+0x10f/0x159 [ 372.403229] should_failslab+0xdb/0x130 [ 372.403241] __kmalloc_track_caller+0x2ec/0x790 [ 372.403255] ? save_trace+0x290/0x290 [ 372.403276] ? mutex_trylock+0x1c0/0x1c0 [ 372.403398] ? alloc_trial_cpuset+0x23/0x110 [ 372.416304] kmemdup+0x27/0x60 [ 372.416320] alloc_trial_cpuset+0x23/0x110 [ 372.416329] update_flag+0x26/0x420 [ 372.416339] cpuset_write_u64+0x1f4/0x230 [ 372.416349] cgroup_file_write+0x43c/0x700 [ 372.432017] ? __lock_is_held+0xb6/0x140 [ 372.432033] ? init_and_link_css+0x580/0x580 [ 372.432046] ? init_and_link_css+0x580/0x580 [ 372.432058] kernfs_fop_write+0x291/0x450 [ 372.432075] __vfs_write+0x105/0x6b0 [ 372.439920] ? __lock_is_held+0xb6/0x140 [ 372.439931] ? kernfs_fop_open+0xc90/0xc90 [ 372.439943] ? kernel_read+0x120/0x120 [ 372.439955] ? __lock_is_held+0xb6/0x140 [ 372.448323] ? check_preemption_disabled+0x3c/0x250 [ 372.448343] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 372.448355] ? rcu_read_lock_sched_held+0x110/0x130 [ 372.448367] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 372.469077] ? __sb_start_write+0x153/0x2f0 [ 372.469092] vfs_write+0x198/0x500 [ 372.469105] SyS_write+0xfd/0x230 [ 372.469115] ? SyS_read+0x230/0x230 [ 372.490408] ? do_syscall_64+0x53/0x640 [ 372.490424] ? SyS_read+0x230/0x230 [ 372.490433] do_syscall_64+0x1e8/0x640 [ 372.490442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.490462] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.500903] RIP: 0033:0x45a649 [ 372.500908] RSP: 002b:00007f5ee3706c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 00:30:24 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:24 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:24 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:24 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 372.500920] RAX: ffffffffffffffda RBX: 00007f5ee3706c90 RCX: 000000000045a649 [ 372.500926] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 372.500932] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 372.500937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ee37076d4 [ 372.500942] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000006 [ 374.630193] Bluetooth: hci0 command 0x1003 tx timeout [ 374.635555] Bluetooth: hci0 sending frame failed (-49) [ 376.710282] Bluetooth: hci0 command 0x1001 tx timeout [ 376.715597] Bluetooth: hci0 sending frame failed (-49) [ 378.790165] Bluetooth: hci0 command 0x1009 tx timeout 00:30:35 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 5 (fault-call:4 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 4: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:30:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 4: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 383.273858] FAULT_INJECTION: forcing a failure. [ 383.273858] name failslab, interval 1, probability 0, space 0, times 0 [ 383.309359] CPU: 1 PID: 9836 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 383.317391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.317397] Call Trace: [ 383.317414] dump_stack+0x142/0x197 [ 383.317433] should_fail.cold+0x10f/0x159 [ 383.317450] should_failslab+0xdb/0x130 [ 383.317461] kmem_cache_alloc_trace+0x2e9/0x790 [ 383.317591] hci_alloc_dev+0x43/0x1c60 [ 383.350004] hci_uart_tty_ioctl+0x27e/0xa20 [ 383.354412] tty_ioctl+0x8f7/0x1320 [ 383.354427] ? hci_uart_tty_poll+0x10/0x10 [ 383.362278] ? tty_vhangup+0x30/0x30 [ 383.366075] ? __might_sleep+0x93/0xb0 [ 383.370023] ? __fget+0x210/0x370 [ 383.373497] ? tty_vhangup+0x30/0x30 [ 383.377217] do_vfs_ioctl+0x7ae/0x1060 [ 383.381199] ? selinux_file_mprotect+0x5d0/0x5d0 [ 383.385969] ? lock_downgrade+0x740/0x740 [ 383.390129] ? ioctl_preallocate+0x1c0/0x1c0 [ 383.394549] ? __fget+0x237/0x370 [ 383.398075] ? security_file_ioctl+0x89/0xb0 [ 383.402497] SyS_ioctl+0x8f/0xc0 [ 383.405869] ? do_vfs_ioctl+0x1060/0x1060 [ 383.410051] do_syscall_64+0x1e8/0x640 [ 383.413942] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 383.418793] entry_SYSCALL_64_after_hwframe+0x42/0xb7 00:30:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpus\xb7\t\x00\x00emory_\x03\x0egrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 383.423974] RIP: 0033:0x45a649 [ 383.427152] RSP: 002b:00007f9db776ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.427164] RAX: ffffffffffffffda RBX: 00007f9db776ec90 RCX: 000000000045a649 [ 383.427169] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 383.427174] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 383.427178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db776f6d4 [ 383.427186] R13: 00000000004c3670 R14: 00000000004d7a88 R15: 0000000000000004 00:30:35 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpu.weight\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00'], 0x2) 00:30:35 executing program 4: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 0 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 383.483525] Bluetooth: Can't allocate HCI device 00:30:35 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 2: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 383.579051] FAULT_INJECTION: forcing a failure. [ 383.579051] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 383.591333] CPU: 0 PID: 9868 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 383.599163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.608555] Call Trace: [ 383.611160] dump_stack+0x142/0x197 [ 383.614809] should_fail.cold+0x10f/0x159 [ 383.619409] __alloc_pages_nodemask+0x1d6/0x7a0 [ 383.624096] ? __alloc_pages_slowpath+0x2930/0x2930 00:30:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 383.629133] cache_grow_begin+0x80/0x400 [ 383.633210] kmem_cache_alloc_trace+0x6b2/0x790 [ 383.637991] hci_alloc_dev+0x43/0x1c60 [ 383.641896] hci_uart_tty_ioctl+0x27e/0xa20 [ 383.646259] tty_ioctl+0x8f7/0x1320 [ 383.649898] ? hci_uart_tty_poll+0x10/0x10 [ 383.654300] ? tty_vhangup+0x30/0x30 [ 383.658034] ? __might_sleep+0x93/0xb0 [ 383.661925] ? __fget+0x210/0x370 [ 383.665397] ? tty_vhangup+0x30/0x30 [ 383.669120] do_vfs_ioctl+0x7ae/0x1060 [ 383.673052] ? selinux_file_mprotect+0x5d0/0x5d0 [ 383.677815] ? lock_downgrade+0x740/0x740 [ 383.681973] ? ioctl_preallocate+0x1c0/0x1c0 [ 383.686388] ? __fget+0x237/0x370 [ 383.689853] ? security_file_ioctl+0x89/0xb0 [ 383.694270] SyS_ioctl+0x8f/0xc0 [ 383.697642] ? do_vfs_ioctl+0x1060/0x1060 [ 383.701799] do_syscall_64+0x1e8/0x640 [ 383.705721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 383.710578] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 383.715777] RIP: 0033:0x45a649 [ 383.718967] RSP: 002b:00007f9db776ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:30:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) write$P9_RFSYNC(r2, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'cpu', 0x30}]}, 0x5) 00:30:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:35 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 383.726684] RAX: ffffffffffffffda RBX: 00007f9db776ec90 RCX: 000000000045a649 [ 383.734135] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 383.741405] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 383.741411] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db776f6d4 [ 383.741415] R13: 00000000004c3670 R14: 00000000004d7a88 R15: 0000000000000004 [ 385.920113] Bluetooth: hci0 command 0x1003 tx timeout [ 385.925446] Bluetooth: hci0 sending frame failed (-49) [ 387.990222] Bluetooth: hci0 command 0x1001 tx timeout [ 387.995552] Bluetooth: hci0 sending frame failed (-49) [ 390.070213] Bluetooth: hci0 command 0x1009 tx timeout 00:30:46 executing program 0 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:30:46 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 2: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./\x00\x7fr\x06\x00\x00\x00s;AS\x1d\xd9\v\xf8\xf1\x00\x00\x00\xe7\x00\x00\x00\x00\x00\x88\x1f\xf7\xa3\xeaf', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") uselib(&(0x7f0000000040)='./file0\x00') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2bbc0c659e4e284b7a1010937e48e7f3a0a6aa5ca7e7020577165efb8c90813b6238eab1b6e9adb226a5719e9b0d189d6254ee540b56e84b5bc5"], 0x2) 00:30:46 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)=""/243) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="d255057a6be001790001004ddec3d82bec8f71c5d1605a6a8201010000a9c802986dc6096a0584a3cbbabde1847b2ccf62b985a6e9da679304e069e555b6d355609d374601000080000000004162f2369aaeeb7113b8edc614c07bebfb3c177fe9935e8b8a4bc9b38629214e887bce160200deb3c3c2d919875efff93cd606d4f77286907eafc91753dc607765b827120e2888b4ee2109ed53459b39e89963d7935d0d1010c5730000"], 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) 00:30:46 executing program 2: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 394.200763] FAULT_INJECTION: forcing a failure. [ 394.200763] name failslab, interval 1, probability 0, space 0, times 0 [ 394.275853] CPU: 1 PID: 9933 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 394.283798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.293324] Call Trace: [ 394.295944] dump_stack+0x142/0x197 [ 394.299602] should_fail.cold+0x10f/0x159 [ 394.303772] should_failslab+0xdb/0x130 [ 394.307766] kmem_cache_alloc_trace+0x2e9/0x790 [ 394.312545] ? pm_runtime_init+0x355/0x400 [ 394.316863] ? device_initialize+0x18d/0x430 [ 394.321296] bcsp_open+0x46/0x3d0 [ 394.324770] hci_uart_tty_ioctl+0x668/0xa20 [ 394.329198] tty_ioctl+0x8f7/0x1320 [ 394.332845] ? hci_uart_tty_poll+0x10/0x10 [ 394.337098] ? tty_vhangup+0x30/0x30 [ 394.340833] ? __might_sleep+0x93/0xb0 [ 394.344723] ? __fget+0x210/0x370 [ 394.348192] ? tty_vhangup+0x30/0x30 [ 394.352345] do_vfs_ioctl+0x7ae/0x1060 [ 394.352365] ? selinux_file_mprotect+0x5d0/0x5d0 [ 394.360999] ? lock_downgrade+0x740/0x740 [ 394.365152] ? ioctl_preallocate+0x1c0/0x1c0 [ 394.369568] ? __fget+0x237/0x370 [ 394.373048] ? security_file_ioctl+0x89/0xb0 [ 394.373065] SyS_ioctl+0x8f/0xc0 [ 394.380822] ? do_vfs_ioctl+0x1060/0x1060 [ 394.384981] do_syscall_64+0x1e8/0x640 [ 394.388876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.393736] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 394.399013] RIP: 0033:0x45a649 [ 394.402200] RSP: 002b:00007f9db774dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.409969] RAX: ffffffffffffffda RBX: 00007f9db774dc90 RCX: 000000000045a649 [ 394.417234] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 00:30:46 executing program 0 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:30:46 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) umount2(&(0x7f0000000780)='./file0\x00', 0x2) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000580)={r2, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) r3 = socket$inet6(0xa, 0x1, 0x46) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000006c0)={'raw\x00'}, &(0x7f0000000740)=0x54) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) getsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f00000004c0), &(0x7f0000000640)=0x4) r5 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 394.424498] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 394.424503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db774e6d4 [ 394.424508] R13: 00000000004c3670 R14: 00000000004d7a88 R15: 0000000000000004 00:30:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 394.514649] FAULT_INJECTION: forcing a failure. [ 394.514649] name failslab, interval 1, probability 0, space 0, times 0 [ 394.583390] CPU: 1 PID: 9961 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 394.591238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.600608] Call Trace: [ 394.603222] dump_stack+0x142/0x197 [ 394.606908] should_fail.cold+0x10f/0x159 [ 394.611105] should_failslab+0xdb/0x130 [ 394.615108] kmem_cache_alloc_trace+0x2e9/0x790 [ 394.619972] ? vsnprintf+0x290/0x1560 [ 394.623856] ? __alloc_workqueue_key+0x114/0xec0 [ 394.628635] __alloc_workqueue_key+0x15f/0xec0 00:30:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:46 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 394.633229] ? pointer+0xb10/0xb10 [ 394.636781] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 394.641812] ? scnprintf+0x100/0x100 [ 394.645541] ? ida_remove+0x230/0x230 [ 394.649357] ? __lockdep_init_map+0x10c/0x570 [ 394.653885] hci_register_dev+0x1a7/0x810 [ 394.658057] hci_uart_tty_ioctl+0x6a8/0xa20 [ 394.662434] tty_ioctl+0x8f7/0x1320 [ 394.666073] ? hci_uart_tty_poll+0x10/0x10 [ 394.670312] ? tty_vhangup+0x30/0x30 [ 394.674041] ? __might_sleep+0x93/0xb0 [ 394.677938] ? __fget+0x210/0x370 [ 394.681412] ? tty_vhangup+0x30/0x30 [ 394.685137] do_vfs_ioctl+0x7ae/0x1060 [ 394.689030] ? selinux_file_mprotect+0x5d0/0x5d0 [ 394.693791] ? lock_downgrade+0x740/0x740 [ 394.698010] ? ioctl_preallocate+0x1c0/0x1c0 [ 394.702438] ? __fget+0x237/0x370 [ 394.705923] ? security_file_ioctl+0x89/0xb0 [ 394.710338] SyS_ioctl+0x8f/0xc0 [ 394.713707] ? do_vfs_ioctl+0x1060/0x1060 [ 394.717891] do_syscall_64+0x1e8/0x640 [ 394.721782] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.726652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 394.731853] RIP: 0033:0x45a649 [ 394.735039] RSP: 002b:00007f9db776ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.742749] RAX: ffffffffffffffda RBX: 00007f9db776ec90 RCX: 000000000045a649 [ 394.750019] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 394.757297] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 394.764578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db776f6d4 [ 394.771956] R13: 00000000004c3670 R14: 00000000004d7a88 R15: 0000000000000004 00:30:46 executing program 0 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:30:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 394.799811] Bluetooth: Can't register HCI device 00:30:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 394.859829] FAULT_INJECTION: forcing a failure. [ 394.859829] name failslab, interval 1, probability 0, space 0, times 0 [ 394.880165] CPU: 0 PID: 9996 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 394.888003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.897401] Call Trace: [ 394.900012] dump_stack+0x142/0x197 [ 394.903657] should_fail.cold+0x10f/0x159 [ 394.907819] should_failslab+0xdb/0x130 [ 394.911801] __kmalloc+0x2f0/0x7a0 [ 394.915342] ? __lock_is_held+0xb6/0x140 [ 394.919414] ? apply_wqattrs_prepare+0xad/0x960 [ 394.924131] apply_wqattrs_prepare+0xad/0x960 [ 394.928651] apply_workqueue_attrs_locked+0xa7/0x120 [ 394.933767] apply_workqueue_attrs+0x31/0x50 [ 394.938196] __alloc_workqueue_key+0x78d/0xec0 [ 394.942788] ? pointer+0xb10/0xb10 [ 394.946342] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 394.951375] ? ida_remove+0x230/0x230 [ 394.951390] ? __lockdep_init_map+0x10c/0x570 [ 394.951409] hci_register_dev+0x1a7/0x810 [ 394.951427] hci_uart_tty_ioctl+0x6a8/0xa20 [ 394.951442] tty_ioctl+0x8f7/0x1320 [ 394.959712] ? hci_uart_tty_poll+0x10/0x10 [ 394.959723] ? tty_vhangup+0x30/0x30 [ 394.959744] ? __might_sleep+0x93/0xb0 [ 394.959753] ? __fget+0x210/0x370 [ 394.959768] ? tty_vhangup+0x30/0x30 [ 394.990792] do_vfs_ioctl+0x7ae/0x1060 [ 394.994693] ? selinux_file_mprotect+0x5d0/0x5d0 [ 394.999458] ? lock_downgrade+0x740/0x740 [ 395.003617] ? ioctl_preallocate+0x1c0/0x1c0 00:30:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x8001, 0x4, &(0x7f0000001280)=[{&(0x7f0000000140)="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", 0x1000, 0x9}, {&(0x7f0000001140)="2c206d9825023d20832e3d0ef7a5c749cfe68c05622f424c18b93c2b07ee0a548477e700da1aeafcd11189016a10c9eee16cebbf20ccc178bd5281e7a3045e4da06fa6df99b42a2944c57d30a5963037b6342c47fe59f5abf9a7e968caf1b8df1bff3c2d0691a159c5206781e13ed24fed8a52d54b276e71ddf4e6d4feb9923e7a938e5f0f325052eba59ce510b6d86eaaedb95b06c6a485b89bcbb562411109527c5406233b103f01e77ec5bee4eaad5d65", 0xb2, 0xba6}, {&(0x7f0000001200), 0x0, 0x5}, {&(0x7f0000001240), 0x0, 0x10001}], 0x2040000, &(0x7f0000001480)=ANY=[@ANYBLOB="70726a71756f74612c61747472322c6e6f71756f74612c73756e69743d3078303030303030303030303030303030342c626172726965722c6c6f676465763d2e2f66696c65302c6e6f696b6565702c736d61636b66736861743d6370757365742e6d656d6f72795f6d696772617445002c736d61636b66737472616e736d7574653d6370757365742e6d656d6f72795f6d696772617465002c646f6e745f686173682c002872986d35ca58c63ab5e645c8d3c7ab6f334f05b2e12442697e15ae04dd3f2112ed3523f155452301b735b958b4266fd6be79079811951a4fa71f6eff1134b43e7d8de0604e74dbe0b8908917b35b9d98d58e541620b5a1ee4536226d8c1282c12c29beb6118634850b4de9f9228440c286233f57376295c7d808d747ac911e45da2f3d12e5834b8f12b1a5d6cec43bf2b57b2eb879931894bea3494dd8f0c52dbc02ff1bfb83bee5856517bb6cb540dcf0d06344fda15cd5835e247d113d29a4e9e262520d3840d278"]) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket(0x5, 0x800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80841646}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)=@deltclass={0x38, 0x29, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x5, 0x3}, {0x0, 0xfff1}}, [@TCA_RATE={0x8, 0x5, {0x8, 0x3}}, @TCA_RATE={0x8, 0x5, {0x40}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000001) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 395.008033] ? __fget+0x237/0x370 [ 395.008053] ? security_file_ioctl+0x89/0xb0 [ 395.015892] SyS_ioctl+0x8f/0xc0 [ 395.015906] ? do_vfs_ioctl+0x1060/0x1060 [ 395.015922] do_syscall_64+0x1e8/0x640 [ 395.015932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.015950] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.015961] RIP: 0033:0x45a649 [ 395.023439] RSP: 002b:00007f9db776ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.023449] RAX: ffffffffffffffda RBX: 00007f9db776ec90 RCX: 000000000045a649 00:30:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 395.023453] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 395.023459] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.023464] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db776f6d4 [ 395.023469] R13: 00000000004c3670 R14: 00000000004d7a88 R15: 0000000000000004 00:30:47 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 0 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 395.132381] Bluetooth: Can't register HCI device 00:30:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 395.235357] FAULT_INJECTION: forcing a failure. [ 395.235357] name failslab, interval 1, probability 0, space 0, times 0 [ 395.308042] CPU: 1 PID: 10031 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 395.315985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.325349] Call Trace: [ 395.327965] dump_stack+0x142/0x197 [ 395.331622] should_fail.cold+0x10f/0x159 [ 395.335796] should_failslab+0xdb/0x130 [ 395.339791] kmem_cache_alloc_trace+0x2e9/0x790 [ 395.344488] ? apply_wqattrs_prepare+0xad/0x960 [ 395.349171] apply_wqattrs_prepare+0xe1/0x960 [ 395.353673] apply_workqueue_attrs_locked+0xa7/0x120 [ 395.358769] apply_workqueue_attrs+0x31/0x50 [ 395.363173] __alloc_workqueue_key+0x78d/0xec0 [ 395.363185] ? pointer+0xb10/0xb10 [ 395.363199] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 395.363211] ? ida_remove+0x230/0x230 [ 395.363223] ? __lockdep_init_map+0x10c/0x570 [ 395.363240] hci_register_dev+0x1a7/0x810 [ 395.363258] hci_uart_tty_ioctl+0x6a8/0xa20 [ 395.363275] tty_ioctl+0x8f7/0x1320 [ 395.363283] ? hci_uart_tty_poll+0x10/0x10 [ 395.363293] ? tty_vhangup+0x30/0x30 [ 395.363309] ? __might_sleep+0x93/0xb0 [ 395.363321] ? __fget+0x210/0x370 [ 395.363336] ? tty_vhangup+0x30/0x30 [ 395.384763] do_vfs_ioctl+0x7ae/0x1060 [ 395.384780] ? selinux_file_mprotect+0x5d0/0x5d0 [ 395.384795] ? lock_downgrade+0x740/0x740 [ 395.393277] ? ioctl_preallocate+0x1c0/0x1c0 [ 395.393291] ? __fget+0x237/0x370 [ 395.393309] ? security_file_ioctl+0x89/0xb0 [ 395.393320] SyS_ioctl+0x8f/0xc0 [ 395.393328] ? do_vfs_ioctl+0x1060/0x1060 [ 395.393345] do_syscall_64+0x1e8/0x640 [ 395.393352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.393370] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.393378] RIP: 0033:0x45a649 [ 395.393383] RSP: 002b:00007f9db776ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.393394] RAX: ffffffffffffffda RBX: 00007f9db776ec90 RCX: 000000000045a649 [ 395.393399] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 395.393404] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.393422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db776f6d4 00:30:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 00:30:47 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000100)="6a9f15ac02754e469e6ff1d4731971592331f3a9f86252e8a3c6a358f4037e45", 0x20) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, 0x0, 0x4000000000dc) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r4, 0x3, &(0x7f0000000180)=0xa22, &(0x7f00000001c0)=0x9) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000000c0)={0x11, 0x9, 0x9, 0xa, 0x7c1f8946, 0x81}) r5 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='+\t'], 0x2) 00:30:47 executing program 0 (fault-call:2 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 395.404955] R13: 00000000004c3670 R14: 00000000004d7a88 R15: 0000000000000004 [ 395.415426] Bluetooth: Can't register HCI device 00:30:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 395.604091] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 395.615207] FAULT_INJECTION: forcing a failure. [ 395.615207] name failslab, interval 1, probability 0, space 0, times 0 [ 395.636283] CPU: 0 PID: 10066 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 395.644203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:30:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 395.653576] Call Trace: [ 395.656205] dump_stack+0x142/0x197 [ 395.659863] should_fail.cold+0x10f/0x159 [ 395.664050] should_failslab+0xdb/0x130 [ 395.668055] kmem_cache_alloc_trace+0x2e9/0x790 [ 395.672745] apply_wqattrs_prepare+0x16d/0x960 [ 395.677349] apply_workqueue_attrs_locked+0xa7/0x120 [ 395.677361] apply_workqueue_attrs+0x31/0x50 [ 395.686891] __alloc_workqueue_key+0x78d/0xec0 [ 395.691485] ? pointer+0xb10/0xb10 [ 395.691504] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 395.691516] ? ida_remove+0x230/0x230 00:30:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 395.691539] ? __lockdep_init_map+0x10c/0x570 [ 395.691556] hci_register_dev+0x1a7/0x810 [ 395.691573] hci_uart_tty_ioctl+0x6a8/0xa20 [ 395.695575] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 395.700108] tty_ioctl+0x8f7/0x1320 [ 395.700121] ? hci_uart_tty_poll+0x10/0x10 [ 395.700141] ? tty_vhangup+0x30/0x30 [ 395.700165] ? __might_sleep+0x93/0xb0 [ 395.740926] ? __fget+0x210/0x370 [ 395.744409] ? tty_vhangup+0x30/0x30 [ 395.748216] do_vfs_ioctl+0x7ae/0x1060 00:30:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 00:30:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 00:30:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 395.752202] ? selinux_file_mprotect+0x5d0/0x5d0 [ 395.756969] ? lock_downgrade+0x740/0x740 [ 395.761114] ? ioctl_preallocate+0x1c0/0x1c0 [ 395.761129] ? __fget+0x237/0x370 [ 395.761147] ? security_file_ioctl+0x89/0xb0 [ 395.761158] SyS_ioctl+0x8f/0xc0 [ 395.769001] ? do_vfs_ioctl+0x1060/0x1060 [ 395.769017] do_syscall_64+0x1e8/0x640 [ 395.769024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.769044] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.769051] RIP: 0033:0x45a649 00:30:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080), 0x192) 00:30:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 395.769056] RSP: 002b:00007f9db776ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.769068] RAX: ffffffffffffffda RBX: 00007f9db776ec90 RCX: 000000000045a649 [ 395.769073] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 395.769078] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.769083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db776f6d4 [ 395.769088] R13: 00000000004c3670 R14: 00000000004d7a88 R15: 0000000000000004 [ 395.795113] Bluetooth: Can't register HCI device 00:30:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:48 executing program 0 (fault-call:2 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:30:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 00:30:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 00:30:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x16) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, 0x0, 0x4000000000dc) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='c\xf0uset.memory_migrate\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x26, &(0x7f0000000400)=0x5, 0x4) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)=0x1) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="2b3036b957e39677cbc48808000000000000009c2eed7ab7732cb49c5cbc6579f2931df7ab23de4c5e4b0561d399ec080cd9aaf44b5039986cad07fa8474b7e8df3fe013cbebac52fc5c996dceb20f3ecf8f85ce41c6f6b59ff0fbf3d78dedc8ad855f42fdab51f533e4b81a7702cae9b163"], 0x2) r7 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x4f92, 0x24a00) write$vnet(r7, &(0x7f0000000740)={0x1, {&(0x7f0000000580)=""/86, 0x56, &(0x7f00000006c0)=""/98, 0x2, 0x1}}, 0x68) 00:30:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 396.085171] FAULT_INJECTION: forcing a failure. [ 396.085171] name failslab, interval 1, probability 0, space 0, times 0 [ 396.127908] CPU: 1 PID: 10113 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 396.135836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.135843] Call Trace: [ 396.135866] dump_stack+0x142/0x197 [ 396.135891] should_fail.cold+0x10f/0x159 [ 396.155584] should_failslab+0xdb/0x130 [ 396.159563] kmem_cache_alloc_node+0x287/0x780 [ 396.164165] alloc_unbound_pwq+0x486/0xbc0 [ 396.168415] apply_wqattrs_prepare+0x355/0x960 [ 396.173015] apply_workqueue_attrs_locked+0xa7/0x120 [ 396.178149] apply_workqueue_attrs+0x31/0x50 [ 396.182584] __alloc_workqueue_key+0x78d/0xec0 [ 396.187173] ? pointer+0xb10/0xb10 [ 396.190723] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 396.195746] ? ida_remove+0x230/0x230 [ 396.195762] ? __lockdep_init_map+0x10c/0x570 [ 396.195782] hci_register_dev+0x1a7/0x810 [ 396.195805] hci_uart_tty_ioctl+0x6a8/0xa20 [ 396.212532] tty_ioctl+0x8f7/0x1320 [ 396.216171] ? hci_uart_tty_poll+0x10/0x10 [ 396.220500] ? tty_vhangup+0x30/0x30 [ 396.220524] ? __might_sleep+0x93/0xb0 [ 396.220536] ? __fget+0x210/0x370 [ 396.220552] ? tty_vhangup+0x30/0x30 [ 396.220563] do_vfs_ioctl+0x7ae/0x1060 [ 396.220578] ? selinux_file_mprotect+0x5d0/0x5d0 [ 396.220590] ? lock_downgrade+0x740/0x740 [ 396.220599] ? ioctl_preallocate+0x1c0/0x1c0 [ 396.220609] ? __fget+0x237/0x370 [ 396.220627] ? security_file_ioctl+0x89/0xb0 [ 396.220638] SyS_ioctl+0x8f/0xc0 [ 396.220648] ? do_vfs_ioctl+0x1060/0x1060 [ 396.239259] do_syscall_64+0x1e8/0x640 [ 396.239270] ? trace_hardirqs_off_thunk+0x1a/0x1c 00:30:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="34050b2b02478846871175022228bc77a8eedafa249d84880df7b9abd1a737f8a6fa6d25154d49d08c3bc9a31dc0ec6de8320e0430351b4ce7992fa9083b5bda9b67c8b6ed64b1b6acdf6dd75f3037345fa52438af17fe0f075c08fcfc57401ccdb7a90a3bd560eeb613aed70aa6dc727f19a392345a86a061a36c70871322f57eb8e87151eb6a1165fb269e6599b9eb1e1197418275439314194ef0e078aae72a13fe93f0f1b0a36222081c5b1fe9f5c9bc3e164fc3806b3116615cf9a1e5b80afb6c27e4623ff03efb9ed02a31a6"], 0x2) 00:30:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 396.239291] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 396.239299] RIP: 0033:0x45a649 [ 396.239307] RSP: 002b:00007f9db776ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.293172] RAX: ffffffffffffffda RBX: 00007f9db776ec90 RCX: 000000000045a649 [ 396.300447] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 396.307721] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 396.315010] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db776f6d4 [ 396.315017] R13: 00000000004c3670 R14: 00000000004d7a88 R15: 0000000000000004 00:30:48 executing program 0 (fault-call:2 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:30:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) getpeername$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:30:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 396.356017] Bluetooth: Can't register HCI device 00:30:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:30:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socketpair(0x5, 0x5, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) r3 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) [ 396.500495] FAULT_INJECTION: forcing a failure. [ 396.500495] name failslab, interval 1, probability 0, space 0, times 0 [ 396.569121] CPU: 1 PID: 10153 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 396.577051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.586435] Call Trace: [ 396.589046] dump_stack+0x142/0x197 [ 396.592694] should_fail.cold+0x10f/0x159 [ 396.596874] should_failslab+0xdb/0x130 [ 396.600862] __kmalloc+0x2f0/0x7a0 [ 396.604420] ? wait_for_completion+0x420/0x420 [ 396.609016] ? pwq_adjust_max_active+0x372/0x560 [ 396.614391] ? __alloc_workqueue_key+0x114/0xec0 [ 396.619159] __alloc_workqueue_key+0x114/0xec0 [ 396.623753] ? pointer+0xb10/0xb10 [ 396.628091] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 396.633118] ? ida_remove+0x230/0x230 [ 396.636926] ? __lockdep_init_map+0x10c/0x570 [ 396.641622] hci_register_dev+0x209/0x810 [ 396.645788] hci_uart_tty_ioctl+0x6a8/0xa20 [ 396.650123] tty_ioctl+0x8f7/0x1320 [ 396.653759] ? hci_uart_tty_poll+0x10/0x10 [ 396.658007] ? tty_vhangup+0x30/0x30 [ 396.661743] ? __might_sleep+0x93/0xb0 [ 396.665642] ? __fget+0x210/0x370 [ 396.669107] ? tty_vhangup+0x30/0x30 [ 396.672824] do_vfs_ioctl+0x7ae/0x1060 [ 396.676720] ? selinux_file_mprotect+0x5d0/0x5d0 [ 396.681484] ? lock_downgrade+0x740/0x740 [ 396.681498] ? ioctl_preallocate+0x1c0/0x1c0 [ 396.681512] ? __fget+0x237/0x370 [ 396.690061] ? security_file_ioctl+0x89/0xb0 [ 396.690072] SyS_ioctl+0x8f/0xc0 [ 396.690080] ? do_vfs_ioctl+0x1060/0x1060 [ 396.690095] do_syscall_64+0x1e8/0x640 [ 396.690103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 396.690121] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 396.690130] RIP: 0033:0x45a649 [ 396.690134] RSP: 002b:00007f9db776ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.690145] RAX: ffffffffffffffda RBX: 00007f9db776ec90 RCX: 000000000045a649 [ 396.690151] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003 [ 396.690156] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 396.690161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db776f6d4 [ 396.690168] R13: 00000000004c3670 R14: 00000000004d7a88 R15: 0000000000000004 00:30:48 executing program 0 (fault-call:2 fault-nth:9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:30:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:30:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:30:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="dfff"], 0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x8, 0x0, 0x1, 0x7, 0x800}, 0x14) 00:30:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:30:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) [ 396.748701] Bluetooth: Can't register HCI device 00:30:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 00:30:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_open_dev$video4linux(&(0x7f0000000400)='/dev/v4l-subdev#\x00', 0x80000000, 0x5fdd2d01b038d49b) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000480)={0x0, 0x4, 0x3ae, [], &(0x7f0000000440)=0x7f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x9}) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f00000004c0)=0x1) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, 0x0, 0x4000000000dc) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 00:30:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:30:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:30:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:30:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdb7d, {0xa, 0x14, 0x14, 0xdf, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x2c000840) sendmsg$nfc_llcp(r1, &(0x7f0000000080)={&(0x7f0000000100)={0x27, 0x0, 0x2, 0x5, 0x9, 0x4, "8a8dfc9aa6586d489afd0a7da3057365333d01b7ccb68678b8b8a8b444f82d3d33e9af8ce1b996c96dd32aa5c77ec2b5cba73ec93a45dd3120b89905330f19", 0x37}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000180)="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", 0xff}, {&(0x7f0000000280)="524dc61ba9096dc721f286ff946a955f3584d03241d7e8575112744ec2ba9cf82fe1d078f69c97f923c0451e25bb8c89f114aa49572eb5da5c49c2d855d038621bce613f94bee2f2d3bcdf3648558b67b1f290f258b1", 0x56}], 0x2, &(0x7f0000000300)={0x98, 0x117, 0x2, "3bad8f3c6f8ac8d1d8ff268a4cb42101109ea9b47fe130fc282ffa3d68fc8dd9da7b59155e7da342817797697c4babb6b0dcc38b6920842c107fb59a7ad9456732531d7c2f1d9f55b4145611464d0748bed7c75312286d69d4f40a0910c95f4b86eba0348b8c816f26074a3578abd49712ae5439ebea6f171b6c933ef473b5245913a1435a"}, 0x98}, 0x40) 00:30:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) getpeername$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 00:30:49 executing program 4 (fault-call:2 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:49 executing program 1 (fault-call:2 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x10001, 0x40) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000100)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0xc, 0x9, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 397.060447] FAULT_INJECTION: forcing a failure. [ 397.060447] name failslab, interval 1, probability 0, space 0, times 0 [ 397.060605] Bluetooth: hci0 sending frame failed (-49) [ 397.088223] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 00:30:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) [ 397.118942] FAULT_INJECTION: forcing a failure. [ 397.118942] name failslab, interval 1, probability 0, space 0, times 0 [ 397.134743] CPU: 0 PID: 10216 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 397.142684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.152068] Call Trace: [ 397.154675] dump_stack+0x142/0x197 [ 397.158322] should_fail.cold+0x10f/0x159 [ 397.162488] should_failslab+0xdb/0x130 [ 397.166474] __kmalloc+0x2f0/0x7a0 [ 397.170022] ? kernfs_fop_write+0x30a/0x450 [ 397.174342] kernfs_fop_write+0x30a/0x450 [ 397.178487] __vfs_write+0x105/0x6b0 [ 397.182194] ? __lock_is_held+0xb6/0x140 [ 397.186455] ? kernfs_fop_open+0xc90/0xc90 [ 397.190684] ? kernel_read+0x120/0x120 [ 397.194563] ? __lock_is_held+0xb6/0x140 [ 397.198629] ? check_preemption_disabled+0x3c/0x250 [ 397.203643] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 397.209097] ? rcu_read_lock_sched_held+0x110/0x130 [ 397.214283] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 397.219031] ? __sb_start_write+0x153/0x2f0 [ 397.223344] vfs_write+0x198/0x500 [ 397.226873] SyS_write+0xfd/0x230 [ 397.230328] ? SyS_read+0x230/0x230 [ 397.233941] ? do_syscall_64+0x53/0x640 [ 397.237930] ? SyS_read+0x230/0x230 [ 397.241546] do_syscall_64+0x1e8/0x640 [ 397.245423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.250282] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 397.255471] RIP: 0033:0x45a649 [ 397.258647] RSP: 002b:00007f35e7f34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.266800] RAX: ffffffffffffffda RBX: 00007f35e7f34c90 RCX: 000000000045a649 [ 397.274061] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 397.281318] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 397.288594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f35e7f356d4 [ 397.295857] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000005 [ 397.303150] CPU: 1 PID: 10224 Comm: syz-executor.1 Not tainted 4.14.156-syzkaller #0 [ 397.311044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.320535] Call Trace: [ 397.323143] dump_stack+0x142/0x197 [ 397.326800] should_fail.cold+0x10f/0x159 [ 397.331068] should_failslab+0xdb/0x130 [ 397.335145] __kmalloc+0x2f0/0x7a0 [ 397.339310] ? kernfs_fop_write+0x30a/0x450 [ 397.343662] kernfs_fop_write+0x30a/0x450 [ 397.347841] __vfs_write+0x105/0x6b0 [ 397.351576] ? __lock_is_held+0xb6/0x140 [ 397.355671] ? kernfs_fop_open+0xc90/0xc90 [ 397.359914] ? kernel_read+0x120/0x120 [ 397.363824] ? __lock_is_held+0xb6/0x140 [ 397.367900] ? check_preemption_disabled+0x3c/0x250 [ 397.372941] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 397.378404] ? rcu_read_lock_sched_held+0x110/0x130 [ 397.383454] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 397.388315] ? __sb_start_write+0x153/0x2f0 [ 397.392661] vfs_write+0x198/0x500 [ 397.396223] SyS_write+0xfd/0x230 [ 397.399701] ? SyS_read+0x230/0x230 [ 397.403524] ? do_syscall_64+0x53/0x640 [ 397.407523] ? SyS_read+0x230/0x230 [ 397.411166] do_syscall_64+0x1e8/0x640 [ 397.415057] ? trace_hardirqs_off_thunk+0x1a/0x1c 00:30:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:30:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) getpeername$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 397.419919] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 397.425116] RIP: 0033:0x45a649 [ 397.428311] RSP: 002b:00007f0c5753fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.436024] RAX: ffffffffffffffda RBX: 00007f0c5753fc90 RCX: 000000000045a649 [ 397.443299] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 397.450571] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 397.457928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c575406d4 00:30:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) [ 397.465201] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000005 00:30:49 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 397.565362] FAULT_INJECTION: forcing a failure. [ 397.565362] name failslab, interval 1, probability 0, space 0, times 0 [ 397.599411] CPU: 1 PID: 10241 Comm: syz-executor.3 Not tainted 4.14.156-syzkaller #0 [ 397.607349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.616716] Call Trace: [ 397.619330] dump_stack+0x142/0x197 [ 397.622993] should_fail.cold+0x10f/0x159 [ 397.627169] should_failslab+0xdb/0x130 [ 397.631156] __kmalloc+0x2f0/0x7a0 [ 397.634715] ? kernfs_fop_write+0x30a/0x450 [ 397.639049] kernfs_fop_write+0x30a/0x450 [ 397.643214] __vfs_write+0x105/0x6b0 [ 397.646946] ? __lock_is_held+0xb6/0x140 [ 397.651015] ? kernfs_fop_open+0xc90/0xc90 [ 397.655259] ? kernel_read+0x120/0x120 [ 397.659186] ? __lock_is_held+0xb6/0x140 [ 397.663253] ? check_preemption_disabled+0x3c/0x250 [ 397.668287] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 397.673839] ? rcu_read_lock_sched_held+0x110/0x130 [ 397.678882] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 397.683657] ? __sb_start_write+0x153/0x2f0 [ 397.687998] vfs_write+0x198/0x500 [ 397.691555] SyS_write+0xfd/0x230 [ 397.695020] ? SyS_read+0x230/0x230 [ 397.698660] ? do_syscall_64+0x53/0x640 [ 397.702654] ? SyS_read+0x230/0x230 [ 397.706290] do_syscall_64+0x1e8/0x640 [ 397.710185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.715054] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 397.720247] RIP: 0033:0x45a649 [ 397.723437] RSP: 002b:00007fcd19da2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.731165] RAX: ffffffffffffffda RBX: 00007fcd19da2c90 RCX: 000000000045a649 [ 397.738440] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 397.745716] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 397.753015] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd19da36d4 [ 397.760727] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000005 [ 399.110150] Bluetooth: hci0 command 0x1003 tx timeout [ 399.119659] Bluetooth: hci0 sending frame failed (-49) [ 401.190284] Bluetooth: hci0 command 0x1001 tx timeout [ 401.195729] Bluetooth: hci0 sending frame failed (-49) [ 403.270214] Bluetooth: hci0 command 0x1009 tx timeout 00:30:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="77827cf354677d4e26f3b1", @ANYRES16=r1, @ANYBLOB="e54e000000000000000008000000180004001400010062726f6164634273742d6c"], 0x3}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0031c96a8341a5e1d8b41299c906fc4906e82771431024ee3dccf5a7792b", @ANYRES16=r1], 0x2}}, 0x20000000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x2e4, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3f, @loopback, 0x9f56}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @loopback, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1af4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e28}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x800}, 0x801) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:30:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) 00:30:59 executing program 1 (fault-call:2 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:59 executing program 4 (fault-call:2 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:59 executing program 3 (fault-call:2 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:30:59 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000000)=' q\x00'/16) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2b3037ca22304344a32def6ade3e2fa2789c0d2944a3b22d755e0fcd6f9ad42836e4899f17655f386a5543681230d2d8f08b790a60626b453d6c"], 0x2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x26, &(0x7f0000000140)=""/66, &(0x7f00000001c0)=0x42) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000200)=0x1) r4 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x9, 0x80) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000280)={0x0}) r6 = socket$inet6(0xa, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r7, 0x0, 0x4000000000dc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000002c0)={r5, 0x0, r7}) [ 407.567602] FAULT_INJECTION: forcing a failure. [ 407.567602] name failslab, interval 1, probability 0, space 0, times 0 [ 407.579648] CPU: 0 PID: 10256 Comm: syz-executor.1 Not tainted 4.14.156-syzkaller #0 [ 407.587573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.587578] Call Trace: [ 407.587603] dump_stack+0x142/0x197 [ 407.587628] should_fail.cold+0x10f/0x159 [ 407.599662] should_failslab+0xdb/0x130 [ 407.599675] __kmalloc_track_caller+0x2ec/0x790 [ 407.599693] ? save_trace+0x290/0x290 [ 407.611522] ? mutex_trylock+0x1c0/0x1c0 [ 407.611537] ? alloc_trial_cpuset+0x23/0x110 [ 407.611549] kmemdup+0x27/0x60 [ 407.611558] alloc_trial_cpuset+0x23/0x110 [ 407.611568] update_flag+0x26/0x420 [ 407.611579] cpuset_write_u64+0x1f4/0x230 [ 407.611590] cgroup_file_write+0x43c/0x700 [ 407.611601] ? __lock_is_held+0xb6/0x140 [ 407.611613] ? init_and_link_css+0x580/0x580 [ 407.619968] Bluetooth: hci0 sending frame failed (-49) [ 407.620085] ? init_and_link_css+0x580/0x580 [ 407.620099] kernfs_fop_write+0x291/0x450 [ 407.620116] __vfs_write+0x105/0x6b0 [ 407.620130] ? __lock_is_held+0xb6/0x140 [ 407.620137] ? kernfs_fop_open+0xc90/0xc90 [ 407.620147] ? kernel_read+0x120/0x120 [ 407.620156] ? __lock_is_held+0xb6/0x140 [ 407.620166] ? check_preemption_disabled+0x3c/0x250 [ 407.620181] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 407.620194] ? rcu_read_lock_sched_held+0x110/0x130 [ 407.620209] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 407.710526] ? __sb_start_write+0x153/0x2f0 [ 407.714837] vfs_write+0x198/0x500 [ 407.718367] SyS_write+0xfd/0x230 [ 407.721817] ? SyS_read+0x230/0x230 [ 407.725436] ? do_syscall_64+0x53/0x640 [ 407.729395] ? SyS_read+0x230/0x230 [ 407.733051] do_syscall_64+0x1e8/0x640 [ 407.736946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.741794] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 407.746978] RIP: 0033:0x45a649 [ 407.750173] RSP: 002b:00007f0c5753fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.757881] RAX: ffffffffffffffda RBX: 00007f0c5753fc90 RCX: 000000000045a649 00:30:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '', 0x30}]}, 0x2) [ 407.765138] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 407.772406] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 407.779750] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c575406d4 [ 407.787016] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000005 [ 407.806708] FAULT_INJECTION: forcing a failure. [ 407.806708] name failslab, interval 1, probability 0, space 0, times 0 00:30:59 executing program 2: 00:30:59 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x5dc291) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 407.825246] CPU: 1 PID: 10254 Comm: syz-executor.4 Not tainted 4.14.156-syzkaller #0 [ 407.833253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.842714] Call Trace: [ 407.845330] dump_stack+0x142/0x197 [ 407.848998] should_fail.cold+0x10f/0x159 [ 407.853276] should_failslab+0xdb/0x130 [ 407.857261] __kmalloc_track_caller+0x2ec/0x790 [ 407.861937] ? mutex_trylock+0x1c0/0x1c0 [ 407.861952] ? alloc_trial_cpuset+0x23/0x110 [ 407.870406] kmemdup+0x27/0x60 [ 407.873606] alloc_trial_cpuset+0x23/0x110 [ 407.877854] update_flag+0x26/0x420 [ 407.881501] cpuset_write_u64+0x1f4/0x230 [ 407.885681] cgroup_file_write+0x43c/0x700 [ 407.889920] ? __lock_is_held+0xb6/0x140 [ 407.893991] ? init_and_link_css+0x580/0x580 [ 407.898502] ? init_and_link_css+0x580/0x580 [ 407.902930] kernfs_fop_write+0x291/0x450 [ 407.907090] __vfs_write+0x105/0x6b0 [ 407.911159] ? __lock_is_held+0xb6/0x140 [ 407.915225] ? kernfs_fop_open+0xc90/0xc90 [ 407.919726] ? kernel_read+0x120/0x120 [ 407.923618] ? __lock_is_held+0xb6/0x140 [ 407.927683] ? check_preemption_disabled+0x3c/0x250 [ 407.932714] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 407.938174] ? rcu_read_lock_sched_held+0x110/0x130 [ 407.943197] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 407.947958] ? __sb_start_write+0x153/0x2f0 [ 407.952336] vfs_write+0x198/0x500 [ 407.955884] SyS_write+0xfd/0x230 [ 407.959437] ? SyS_read+0x230/0x230 [ 407.963071] ? do_syscall_64+0x53/0x640 [ 407.967051] ? SyS_read+0x230/0x230 [ 407.970714] do_syscall_64+0x1e8/0x640 00:31:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={0x0}}, 0x0) [ 407.974601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.979453] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 407.984641] RIP: 0033:0x45a649 [ 407.987838] RSP: 002b:00007f35e7f34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.995552] RAX: ffffffffffffffda RBX: 00007f35e7f34c90 RCX: 000000000045a649 [ 408.002822] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 408.010084] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 408.010090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f35e7f356d4 00:31:00 executing program 1 (fault-call:2 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 408.010101] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000005 [ 408.023799] FAULT_INJECTION: forcing a failure. [ 408.023799] name failslab, interval 1, probability 0, space 0, times 0 [ 408.067147] CPU: 1 PID: 10255 Comm: syz-executor.3 Not tainted 4.14.156-syzkaller #0 [ 408.075077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.084449] Call Trace: [ 408.087054] dump_stack+0x142/0x197 [ 408.090696] should_fail.cold+0x10f/0x159 [ 408.094836] should_failslab+0xdb/0x130 [ 408.098809] __kmalloc_track_caller+0x2ec/0x790 [ 408.103502] ? save_trace+0x290/0x290 [ 408.107334] ? mutex_trylock+0x1c0/0x1c0 [ 408.111391] ? alloc_trial_cpuset+0x23/0x110 [ 408.115794] kmemdup+0x27/0x60 [ 408.119074] alloc_trial_cpuset+0x23/0x110 [ 408.123360] update_flag+0x26/0x420 [ 408.127086] cpuset_write_u64+0x1f4/0x230 [ 408.131281] cgroup_file_write+0x43c/0x700 [ 408.135519] ? __lock_is_held+0xb6/0x140 [ 408.139577] ? init_and_link_css+0x580/0x580 [ 408.143982] ? init_and_link_css+0x580/0x580 [ 408.148808] kernfs_fop_write+0x291/0x450 [ 408.153005] __vfs_write+0x105/0x6b0 [ 408.156755] ? __lock_is_held+0xb6/0x140 [ 408.160917] ? kernfs_fop_open+0xc90/0xc90 [ 408.165150] ? kernel_read+0x120/0x120 [ 408.169024] ? __lock_is_held+0xb6/0x140 [ 408.173078] ? check_preemption_disabled+0x3c/0x250 [ 408.178096] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 408.183897] ? rcu_read_lock_sched_held+0x110/0x130 [ 408.188918] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 408.193681] ? __sb_start_write+0x153/0x2f0 [ 408.198081] vfs_write+0x198/0x500 [ 408.201627] SyS_write+0xfd/0x230 [ 408.205063] ? SyS_read+0x230/0x230 [ 408.208679] ? do_syscall_64+0x53/0x640 [ 408.212689] ? SyS_read+0x230/0x230 [ 408.216305] do_syscall_64+0x1e8/0x640 [ 408.220177] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.225017] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 408.230195] RIP: 0033:0x45a649 [ 408.233368] RSP: 002b:00007fcd19da2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.241058] RAX: ffffffffffffffda RBX: 00007fcd19da2c90 RCX: 000000000045a649 [ 408.248356] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 408.255784] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 00:31:00 executing program 4 (fault-call:2 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 408.263094] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd19da36d4 [ 408.270352] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000005 [ 409.680110] Bluetooth: hci0 command 0x1003 tx timeout [ 409.685442] Bluetooth: hci0 sending frame failed (-49) [ 411.750152] Bluetooth: hci0 command 0x1001 tx timeout [ 411.755598] Bluetooth: hci0 sending frame failed (-49) [ 413.830222] Bluetooth: hci0 command 0x1009 tx timeout 00:31:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/174}) 00:31:09 executing program 3 (fault-call:2 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VT_OPENQRY(r1, 0x5600, 0x0) 00:31:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0xa, 0xfe) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.FinderInfo\x00') r2 = socket(0xa, 0x1, 0x8) fsetxattr$security_ima(r2, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@v1={0x2, "618be512aedb"}, 0x7, 0x2) keyctl$set_reqkey_keyring(0xe, 0x6) 00:31:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x821, 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="ad0000c564d7122dcca77988827ae61cd9d7843140f1590390a74174a1851554f803132a452740bb0864f8eb770a2fcff0"], 0x2) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x6, 0x101000) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0x0, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r7, 0x7ff, 0x4b, r8}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r10 = accept$netrom(r1, &(0x7f0000000180)={{0x3, @rose}, [@bcast, @rose, @default, @rose, @netrom, @netrom, @remote, @default]}, &(0x7f0000000200)=0x48) r11 = socket$inet6(0xa, 0x3, 0x6) r12 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r11, r12, 0x0, 0x4000000000dc) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x2000}, {r2, 0x100}, {r4, 0x3115ce7231b1bb52}, {r9, 0x1062}, {r10, 0x8000}, {0xffffffffffffffff, 0x10}, {r12, 0x4}], 0x7, &(0x7f00000002c0)={r13, r14+30000000}, &(0x7f0000000300)={0x8}, 0x8) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) 00:31:09 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:09 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:10 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x141000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:10 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) recvmmsg(r0, &(0x7f0000007a40)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/129, 0x81}, {}, {&(0x7f0000000300)=""/72, 0x48}], 0x3, &(0x7f00000006c0)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000003c0)=@ipx, 0x80, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0xc92e}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x2, &(0x7f00000036c0)=""/221, 0xdd}, 0x7}, {{&(0x7f00000037c0)=@nfc, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003840)=""/121, 0x79}, {&(0x7f00000038c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/31, 0x1f}, {&(0x7f00000039c0)=""/22, 0x16}, {&(0x7f0000003a00)=""/216, 0xd8}], 0x5, &(0x7f0000003b80)=""/60, 0x3c}, 0x7fffffff}, {{&(0x7f0000003bc0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/167, 0xa7}, {&(0x7f0000004d00)=""/94, 0x5e}], 0x3, &(0x7f0000004dc0)=""/180, 0xb4}, 0x9}, {{&(0x7f0000004e80)=@pppol2tp, 0x80, &(0x7f00000061c0)=[{&(0x7f0000004f00)=""/182, 0xb6}, {&(0x7f0000004fc0)=""/4096, 0x1000}, {&(0x7f0000005fc0)=""/212, 0xd4}, {&(0x7f00000060c0)=""/253, 0xfd}], 0x4, &(0x7f0000006200)=""/94, 0x5e}, 0x200}, {{0x0, 0x0, &(0x7f0000007600)=[{&(0x7f0000006280)=""/72, 0x48}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/245, 0xf5}, {&(0x7f0000007400)=""/245, 0xf5}, {&(0x7f0000007500)=""/251, 0xfb}], 0x5}, 0x40}, {{&(0x7f0000007680)=@ipx, 0x80, &(0x7f00000078c0)=[{&(0x7f0000007700)=""/136, 0x88}, {&(0x7f00000077c0)=""/225, 0xe1}], 0x2}, 0x1}, {{&(0x7f0000007900)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000079c0)=[{&(0x7f0000007980)=""/29, 0x1d}], 0x1, &(0x7f0000007a00)=""/34, 0x22}, 0x3}], 0x9, 0x10220, &(0x7f0000007c80)) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, 0x0, 0x4000000000dc) r2 = syz_open_dev$cec(&(0x7f0000007d40)='/dev/cec#\x00', 0x1, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000007d80)={r1, r2, 0x13, 0x1}, 0x10) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000007cc0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000007d00)='TRUE', 0x4, 0x2) r3 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpuset.memorq{m\xeeuf\xcf\xf5\xc8\x16\xc7]\n\x1c\xeb2igrate\x00\xe4\x120\x86\x02\x02k\xdaM\xadn\xea\xf7\aX%O\xc9\xd7\x96\xcd\xd7b\xd7\x1b\xf0t\xde,\xf6\xfe=\xba\xd3OJ\ao\xb5\xc1{\xc2A#|d\xf9^Hd\x98\xba\xba\xee\xe7\xc1:\xfb$\xf9\xbc\xeb\x0e\x7f\xeae]\x1e_\xebm\xd0\xb7\xdb*', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="400048066ecb9c64ef78e5c895287f1e7cbfa592d9cf12ff2a366cf6ea829ecc704672c0134bc4d7d6d075221d08cb2cb32a60ff06a7e48a65f6f68afa60e7f84cad99f0ddf0200c11b0a71c23c6536a023701f233c061c99a313abe9fad44bbd12ab5654e9fb12e4479d17607262a941025a4ca907ee1903ab2b0358a42baec8a075c51a4908237b2fec339"], 0x2) 00:31:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x4a, 0x2, 0x8, 0x9, 0x4}) 00:31:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x207, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file1\x00') execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000200)="5c0f86e1dfbd4d6467a0129c8cf49245abc58ca008e95d4916349f0b06d79abda7747b3f64867e243ab8eef40b75bf2870364309ee57491f4fa44331a25b6f0a2081fcfb1a2f0255b39b98ee980051005fd527c87135c5babe17f594ee1a252adbd4611af9934f79ebff4151819927c498be38257aa69af40b8dfe911583b7a2369e50725203712b9f73aa2f9c9d7d5eaac7559361f99cad46d7c2fd7ba5aaeb672596820e69b1983fd7ee344962c827c74f0b968389defe52b026877b053154b3c31940010293dc66") dup2(r0, r1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000100)={0x7}, 0x7) [ 417.998292] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 418.017663] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 419.830173] Bluetooth: hci0 command 0x1003 tx timeout [ 419.835604] Bluetooth: hci0 sending frame failed (-49) [ 421.910221] Bluetooth: hci0 command 0x1001 tx timeout [ 421.915568] Bluetooth: hci0 sending frame failed (-49) [ 423.990214] Bluetooth: hci0 command 0x1009 tx timeout 00:31:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x2, 0x200, r4}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:31:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xd6, "d178f8a99423f04806573b77b96026ca7f8133d260fec71514c3bcc2049cac1817cc419ef7067fe60c8cbe773f48361f11b326355361b0049cd6dceb7155357b10459f25fd0f08c31d9493f5d7a4bd898d8a89236b748e6e2e87d5e462fbf5e84d16e7a9c6e6f29e15cba06b2ed1ab40715b3935db51d857826cd3e667ee85c1176ac4aa544c1cb7a772d4cadcfc47b1088d0fc3e19eeb0773cd828a1bf708d3ef4f4a95afde38e7b3e5af57c24899c65869aa3bcc1fbe0ef61eb2595eefea27d7bd66e55529c44e0e6036ec98683295f21d585f9882"}, &(0x7f0000000000)=0xde) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e22, @rand_addr=0x7}}, 0x6, 0x32c6}, 0x90) 00:31:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b9351cdcaf1070d396a3ecb57e119516d30"], 0x2) 00:31:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b095154a5eeeb0aa76746cc30"], 0x2) 00:31:20 executing program 2: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) futex(&(0x7f0000000100)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) 00:31:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'pids'}, {0x2d, 'memory'}, {0x43, 'rdma'}]}, 0xfd64) 00:31:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) dup(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x77359400}}, &(0x7f00000003c0)) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0xce, 0x0, &(0x7f0000000080)=0xffffffffffffff0c) pwrite64(r6, &(0x7f0000001800)="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", 0x1000, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000002f40)=ANY=[@ANYBLOB="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"], 0x190) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000600)=""/167, 0xa7}, {&(0x7f00000006c0)=""/226, 0xe2}, {&(0x7f00000007c0)=""/26, 0x1a}, {&(0x7f0000000800)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002800)=""/83, 0x53}], 0x8, &(0x7f0000002900)=""/121, 0x79}, 0x3f}, {{&(0x7f0000002c00)=@tipc=@id, 0x80, &(0x7f0000002e00)=[{0x0}], 0x1, &(0x7f0000002e40)=""/106, 0x6a}}], 0x2, 0x10000, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000480)={{}, {0x4, 0x31}, 0x4}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000240)={@dev, @remote}, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68683, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdbc}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 00:31:20 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x9, 0x2200) dup3(r1, r2, 0x180000) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x9, 0x3, 0x401, &(0x7f0000000000)=[0x0], 0x1}, 0x20) [ 428.116811] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) r7 = socket$inet6(0xa, 0x3, 0x6) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r8, 0x0, 0x4000000000dc) getpeername$netlink(r8, &(0x7f0000000400), &(0x7f0000000440)=0xc) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r9, 0x0, 0x4000000000dd) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x3, 0x6) r12 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r11, r12, 0x0, 0x4000000000dc) r13 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x8, 0x208000) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000140)={0x4, 0x24000000, 0x9, 0x0, 0x0, [{r4, 0x0, 0x3ff}, {r5, 0x0, 0x403f9c75}, {r10, 0x0, 0x5}, {r11, 0x0, 0x10001}, {0xffffffffffffffff, 0x0, 0x4}, {r13, 0x0, 0x8}, {r14, 0x0, 0x40000}, {0xffffffffffffffff, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0x81}]}) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 428.186210] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:20 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x1, 0x2, "878741b21c485978a06ad8fb1cf32fc3f0f84ecb3e316b644aba030e2e6139f34655840ea5971684286c7a24003bd47793cbd9082fa61e80e6839270e7def75430694e6d238733d087742d6ea0b21e2fc9c3ca8f96ce4d773c1f233cf7e7c5f1cb132b8c831a9b4f8af3088beeeb6e1f8883b0a67f7ef6333ae3ca3856c8a28b9392db4ec969d489b1e9e34be5d32139b7e2ad51ef1d8d1f9d2500092b0e012802eea48810cde7570f2e1b856ac12eb3f15a8d0fd45d6d1aedb831c7931fb8278cced946db362130729baeccef4b7dc06bf70c3d95cefa2b3d9a32eab493fb6f633a9aecb6d1b8fbcc55a4c8d588948c3674fb1dfc201833b34365dd4c13f7f2"}) lookup_dcookie(0x9f, &(0x7f0000000000)=""/50, 0x32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_dev$usbfs(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x2e, 0x100040) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 00:31:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100), 0x0) [ 428.257896] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 428.375614] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 428.419787] audit: type=1400 audit(1574901080.526:48): avc: denied { create } for pid=10400 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 428.494434] audit: type=1400 audit(1574901080.526:49): avc: denied { write } for pid=10400 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 430.230140] Bluetooth: hci0 command 0x1003 tx timeout [ 430.235480] Bluetooth: hci0 sending frame failed (-49) [ 432.310168] Bluetooth: hci0 command 0x1001 tx timeout [ 432.315487] Bluetooth: hci0 sending frame failed (-49) [ 434.390295] Bluetooth: hci0 command 0x1009 tx timeout 00:31:30 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/mls\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.rate\x00\xf3\xeb\xbe\xbb\x82w\xdb32z\xde\x04\x82\x8c\x91\x81JY\x974T(\x12D\xb7\t;h\xa4\x18\xd9', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) r5 = dup3(r2, r3, 0x80000) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000100)=""/4096) 00:31:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0xc) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = shmget(0x0, 0x3000, 0x54001a06, &(0x7f0000006000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget(0x0, 0x3000, 0x54001a06, &(0x7f0000006000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) r4 = shmget(0x0, 0x3000, 0x54001a06, &(0x7f0000006000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget(0x0, 0x3000, 0x54001a06, &(0x7f0000006000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = shmget(0x0, 0x3000, 0x54001a06, &(0x7f0000006000/0x3000)=nil) shmctl$IPC_RMID(r6, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYBLOB="711900b36346f0dcebdda0514c863a74d5c18629b0e5580bae", @ANYRESDEC=r5, @ANYRES32=r1, @ANYRESOCT=r6, @ANYRES32]], 0x8) 00:31:30 executing program 2: 00:31:30 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8001, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x1, @remote, 'batadv0\x00'}}, 0x1e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r3 = getpid() r4 = socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, 0x0, 0x4000000000dc) r6 = socket$inet6(0xa, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r7, 0x0, 0x4000000000dc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r7, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x10000007, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x5}, 0x0, 0x0, &(0x7f00000004c0)={0x1, 0x4, 0xff, 0x4}, &(0x7f0000000300)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x20}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r3, r5, 0x0, 0xd, &(0x7f0000000200)='/dev/dmmidi#\x00', r8}, 0x30) r9 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r9, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2b307b1695969219503ba952889a10271884ab755abc719612dad01f9656e3636a50d28c6c707219063203f65dcf5b0286bbc3760b553203b20f783ae63cbbf8dad6ae39b13e0994bb0faa57277eb800000000f9fe14c80bf1accf32b675f3428ebb85d3f74314"], 0x2) 00:31:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = getpid() socket$bt_cmtp(0x1f, 0x3, 0x5) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xdf5f, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0xffffffe0, 0x3, 0x3}) sched_setattr(r2, &(0x7f0000000240)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xf5a, 0xa80) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000000100010026bd7000fddbdf250a1414ff05000000090000000000000008000640000001001400010000fbfc27df00"/60], 0x3c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) kcmp(r2, 0xffffffffffffffff, 0x6, r4, r6) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2) 00:31:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x7, 0x5607c7bf96ce3f25) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe2, 0xcc, &(0x7f0000000700)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x87, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000580)="49af9a36063c3d4618755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1f6c2ac390bcad6929893cc6a02eba3b1a55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000480)={0x40, 0x10, &(0x7f0000000640)="aff88bd5d2d1e7f83c640c6cf5937b30bec5ce0d61be778a5ba3196439eac696653b251775d0591d46595da7830b9784074632bb9fb7624616090e6cb8d4102024bfc8df02f6e23f27de8a75a882e1a95f264bb26436515cd69b1f3c337d1927a06911d19b34f6f12d16bb04e6cc215ed87b1cbec2b6299400a1693e0f524b68e33195d1d7e71b74b3a07c1831ddbae9d6ee5ce451c48e67161c8a28a42806679311808d85451b4a7a5d", {0x200, 0xc, 0x32525942, 0x1, 0x0, 0x200, 0x2, 0xc89}}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000)=0x10000, 0x4) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000440)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:31:30 executing program 2: [ 438.298405] selinux_nlmsg_perm: 70 callbacks suppressed [ 438.298414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pig=10421 comm=syz-executor.3 00:31:30 executing program 2: 00:31:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, 0x0, 0x4000000000dc) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000021000100495077aa87f739270cb3f6161785567c26bd7000c9dbdf250a1414ff05000000090000000000000008000014000100b8ef7ff02db04ac65f501effc000"/89], 0x3c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x8) 00:31:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") fcntl$getown(0xffffffffffffffff, 0x9) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) ioctl$sock_proto_private(r2, 0x89e2, &(0x7f0000000100)="5b2d72f811e854ea04b01f330d8a8a8cdcdb8028fb63dd8fb02ca25acd358a6413cb561283231c7c4e680472de58110e34ef406bae2a21a0d9342da8b441bfa50f049f7bcd0b1b45a28de334767cdd6852ba612a3ce6d910ae233b8b43a5373290a4e5b6a4c906c1f2f3a962e3ad512bdbe96f4d92bd070a82c3c271dfbe5fae558aa0449ac716c1462f03a4828eb83dd3c3b866fb6a5905e39f2fb08a9d4fde6aa231e2db4b0e9bdef7125f4614d048288697f818ad6f344b36fa28350ad01f20dd28f71fab973f6a8744d95d8dc92338df86b6377ec258b156904e") 00:31:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18422874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000100)) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000a80)={0x100000, 0x9b37015b90857ea1, 0xffffffff, 0xa7, 0x3}) mount$9p_virtio(&(0x7f00000046c0)='userwlan0eth0\\\x00', &(0x7f0000006e80)='./file0\x00', &(0x7f0000006ec0)='9p\x00', 0x1000, &(0x7f0000006f00)={'trans=virtio,', {[{@posixacl='posixacl'}], [{@pcr={'pcr', 0x3d, 0x2a}}, {@seclabel='seclabel'}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x61, 0x64, 0x57, 0x39, 0xf8, 0x10, 0x38], 0x2d, [0x61, 0x57, 0x3e41e69b6d870bad], 0x2d, [0x65, 0x61, 0x57, 0x36], 0x2d, [0x59, 0x0, 0x33, 0x31], 0x2d, [0x63, 0x32, 0xd8, 0x80, 0x35, 0x3c, 0x64, 0x31]}}}, {@dont_appraise='dont_appraise'}]}}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) sendmmsg(r10, &(0x7f0000006d40)=[{{&(0x7f00000007c0)=@ipx={0x4, 0x40, 0x8, "01a86b913c10", 0x7}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)="17a292fd66c96133212fb3fb6496eea1e0819c6a85eb393b7f2c359fe01e3a644441403c893b8c9fd141bd53f18b75082b4f18fb7c56687f0d6f4676c67b6931607ef1873ad28e7ab0bd7206311dff02acc7ee4f6b8c8f89d5883f3ba46fdcbed10b550eb11d9dc70de4cf7270282a62349b5269ca9bf860be4a66d7f858240e2137a75836b8276403806ca4d39e59e9b8bc6536c1187ee521b4b9847959612a29abdaa23afa5fb4bdad0173a7611a78a098287e63687214916f70db3cc56cf10c945886c88100d3e804c0d138d949cb4e9487df6f035c33b88b38372642d512e2a59742c7406770789d7796c03eb471", 0xf0}, {&(0x7f0000000940)="a6504fb9468b4a5698eb052107dafc1179169b5d5bae533cd7e4728637a5b56f98ff3dc1617a2957db08b25b53a8955d6e0906384e9c11b47e5d2f05680f2c709e2a9c84cc868596065d720e615a645a194d628adb3e4f7d8cbb5b217869987ae740cdc53a7f6ee3d0aa80045415a271b1c8", 0x72}], 0x1}}, {{&(0x7f0000000a00)=@ethernet={0x7, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000007000)="54d90bfd1d0ee239dc2c437456eaec1b04bcdafe7d9e5f385e67338fe5fea81db87bcf3a8f75616a4150ea0390854fa645f6591de0baa3643b9a5c84d84483d5c375a0f8a2e9b0616023f9f7119fb8552c4213674ada28a0e05973c0d4a58dfa7048d7ef4504237a66145ff121b0c034638a94d2d2c8bee2a4f3e89ccb4aa84208f944758bd25f9bcae8d3d9070070ee1adffe869e9ffacaca4e7b1b22835ad8aaeec52bdb60dcfeb6316b7bb100"/184, 0xb8}], 0x1}}, {{&(0x7f0000000b40)=@llc={0x1a, 0x4daff101779d5a90, 0x4, 0x0, 0x8, 0xff, @random="9813bcc8f1ef"}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)="a8fb5c8ce621d88a672e5c155563a9cfe517f8d8af62e9b99ba896c4715d0c87c37d2ed552cca57c8f681851137b46dacd1369215867c25b5983bcb86302d0eb565dda64c8f6822c79cb4b381bfc96e1b0a200e76a336a48669921e5d6b20df79d011c51373c21d46c69a3bf1d489a4b52cd7bfeb0122dfd8893160d88f527bfcbbf6af98b4b32217ae7cfbfb650ee6d", 0x90}, {&(0x7f0000000c80)="58db2a8200578e780d322fa0568f1f0f24524f7709ff95257ad5fb54a776baa8c88834ad0a85af3a781f182d403bf05ab55b058f4d84662288828280d69981d7c4541132ce0fa2c0a70269ad22767dd63ffc1af99e7474c2abac33ce3617699fd34dcfc9ab585b94aa284120eb3c48656c3db9734f8135e2fc", 0x79}, {&(0x7f0000000d00)="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", 0xfa}, {&(0x7f0000000e00)="6e9ee118e43359052592e5b563e980bd243a7154d4d37d74d28b173be853f6fd220a3a4109f189ab268903ada67d7215a56627aabedccabcfd77c1a481c5d3f33eed59f7e70454a28d7f6bc89f5080c30c4d0424e2e340a0aa91", 0x5a}, {&(0x7f0000000e80)="fb155854975b79ad174bb3ddf97baa1b91875e2687bae4942caba285076849e71cc3e42e3268b3d752f8f26946a2720e2c4f587242ce65d2fdb9639fcb3551b8c8d47b36ee12e8d13b0e192c310761c6a242b93fbd9a7e6b54b26251c91a0a0eeb3a8d7572e36462fea1db0ecf91b95f2e74700ccd225743952197aaa4d77ff4bba355d1de2374da4e9a7abac224a350bc7d3e3199", 0x95}, {&(0x7f0000006f80)="b7ea9935f26aa9472c971463444a04a7bf9a9538bcf1b1fdbe15fe729cde1d093ee9b50bb5e06a1c8671033fa5110bd6ac97d286055926dea8fbf966cf2db1bee03086c51f28772269281f49749c3e135eaf188cc72219ff166ffb355f", 0x5d}], 0x6, &(0x7f0000001040)=[{0x68, 0x104, 0xfffffffd, "07ae17cdb128d1479da2f4e68fa6bf3596af2ebbf8c9af9b7809761bd60af168c65b810f83d41e6ce76d238dc1b8296a50c9913a314664a169f503ed99c404ccee2855188b8771696d33d451bbb9c206ca83305a"}, {0x1010, 0x192, 0x681, "481d7ce09e261c5c37cc3bfc002622285a0150549ee6531b4244adde3f6aa08292541a54f5fb86080e5e9b89476139b5efa50034492de212037b5d88cc91dfd397b223b85a6fac75dacda7d2bb3c296a880918e6d6ba61ff200945159d5b6c0fc2cc4eba0761b9510be64d753cd7f6d2c79d96eaaaf4e6d30dd57605c7ace76fd12f9560d118c2d661b4112163beffb815a6b6df70de991677bdc89953962542b633d67f3f7154c65b82ea4b26fa5c5ed98a47dc8cc8ca70d7b91f45a3ef399f25b0f38eecb0578f701a5ed93fd2952d8befe861b5f717c348b0958fd4d4e30d3195546d5cd051d1120a39592b3203f9a3c9cf66140d5961443147a689941856e4bf94aa119245a74469c5ff5e931cb7562f3a40c4cc5984100f1e33ef696cc59a682e9fac1128218014426642df35d5d34b1cefcf2be998f1df99a9a374934016b54742ee89eb7d906ecf0feb1e5bf9dda69e5d46d0e290da3ccc49adca0cba23e7388c57e2878357639f66ad4700448fb788f10fd840dcc5e635e7f0f6991a7618591429db8d29cf6a8c619efd9e5118195b2c75355d0ddb0973abb69c7bf1691364cbdee37a783481fbb14f5e4b05acd3b947827f1665d1312e811dad00b684b73343d6f398f721969a50cb690e621747191bad3525f4ce84790ef2cb99b8468b05585cea56f05888fe062130d5b3fa3017a087b1d7ffe8dfbc622a72cfa5ee895875264aa4098f00291155250c22cd00959e9c7959a02954ec991dca7a89dae4f1f36a2f1c22154a41659790d261c98701f2a378ff517799a0c9d8ab4d69a92406d5b1d5f66dc84cb550c87eaf37433a68b3ffdbeabf15e42add243a2ba3175a863c84622c195d1539cc6fd0f366bb743bd773aafec9c70441dfd04dca9298a90b7ded96e14f3b61707d4929ab89bf774ca3420bee91a42df359f37dd036043cd2b69c22aa38da82db2fe8df0604fb81f93a8640e29a817997980dbb6e0dd2fb8dc0a93cd1224b1ea76b59137fc7531ba2dd37bcc6a5cc989b62fcb2d8e091aca8ea346f0c86a8dfa6dccdf283af5efc6b7636f600cead2121519c46738ce7d0af5712db773381d32be35d86d1a92f3566e43ef0ba7cc2af45cd008fc432d2c08e824ff408cabb872d2b6cb3f80679c245a6ea81f265d3abd915397b9d04f71df55ec3f549125cb1f3ccfbdba5f032798b1be30b363a9e10f23ee5e1d594f6d7e5794644832f28dbe4897140f181d3519b4b08dee63c297b482836dc968dcee914e8e89ccc7fde0a6b83be06239dddb599daa9d62ed22ed40a13f1dc6ac23e07b93b2c2d887e00743ddf784e76aedda29918867fb38474a7cc88faf4992aec330e501d0ec339fe21df44e00d00fdc55bed9d99ea18960881069761f22ef6dfad2fccb9c5e6961059f9395f9b04f1f9edd91e1f927ce78f1c8b5c7949e3edc3c2c84a59b16e344fa9d371afe74c205fa01832d629404965b05548905d3d566162783cd7d6e7dc125d0011360ff1db7aebdc3cb774e8d74f359620f6056b3e917e1aa29041714bedd1b1fa460f2f98340ebe7c109bf432f119131d3fcb8193798aeeb1658714c63bc8214863f103a2948c7581f39fe5ac8314740253ebcacb65c445057b2500fc876ae1e0b9083e5f15d0dbb860e8ed43197ed3432f0b6fccc2e48b4bb09f44f71ee425d392a114adfca7bab91616ec9e632b526219a3f18d0964de1e7bb399109aad733b58ed5a559e280a82fb1cd88b3e3f00b091aaa099a7d0d9da337a3953f879fe50c10d7bee6d2b5171d8a7568ac304b2ecb72fd1082dcca47541caca576a6a4b733c7f4edf6ebdfd4e8a3c4bf0aee642e12c1ef51f1bed61c16ea74b8b680d1bae5c102491710440b0f99e7cb374aebffcc30fef838823d611acc4fa91b6f51263127ab5ca3bfdf45199910f1f6d0f234e41b99b1668e365d15788ce75051dfc70a41074b0c9df6f2da12003d776809522d72824d563230ec475fc6aa134b13fe0b54bf2438eab6a30866d8ad4a7607f1a5b570d357d0a2f9fadaafa4af40c4bce1fd4fba2464d006e56e7d9e30711230ab568350a84e12000fe9a46147947b4c3a20b24c4dfa4afe7fc61f0c28ce2d6a918ee7b293eb310f31ec79bb695a9c3bfb6b4487d4e40ab82b0624c6828038df02d2bcfbaf527677d9e612656fe01e32a3a2ddeaeabc7e42af5f44f3fff36f34667d6a93a137d0e1a5d4d764a128d2a22ee2d1bba7a088bfaab873e540c6fa57da08b06033ea1d0f975df348d0d6ee81e97c801e9716142f6a429ac8aae41518bacf567788c04474e0208c65fc84080d3358dd9fab680163cfa97d134265a658dcde166d513421c460488fd16347692cb31c9039fc1405fc6395ed3b9d7cad136e6218a83c2a84dfb71f8b978a6585bc6298aef41433c863f3aa1ddec6307298a99a068752d34ff65f56aad15ab295986fcb80bc996fa6314a0e447c929ee4907ae6dd68a8824a92b0dfd5e772c6dc28fb2564e90f91a6b71db0c0ab53568edf2ca26810a62da8b5b21f5596b4c4ed6209141d9cc61afe17e948bff89815063fccd2bbbe7128ae55fdd8e05e9ed73724b33c22b48621dff093735d9b489123dbccd8ec6c38b53e2bf74e5da37cd0bbf668a1c79742f8f12a8a0cc69f891bf5b9f4e69d02eb515d783c16f8016f4f9b48e0bfad4d6358a53d28a4ef874450a21acf12bacf5e7184184e4452339414108c29ef172d8d953f215e5803c71c4f47255da214d8bc297510b8a33f08aaee92de3b09cebc680b7f9e68d81172687c9a79c7fc5a15725a90ddec70917e2096078cd9a0e5131559c62a086f9422396404c31ae218e6eeca4bfd9100a867b7a68cfff53a1b16535f3552f9898d105d7ac881ee6bf8bcc9a28b9181bd556ffc180370cc7c6c8c7586248e242fbd8617d6f588b88c64b5dad82b0e018db9f79d136130608f2f09b8bc271e2c1cd5091ccc31d8a3aaeeb6afb73111ed1d3ec6e5d4dd2f471150c140436d59321c14d033a5bfbec925ad76f9b960db10ac72268fa74ea95cd2c177cf69a40cc7710ae804de7401c64b435e75343a5b02000980b01702d10d90de527fe7212ed0b239a30a8e7bfa94da4f5b179aa4c67f41a0d4ae0ac130a1ddb0abeed048ef63436be9ecb0074dad9181478cac805fcef53e0e067079cdd2959bf58d73be60775983e3d3d6fed45af01e4647371e36629830f7799280b7dfbb2c04fae4c6af837e4c45d454b9fb621de24740e83efc6275110775e3372b2a9d501cf082067f4baf8c1ba07eb0bd1ad2f3cf5fc57c83e4df010838bd7f655449390e158119751c55fa4c9681b3ec273df7d79c034ed7edf1f457dff8f52cfe0893fe58467e5ec2adb8822d74a409d1af3206fef9092f7887a2d9a51117b8d2e6c26381f7d14a23c0951a4b95d71b8c188142a06dcfa1d5a7dfa9bf3bf3374de90fd9805534ddce6f9b4221e3f2dfa9fa0d0717ae03187d2e65a673c684d49c6c71925408c53ed335e139f093b4c6173ee0ac0d4c4884f65b54db298808e7fd5adee4a021e9a904ae7c826ea89b48e08d64ea77019bfca4d99d27f7f46318c3721d9bdb86587c8e766f5d46b0c7ee69f483e83e70057f52c286e7246732f50520ca4a52b086a7c483f78984005cff2774a2d267916fe2ffdd1dbca1a7fb9a5dfff6191925ff84f388f14a6c3d708a576d3017d8617eaa75c4bda1e31381a91632544b36d15648617b0251c2987ad398f6c56d90d3e7f01c281db4aa30f570863e3ba78d23772d5f261dcaa09aa9c035379c9d4bbcf5d2d7ddc8322dbcd6379abb2249fed78bebbebab0fc65f104a6e23cafaf90b17721eafd268116ff0339e10acb5d4a7507453481fe994c23755e0a49d36b5bc4e3e5db456c60d13f4d1198e8b6a015b1490006013359a9ad89df3340b95418ea8ceba90e2f3ca9718998e9ceefd4c1a8307cbeee7ca7b663ef07f302dd2536804cd7ce3f5b0d6807f179bc2aa072b8876f68c2ceac63a73bb4e086867856f6e310459d0291fdfa0dde2f94b37a205625f1e74c83b0f193a08c568a7c363d40375c522d24706aecfcf5504573623b0c9f110228c20a9206ad1ee3c70889952365cdc8cd82728834f9c39570e903c5efa753239fa843be235aee00538a0d9b7d09b76bfc603e4678100ffe196e35b22e55221228c22a5ec3e1990d758282be4d4daf79edb30280e55b2e02bf862af7e60f0039cfa37f43f5cb08d4e92311ba4653a48fdcd75b93ba53dc4834ccad65532d1f17b6706fb806b85ac93a2a2b671de5532eb7d5aaf295ace4c7b8432a39b95dc84b5b445051109c513392f6d5f782d4c0adab1484f06e4b488b6464a5213dfbbf200daf694ba11cde08a8acd6adbf010c55b42799d5eba023b24b656b1888d08c14e4198500a68546cebcf9ade131e222a6b0e9bbb8e5f6b94fd8a81811b3a8b3dad88c81b72ba4db6f44c96ba0ab121e73d4afa92f09499214049152ec55aa0d924cc50c069881f8eb0a23bb7b575f9a5300bd54e5562ef53c00499316b16c8eaae4fdaa9a83e8aa575b49860e23acffa7d6e6740d72459aaf3fd9ddb98f939610e4f004d519503eb6f974e3cbdbde0f2c61ed581984eb3b8f1314daaeddcd7103a5ea91fc3e6424118fd169e922590fe6f58ea28d64dcfff5745c642a3e99c111d968c200f39a53c6f467e2bafb207fa33871c5775013d6423e5e44207c9a29f52fa9bdd123e39952c547dff0f621e18a757a103a8aee3e66f16f5cfc5f08110256f7814383757f56f2f4b9840305cc352313462e82202e308d9cde7f99626ed1852d81622cc4febc52a5dd4e920070720a2399e9cf1d1e8789e54c14281a8ad1327103506abe3a189a7ce849cf65efaa94eeb2f60466b18d9e845401915936e6d6c1aee895e2757fb83686e35e0dceabdf655887877948efdacd7492ad34af2869d1788aba912951b7c96ef12f4d5c6393677849dedcf5bf900d3ad3633ef1aec4a59b8b7462fb8f0910a047a895297d63d4311a1c4e524d7fc583884e446b38b91fed767efdda6588070aa177ee03bec4ebe9a76c119d034d2f5fd8ca0b6a4f56b7c5cb3258e8bf6550188a742119f6cc8b4d7834f02bce1f62bd232e053997fad53216f2e5b768912cc66ad1a226c8e801fa16f0684d37aa2d2e72d1cb411779836456cad353b127539451545a0009e61a2defbd75506320f7d71b4a41308e21737f3b069d25c7346092fb2534604f08dc56fef08e60758e0595712a5b8ad3b419ef598b5b356e874c7585f3c3fff7c0828a94ef5f224e27c0584a8c01e89738612c843c62d88da9367e2fb4bba873c8130081d45ca53de30ab5b4ab3cdfa928af6e00dbc7c7ffd35b7892230d82026c199af1ba69aefbc8ac2761b437301e6b0e7eb502b695bd8705d3b7354dfc321f3d2d5fbc09ad1a3f55c08a450dfee8aed9b103079ac8968830eb3ba6d927dc2cbed14aa67de7fbc43ffef647e524cfe16e877bdc5911bbaf895bef8c2dec2f16ad6296f3e2db3bb4f54704f4a2c3f031aa02edb1543f319f8ce819a3517e89993efab46a9115920f6b7400fb7e4f3fa3a3eb41c346c815baf0f8cd3d2bcba5f841bdfa2935041736815cf1f33646c7468a2fda647fd5637a3789a876f690adf70a486179a98bb30b55cc0ee85295751541f4a769de0b84f3f50eea4b0c83f2cac24aeb915aea6272e55a963a3f9ceaf4db636b300e754faacb54852a9ad77487db9562778d555684275d19eb59e458c40b0220d42fe957325f8f857"}, {0x18, 0x6, 0x20, "b0ba870ebd466561"}], 0x1090}}, {{&(0x7f0000002100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x4, {0xa, 0x4e24, 0x8, @mcast1, 0x800}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002180)="123119a23e766a53ef413d194de486332bfa6bee2f8518", 0x17}], 0x1, &(0x7f0000002200)=[{0x1010, 0x10c, 0x8, "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"}, {0x38, 0x10c, 0x1, "3f68d76af13fc89dc7c6ef103504c1d21f6188a428efeaf995216d49c818088442779b4b27a4f1"}, {0x10, 0xff, 0x8}, {0x1010, 0x87, 0x0, "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"}, {0x90, 0x6, 0x0, "be1004a59f7b31c85321b3b6e97b8f59eb0fdbe926641a72e19c26d3d8ed0b67a7d21eba7fe43e7597c47974af99b470dd5fe3d5561b8096e77352a6388996db89d414588864007d0bb6386800453a27d6ee367de312b8cc9ce544a63e4814dcdedb40573cba2019f50efd513faf4f51d02aeac8ce2ae9323d5c11a31d"}, {0x100, 0x10b, 0x40, "0e39bde4871d3aa16653e023650552d46a2b2fc96fc19733f0f995184aef52a891b5790daab84138d3170c17cc5b471e1d26b14b4daeda3e313e7d4d4d90cea75dfd9c431a8732992965824c187283b8caf4b1894a800f37e3ed065bc0fe21b840de05b8be62ae30ea33b63bbf252eb959e743a5eba9573fbd3c66b220a3c592621d69550e517c4521b2addd42ba5a0b4c63a5f889eeef5b7107e7af77b22ad2c8f04e1ceb313e36081d046c6e6d6b4b7cf1a203c2e74c337c5e118a858c84a7a2c9489ac2695848c5971382ed1415abf3e9b56be30f16e8fe962563449b78f714265e50694c0dfb996f5ea260"}, {0x28, 0x6, 0x1, "b5e687a0e8737588bff6edac7579838249ba8f4dfd66d4"}, {0xe0, 0x116, 0x3, "9fb1e63571b7a3a58633b5a64a1940077511e0143695ff768092965451e1f45ef092db4c2686c758a0664c34e8c806bd0b31d385cd707456682e97479bc3f27ca6795d4c95a782740c49387b6b45feb61c16dd4d33d7304b618c136a1e57a0b8db37ad27bc2904365bb585817c251de1d63e9e9e8b084388a354ba91c00efe4865e394ae789d194e8c8f91e87a5ca85d47b0517e7b0534d476ebdd49c1af6d6640190b075c71f153089251614b5d2b67f4549a30461042de9e3f28694d6b368eb3b668365faad330fa3cfb25c3e8"}, {0xe8, 0x10f, 0x400, "f3e01a54ee42e0d538d8cc4d650eadac5103da186dd1661e885bc51bc0498dc8364a8ddb0badbb0d58b49e3d6b1c0c5a11b8e9b1c612866b4ecb7a17f6ecba621191e7a155fa288f06ef1188d5aec6d263c13f19b01f4722cf375dcaa4125ceec8da6daa29ed61101fe1be8b54fc73a2d0fe9a7be65781f84dc777c570f236a37d2975005e49a66fbf6f03ade4db04a3c5e6812a6e6c132355cb4e6d7452e435f4b7c0fa726b72a5e6fb9c284b5e0fd6ede3f7425b17bae89b5fa22a2764ce9cc775d680b8695b6869925d80bdf337251b"}], 0x23e8}}, {{&(0x7f0000004600)=@llc={0x1a, 0x5, 0x6, 0x4, 0x1, 0xf9}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004680)="854a1bfa4879490ec1b49a04a25c1fea986c2daa97343ca88944", 0x1a}, {&(0x7f00000046c0)}, {&(0x7f0000004700)="08fcfd1ec15db04b21b4ca6f5127f5fadfce62eca2f35debc52a240db682b2e611fce2a15ef9c1d0b84c9d54a94e2c22420f4e0f150aadfe6362f2d8685f38c85eab014543b69b3ce3e0a4868010236ac9a6d8f40037c0309544c01dc091bfd2684b5db664b83b5f76f44c965c88373d5604e19a498608672ebe7f1b6bf725ec4ac742b508d45a8783f5040223656d9af717c876895efeef6f7c", 0x9a}, {&(0x7f00000047c0)="15b9316add7fc6b77d9d452ab36c117fb38da61d88a7e9bf019117343106259f34ad071833bad437d57f38b69c6a8dcc1f804b8f391e1c30c66439978f8df4d6729382e14d34bb93e68aa8597205913809a5eaac45581a42ae5cddbd3a52b4522fecb0d313c9d507dee58e27054a3a427bd55ae3c9ab6a840176bb537e26bbc259b9465b2b2b8d539747f81b0c3b67eb54c2db4f5e67182f11af290617f67184a48b274805f70b9a93c12914824af124c4302ca87800ef87248cd315af2d09942ebd756ea4be", 0xc6}], 0x4, &(0x7f0000004900)=[{0x108, 0x102, 0x7ff, "2769641fc594131432b7b368e348f540b6a8accff25633a8d67607255a377d316998b030636176957dd9b1e938d05b37307896d181cd27cd46f6282304810cd787a9b4198dbc26e93ec10df2565da5b7048d4140fadedfacf77718d6d82b308d33181ede443ea7b9494e69d0c3453111648d8844e9b904e5fc0146bba7873aa147a626068b70a4f69a50f047df92cea388b332fc96f83d5f647a1821cbb325a994823e63474f218486082e79a0f121604296961071491f431e3d99bfb98b55f9dd3ad95d522ef56abca0b81b6f48256b58b091782071dea11c99cda48f239475b08e40d63c4b6e19ef4fdca15f3828a596c14d3870ae"}, {0xe0, 0x6, 0x4, "90613922521b73b068160419346bf2ff97856326f07ee0b169db05df8b25574450ccb359ce55b925803fd540edb8e37e76ad4f4b6d46411a1cfeead4530277342b31b056011712e7eb0787e7f66ccc698eeb62ef7903b1727f9b4a4430ad6286524d1349a8289d5fc8626e3ec222f373433cec7965c834abbb6cb4d76bbb5cfa87edeb8733593656fac31700ec1164ba68ff23c34cb62411071a047deefc1b758d47b5c314cb2a448504aec628e4e6e07ecb57be9bfdeb8b125228aec5302a407c725cfa4909d8ac37f5af2c429ad889"}, {0x1010, 0x186, 0x3, "7e869b5eed56ddab31556ec9b95462365d4bb86d26656450b85432cbb2fc4302d4101bc3c3f3c42dae9be1d8ebd085c86e5de3f9811a6e28ae17546bc7f483ca5a18c6971350f796d722ee809106d32b4f4fea607483e3d80317a404066c9630e36efed2db1e83f66f24b02da749c1a6357af098059e8c7272695255e2de1362f4d3f30b27838d18e32932042d8d26ee182efe1d06a0dcd074d5cf88c87540535c0cf36d50dadb5eb2846d55eca8c7f28d721dbe6d555a277c4c22e71b82f9e9eb631c19b08072a063d3150d5bda93b41f02ce88afa2f37821bb9dda87f159711af89ca99bfc43b635d97b23ebf3f6418ecd05b746b44eeed5ae7eb157b37c3c202fdc78acd5aaa23b4bec3b89f1d4be1632b898f5e5943d0fab6d90956d7a0bcadf891bb47586e8d6c082ac6ba31da3446aa72b350c12074cec34a19276267fa6a937404baf0fd8e44fd070da0f1aef230ba93fb7842f98b371f0920fb49a48dcde90c09cbff1fdc853f446633f953cc6a5bb36428aa66215ee563a57448c923697b413ea21113ddb896d6b894dd112f9793619fba6643f81bf2f128f53e46a3ee4e158ec5b590250b3aa0f758058bfca0a5b3fdb961cf67ab06e41a9ee1ffc1dbe2273bf8467421284d40add884e6378d7c50c92b432e520fe1d5a3d093c1a066d161831d73f5340832adb9ca9e5cdb456e5150f6431ee72a18e538fa650f0c97cb98deb9feba4e898c57f9d691836a51f53a0c463f9bcaa5550692a850c494c5ee77bacc00fd8c3145a33b879535a89963748b7b16011fa28e930719bcd5e20b7c7a2753ee5bf3e419c60e32d4fb03518ca9b47f74f0ad4d8f92e76f59e9875be699796942f60ee213aaae671ebf893944bb626000faa51fa1ea642a642694ce2687f2906b755fef7c6420bdd0dfbf01990352d5849c0542ff534600c182b2ac010496af33d3b616f3fc018627e34ba284456dbcf345d1af5b7b17c0bb13c2ec8dc375d5e8d8c1b2bde168a6b9455760e5628124cf7daab64d9b6e9f0eb43366ce3ed8f1fcc160f52024be763f75548048b1cb90da7b3280f0cf251ddfd42d9a8c435f0eac2e373dff77bfb5698dd63e63b27e245c768f10b7fe10197530399c238032037035c8fc062ac44bd3a2c4c1be7961da038319360eee12512ea6e532540d345fa6896eb764cd42468dd5c2c266f0d57c32cba6ebdf2f41460696fe011907770f19a8a55c114831f4ab4b5ca2d565f7d2ad23f0c5bb1d017617db6d81db0ff2bace9e66bd4a68a49604987d3f40d9d8c3c0e0342329859b9325cb4a5275adce53d312e0f25a0cf447afc3b37d400c8ce998bf0ad52014e75b3ab5b124ae9e115cdccfcb10e3b1af0114878e1e9ff1fc104c1a37a7266355a17fdcbec2b21414a2489d26319d06204ba03e5bc6d86df93f35e4ed53f65919eccce353a2a5d7778130ff867d31f8173aa9cc74c35e79fcc0de13c94e221a1691b53b69b865afbac4a88d9ecc5165d6a50facbdb5ececbb7531c235bad1a9fb581d740996334186d5df479b5bd3c8b8a0adf9fc5393b4f3776e9da3779c9db7a7459a6d9e6b35aad42681552333c905d2d960f8f33b154da6aae45e0a52b3e082c940113b1a9031f8d029553668f6a496bbc064c0f6668b08cbde40f5405182617be693e9a9683db71fc4d45de937c8608e291cc6fc3a1d435470607095316c5e21371f9a06c965dfdfa7912e7fce8c060ac3fef5d000fe225781ef7cfb47dc1327a945a4a692926785abf9a41b471126812eee47d604f9a93e5de02594e316f1ce62ea5ccb7f0d2d12fc0be15ff7ef41d00885e7f803847ad7029ee1f849b8d24e7ca90296c45fd5a99fc6872f9ab0cfe70c9c4f2ae6d47a324343ec57bff4e55933037be4c5eeb84692c765df80203acd620452480ed2515111c88c1b08e68874db947896e2b39fa595dba2ff4c5321351bc8d140d95a074aa5921d2153d27b03130d1c837d28bdec63d05425270fc4258e11cfa48c6a458be96f64147b57d34da102c8ce2ab621822a85a5b2829800373ea8fada8ed46082c6a0a37d3a8dcef78c3a35ce734936ebf9dc71c8c73617a97de9f5000e9c12f3d06d5c4b7144a3d17845ca05c2cbbcc0be3f29e5afedd0ab94e8868e7f666347b9cf2339a6da46f1cb8163f59468dcbc2f503a22892ac6b571d03a694858a5dc2dc13c06475329f7813d24760960614a92137293a75add59dc8b48f482d4abefd146ecea854c30aca5df5e633f891d175884d0e277fb9513a4f9ebd9de05249d33e6bdbef96ced1e2104ba29cf900350e78f0a8432439054f99ee2f283b381b36ed40dbd05ee085c9ed42e80fb9df284d961e372f7f8d217c0c8fa094ef25a80222eb1fe207f1d483f2445013b52398d1735332cdd1c05dd39f4967dc1a214cf35a212437a39ed9aa4dd143075530af1d7e9e47c830d673ff07f654b1c29e41b3a043f35a95a0f57bab9048541f76c4c4906c652f018007446494c3080db878b01b38f8b680159c74f8e91febc3686281c07b86af20758701e827d9e02d7bd5d2cafe57b8ee75bfdc50be6f3df18384d7d4c410a825d6dede6770d35743bc7e33a1f1eca7fba8286af7121eb86ea6a47e97552340bbbcd5f8aeda5535cd8c76b077e19b40969b9f80e01c55ae6fb1810a91546b5ae3b3cf5a4090cbdae4a6715efc987544d14820cfdfc25b752595d2179f603987dd5d514f8ddff155575c045c8c5b9a377dd52052b4cadbfe7f738ed4787fe321e5b4c8f4c817c53e38cb35b55a3404c135590d161b28b89315147aaaad8916e96ab7f0963761ded8a7c9da083f51b385f0e107a3d0d02d273da0657fb9e2956357d8f8d797a6d80ef878355abad2b41aac355a1770f1776e6b25db210b7661223684898704a6910d32cc94cc8cf84e2f8c10ed4aa4450f0e749c3b729ae68bcb19680d9d7ca1be58fe21c08bac997c24f362ed633b08cdff1310c862263f4beb85056277f35ffa141fa3214071cbf090e42ad98d0fee349cc2994f6bb41a0a2eec02f2bc8386b1db38cd735e1d51b8e08c832be22c88f062e1f950939626d2eaf1a6e6e8846f0b88bfe493e6866d088d4ae827ae447313eae729d28da99b8319f0cf1070f17267bb50c847cd40546f79f0b796d83f6ab3be3e6ed9aea5027828fa3aa9a6054b51f4cb304b68eb895a75caf080ded91f7198b8d017702776813312125e133271641c4ce5a2876ad9c49c542b5bea1be8b98d32914aa8aeed9f86db0a08f961d8cd918fb81835432fae05c0102ed65847aee73de1ea136bd4c17e05ff0ff540f9f7d1acb54fdbb68d41206b0fe4b92ec4f5decfc2e551f812c87da5faa651f8fe10dab88cc0e39a1ef5cc00217a5b60124bbe7c8125e2bcf77b11066b2cc1b5e8cf6117986c196a0cd2f9a3acdf437bf2c3a35ebda448222efaddb76a61935200df341f5f2cf18483cdce931a11ddfba2287a2e64632b3ca9adc34a20e1d6899aa9e1765eda4a6e45db1ab59050f08c4621d76cd2d3d822acae522dbf11d7680b459864b0ccd5461a4749711a0a886960c077899d48eac8241038d21b400ebdca74c9f5bd2ca3ccc1adff09336512dd0e6fe390dbba1b074dfba9511c202301e026f2586846a5ddb2afd5dfe8202422196be2a50a62c6bf591918bcb1a66638361f56b017ea29651f59b1600ca3e0c56e203472123508bd4bf098f863e67c5f06d3ee56041da023ac2d75b2ff1217436f6c7bff93adcb5afb402c518aa87e01f21f7d8a114eb2db0a270722f3b6d007c5f643fd520a06fff5d7ec62b14a5be4394bc2c41f4951e19e52ed40a4ce9d9b1ffff244e7c15230d06e52d4f591053df6b7471d50a4d4f62c3a91ee23aef0c4be376c7bc5ca8e647973c71ca84dd3773d2259a4e030f12adb8d3bd659a13d5f596d2691b44362fb190538f057038ef875e9805b1c83cf57d0b25a20faca8582d1b45cf2c74ad63e4fdb9ecf19a3568545c9c0acd7a9fb7076c7eb61e7f55f8eb59f65603116eba755dba90f898f266f730d3713f1724e4f19cee3083c8f7f85aacfd826c88811a0e6536cc4be1fd6522a8b6d1a15999fe181e845c4544e02641993067fa1adcb8ec332087fbbf973f01001fc3418c8f0fb0800013d806100c5b0d95c5f7424b9869c892c0732e9f6c9fe96a3f94d2dc193411642fc466a781fda171a85aa704163aa1cf8e8e7f6c69cacfab77e05cb5c70269d6f744e51f11788b434c8423361cc713e40fd1ae564d9931f4e04e7df349a37721773fbecc8c63be081174828531f24b944a538ecf43e3f8e8d86bea6c7e5c9e798520135ff3120ef17e4bf48c0780494fd7a01d154202bb22bbacc11b91c1a69912f1f0a2f9da61c369280b0cba71fc9f5aa72be5e6bd34e03152d075c06ef9e4cc41a12f98730ea97d55cdb3b726052a1ff494b4d4afa73c495536c54d34ee65c9f29d1fde4c10e1b48d531a0eddd2b3962e47850e38b0cec6ec5468a7e3d9812f0a0e01c8d5bf3a70797df88491420bdb3e3e69a37e5068a74499e89d8df4ee939aa13af65ea3309b52e56eb0c84d90ea6e3c2ca7ef2c86e1ea24a93ed901fcef7fafe39350928f94b2cd02558b153eef91ccd52e437063f4517f50e6bf3786034b3ebed29cfd71da10fedde2a7124d4c8bd56d10211fda4a060990af27212f9e973d588143d32d3744810d698541bbb8ee40672f5e9670d6889943eecb396832028f1961257982ef1845b76328fe186397df3816dbf00c016c371daa6345a9f4e4cb01eb8d9f9e0b8599003760b278fa4c8a80a6e70b046b4592b330c25ba729ccacecd1efe56658be02aaba4aeecb576437f5642ae82baf3f1d0a117b5c88d215743060682f16d1e84b1eee059e7a89b7fc64f909b9306987ae52fa118f829f942636c4406be2d52fc5b3e702b4c12a7588165d9f0574e1e4fcd386df5c99d63f5e627e312f9480fcb6ed95620989f8af16eef4937065c12131ccb2d59b2906e5a1d9203bd9466b46ad07babf42080921daab5ecc073d06bcfd0811f40b4211b323576ab192b834f10a2fdb40e6afae1df3a72340ef5b1d840a480fc35c3900ae0d61efba91d30509bea60af2af3949e068cca2a32a59c15d0b9f6aea5a654822546b9bd4d4117093f1690ff5f7900d73a41ee5d47667f9e5e2076cc5da47a90d9c7da2a5d889406fc19a438a12335736d1eeef9d12a11329d9946c50e401cd480731dfc5fe5143ba4bd78c1e0aa73ffe0b6aed95586079b26e1b7dd7fa6abc2ad784e7f7b33686373b5578ff3baf772448fae67b7ca5481bf502e8c5688eb3c78566626e70ca0234ff0bb15992f2c82db45c9b3f0fe670d5556ec16ef32893f6a0dfb4a3dde0df3f19b66e04e16657455f45578094708af52f3a95bfadd592ba5cc0fa01fc929fec2badd06f94f5a04ddfcb36974874a269aa4908ed4dc62f5e019707b5c0840dda965fd325023bcacd732ba5602e8634745aa5554288a27478af3b69a015046ac03afe367d2796f12d9f648cabbf2e178a349090311596274adc2552c8f1adbc7ae35b9cae819335f974bbcc3916bf01d9a3b0557cf24435e6503314591ff1b968e14cbd6a6947999c802e0dcfc1ffbd8ac7f64ad1b80f8c0affe6e88d2353f602b2957c3050e4a736ab7e7be30c1e7c18ea7c27d4a6656c24012aeadbe1d5634ac6af5dd790cfe2fbbce9814a9a20092f4f10770de265083c6e14c4ca45e1debbf443746fd97ce0806b99d96dd437687d8203d7fd87810a8d8c1395c"}, {0x98, 0x84, 0xfffffffd, "b2ac0aa6fff76de778ccfa27d3d097b24feb05e0c562bc97169473fbb02673675363cf63a781b81a54f9759356e5e09217ca6a3678eb689ccd18c0564975a81d45f240e0760ed1bb157d85cf241cf394a2474fa261f63e42f21aa0fd176d0c3a42ae1ff7632140f31b6c2f32ee8d78231335b64766e1c1bb8c07faea304a63c34aea2f2d63"}, {0x1010, 0x117, 0x9, "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"}, {0xb0, 0x109, 0x1000, "13c839958b623b8af817d6dc415320466d71edac769371056e7b54a33fa32b08e3f45b223dd05b5623ca3a555378ed4a7fd426737c91f107524a41356fe71945c47f5d22edf2f27cc106e33387efd242a314dd4258116bc13ee1bd1299fbb3a9dcadb6bc370d565270c9dc699ac37902c53dc20853a034b93dc51a81c052429177f6720ab7f0d2748a0414a6292a9cf7a48fc0fe30ad5b8efb9965123adee433"}, {0xe0, 0x105, 0x3, "d02eb2c2bc6ff13cab8e417b4e72c7d7868f46ece6050e73e64de24e5851eae2b0c685a4bf0dfaf61f1964f49da497e948b6b954d91ea183a13f47c87323b59415bf9ec5b3d1e4a3e4c61bb9f9f9f030db7fcad196f92d5c7e022696ef34a827defd0be5c79af38dffdc070e9f4f35a46d54f9223af69217e74ff30be46d52e9c0b99a9725264f4ae5ed16e18f2d4e25ec8f4a77a0bb966d2ee02749ce4206bfdf3c63571bb5a68932485f2e263cb65392ee6755f7f50d23a0d820f0bc06479c9476f894f6ebb06e63b5443b8e"}], 0x2430}}], 0x5, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) syz_open_dev$loop(&(0x7f0000000ac0)='/dev/loop#\x00', 0xffffffff, 0xa7d36320fff114ae) ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f0000000580)=0x9) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r6, 0x400, 0x70bd27, 0x25dfdbfd}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) write$selinux_create(r8, &(0x7f00000005c0)=@objname={'system_u:object_r:logrotate_var_lib_t:s0', 0x20, 'unconfined', 0x20, 0xb00, 0x20, './file0\x00'}, 0x51) 00:31:30 executing program 2: 00:31:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, 0x0, 0x4000000000dc) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) write$cgroup_subtree(r2, &(0x7f0000000100), 0x2d2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x85}, 0x2) 00:31:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000994c25e6f58baa7ac328792edb0119d704c0f3aedf0fee93859ad03fc6f8f5906710bb0ccbdfa31cdd8e85ffadf91c755e614c2d73fa2c02ef53495a99824861e09fd02e9aad822f53356d46a4f021a7aa6fec06faf763186f3b5011e48ba10e10a80a2de288818a453979f614ef20d0cb9f31b62273bd5f9d37041ad206f93333b0871d0100000000ff07000000000000f772bb41b9da79ffb853ade7cd69b33346837fbccc391b88a748322d05e3440b451c6258cdcff89f125f29cd00"/205], 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000100)={{0x1, 0x0, @reserved="4cd986150bf90b2936fb06238d748aef8e1aa371a08f195b0332779e5ba1d45b"}}) 00:31:30 executing program 2: 00:31:30 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x821, 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="ad0000c564d7122dcca77988827ae61cd9d7843140f1590390a74174a1851554f803132a452740bb0864f8eb770a2fcff0"], 0x2) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x6, 0x101000) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0x0, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000440)={r7, 0x7ff, 0x4b, r8}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r10 = accept$netrom(r1, &(0x7f0000000180)={{0x3, @rose}, [@bcast, @rose, @default, @rose, @netrom, @netrom, @remote, @default]}, &(0x7f0000000200)=0x48) r11 = socket$inet6(0xa, 0x3, 0x6) r12 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r11, r12, 0x0, 0x4000000000dc) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r1, 0x2000}, {r2, 0x100}, {r4, 0x3115ce7231b1bb52}, {r9, 0x1062}, {r10, 0x8000}, {0xffffffffffffffff, 0x10}, {r12, 0x4}], 0x7, &(0x7f00000002c0)={r13, r14+30000000}, &(0x7f0000000300)={0x8}, 0x8) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000140)) [ 438.529359] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 438.554557] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 00:31:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x10b102) write$P9_RAUTH(r1, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x40, 0x0, 0x1}}, 0x14) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 440.390106] Bluetooth: hci0 command 0x1003 tx timeout [ 440.395533] Bluetooth: hci0 sending frame failed (-49) [ 442.470160] Bluetooth: hci0 command 0x1001 tx timeout [ 442.475496] Bluetooth: hci0 sending frame failed (-49) [ 444.550176] Bluetooth: hci0 command 0x1009 tx timeout 00:31:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, 0x0, 0x4000000000dc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2b3000eff2cedccd0f2273728c4b83a4dc72e289982ae530d903de8264b8da6ae91ec991830f7e4a7277bba024fcde4d4b4eded1772aea577b4e8cf9b563a4e2e72ee44abc67aaad40afcde027b56d2f834380cd49632fa51edeb4f3df68dbbab6eab685ca2a8929b1d530db7ef567a399acf089f556"], 0x2) fcntl$setflags(r1, 0x2, 0x1) 00:31:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='\x00\x00\x00\x00\x06\xbb\x96\x00', 0x20002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x7fffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x50080, 0x0) socket(0x8, 0x0, 0x7) 00:31:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0xe8cb73feafd5c1fc) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000140)={{0x2, @addr=0x2}, "b72304c94b306fac46887e031d9a49cf80071281f766d4234fdf3446faaca46d", 0x1}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:40 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xad944b7964eafcc1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x8, 0x0, 0x1, 0xff}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0x1f, r1, 0x8000, 0x7}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 448.511449] FAULT_INJECTION: forcing a failure. [ 448.511449] name failslab, interval 1, probability 0, space 0, times 0 [ 448.523433] CPU: 0 PID: 10482 Comm: syz-executor.2 Not tainted 4.14.156-syzkaller #0 [ 448.531349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.540716] Call Trace: [ 448.543329] dump_stack+0x142/0x197 [ 448.546983] should_fail.cold+0x10f/0x159 [ 448.551154] should_failslab+0xdb/0x130 [ 448.555138] __kmalloc+0x2f0/0x7a0 00:31:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x108000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, 0x0, 0x4000000000dc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x1) [ 448.558693] ? kernfs_fop_write+0x30a/0x450 [ 448.563021] kernfs_fop_write+0x30a/0x450 [ 448.567286] __vfs_write+0x105/0x6b0 [ 448.571016] ? __lock_is_held+0xb6/0x140 [ 448.575082] ? kernfs_fop_open+0xc90/0xc90 [ 448.579329] ? kernel_read+0x120/0x120 [ 448.583235] ? __lock_is_held+0xb6/0x140 [ 448.587301] ? check_preemption_disabled+0x3c/0x250 [ 448.592335] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 448.597886] ? rcu_read_lock_sched_held+0x110/0x130 [ 448.602913] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 448.607680] ? __sb_start_write+0x153/0x2f0 00:31:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) [ 448.612007] vfs_write+0x198/0x500 [ 448.612019] SyS_write+0xfd/0x230 [ 448.612030] ? SyS_read+0x230/0x230 [ 448.612045] ? do_syscall_64+0x53/0x640 [ 448.612056] ? SyS_read+0x230/0x230 [ 448.612068] do_syscall_64+0x1e8/0x640 [ 448.612076] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.612098] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 448.612106] RIP: 0033:0x45a649 [ 448.612112] RSP: 002b:00007f6936e64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 00:31:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r3 = socket$nl_crypto(0x10, 0x3, 0x15) clock_gettime(0x0, &(0x7f00000051c0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000052c0)=""/198, 0xc6}], 0x7, &(0x7f0000000640)=""/244, 0xf4}, 0x3f}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000005240)=""/107, 0x60}, {&(0x7f0000000800)=""/235, 0xeb}, {&(0x7f0000000900)=""/58, 0x3a}, {&(0x7f0000000940)=""/190, 0xbe}, {&(0x7f0000000a00)=""/173, 0xad}, {&(0x7f0000000ac0)=""/89, 0x59}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/110, 0x6e}], 0x9, &(0x7f0000001c80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c80)=@alg, 0x80, &(0x7f0000003140)=[{&(0x7f0000002d00)=""/207, 0xcf}, {&(0x7f0000002e00)=""/165, 0xa5}, {&(0x7f0000002ec0)=""/32, 0x20}, {&(0x7f0000002f00)=""/35, 0x23}, {&(0x7f0000002f40)=""/34, 0x22}, {&(0x7f0000002f80)=""/180, 0xb4}, {&(0x7f0000003040)=""/144, 0x90}, {&(0x7f0000003100)=""/10, 0xa}], 0x8}, 0x8001}, {{&(0x7f00000031c0)=@nl=@proc, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/31, 0x1f}, {&(0x7f0000003280)=""/221, 0x13}, {&(0x7f0000003380)=""/98, 0x62}], 0x3}, 0x101}, {{&(0x7f0000003440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003840)=[{&(0x7f00000034c0)=""/181, 0xb5}, {&(0x7f0000003580)=""/102, 0x66}, {&(0x7f0000003600)=""/214, 0xd6}, {&(0x7f0000003700)=""/36, 0x24}, {&(0x7f0000003740)=""/245, 0xfffffffffffffe0e}], 0x5, &(0x7f00000038c0)=""/164, 0xa4}, 0x10001}, {{&(0x7f0000003980)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003a40), 0x1, &(0x7f0000003a80)=""/67, 0x43}, 0x1}, {{&(0x7f0000003b00)=@rc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003b80)=""/178, 0xb2}, {&(0x7f0000003c40)=""/103, 0x67}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/154, 0x9a}, {&(0x7f0000004d80)=""/5, 0x5}, {&(0x7f0000004dc0)=""/149, 0x95}, {&(0x7f0000004e80)=""/80, 0x50}], 0x7, &(0x7f0000004f80)=""/99, 0x63}, 0x10001}], 0x7, 0x1, &(0x7f0000005200)={r4, r5+30000000}) [ 448.612122] RAX: ffffffffffffffda RBX: 00007f6936e64c90 RCX: 000000000045a649 [ 448.612128] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 448.612133] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 448.612142] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6936e656d4 [ 448.612146] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000005 00:31:40 executing program 2 (fault-call:2 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, '\x16\x1a`'}, {0x2d, 'io'}, {0x2b, 'io'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'rdma'}]}, 0x25d) 00:31:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000100)=0x3, 0x4) [ 448.678285] audit: type=1400 audit(1574901100.786:50): avc: denied { read } for pid=10498 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 00:31:40 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000340)='/d\x00\x00\x00\x00\x00\x00\x00\x01i#\x00', 0x22, 0x121000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, 0x0, 0x4000000000dc) syz_mount_image$jfs(&(0x7f0000000380)='jfs\x00', &(0x7f00000003c0)='./file0\x00', 0x1, 0x3, &(0x7f0000000580)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000400)="fd76343d1b3bd88d32b75d667793143bd259cf1e304734ef3a35897a52c6d6ab9827ac069d0110bded067a4d52d29b90d9eb1bc83860d14a95d63d001e5e00fc9bdc72448411b6564a633bdef12882c0196d33ba5a42ef93eeb16a23e0d0c9d0a60639fa9d9ced8efefd00cd987de44925c17622c92eb546432ab3d77d0d287b21ab656d8fe21d488f7f8725bbc958d23d36548a69f1dba61d48b8d9af5c75b115239a604b53081960266651f473ee80dded9514705918bd5676d429e120a0e385d8845ba787b13de70f38d9660976626d64c196ad2f9006ce9a5ba7303a1fa3282027fcf1a4b69f60c81a8a89e02c1d0e060ba96125", 0xf6, 0xff}, {&(0x7f0000000500)="5801f7cc7ff1b5b012f41d8620e7c560c36e23b0b469cafc72b8d761e5fc52d2f7b17ded6bb9498adcc60400e8f30f61830b7096ab2cdc48c9b4fb9b3c7fde530bdb6b3ead9a77c63f5a1538006a5e9e44ef140f3d5e7adf1f948522d15463c29f7b7bbdf2f48d0b64ab5fb7eb7221d6de3f93de6957ca8de982c32c3958c33f", 0x80, 0x100000001}], 0x8000, &(0x7f00000006c0)={[{@errors_remount='errors=remount-ro'}], [{@fsname={'fsname', 0x3d, '}securityeth0.@'}}]}) write$P9_RAUTH(r5, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x44, 0x4, 0x5}}, 0x14) tee(r5, 0xffffffffffffffff, 0x1, 0x2) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000180)={0x1000}) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000240)='./file0\x00', 0x9, 0x5, &(0x7f0000001a80)=[{&(0x7f0000001740)="226731bee87d879173d62456949992f8f224b9534d619f9326f3c6c4fab301341a474e8396083721e95e296266e64f0d0d5ef26c264697bc309f50f8747dc73ef515dce26b69431f4ab1ccca34d76984e0670e5f557320bc93d265f33a74602640a991c17fe5173cc85b559135d44ee025cfb038d6f9c67d9241851789540d091e9ebbc718986c62fda298c1c1c76753a0219b97ead65835139eae2800549bbb24512b79360812d6f1eb9a65699e94f84b99ee39287c469a34d90ab248cd6f06eb997b6a68887aeffd107e0bf454190f2bd20483c5634cd1cfe2e64f45924e73c1014fb185ebb036fbd2853ab4", 0xed}, {&(0x7f0000001840)="ea4f8edd67ff6b9fe266236c5b1b87b4c086ff77f5957a99141b6444305f732ec1b1454b53317f0fba3d5e60b49c7096f01e1a4baf8f1cccf03889a5b1405f3c257fd9c20d86d718fc73a76daa46743fa6bd238194c4e6f45bb4d4098536fa28c0b9f47492ec6b175c42093b0f9510935a2ff56c386e699ce2c4e7d656c15186b4b197708c8fb1d9fd6e0722c154ef765a8e981dca6543a6621415c700e0a9c7d6f9eb99ecf24119c95e1f20125147fdca75bc33867388c4c2bf6bd8bbf575a8c0ea38d7e8ec37604f12e6b65338c405434a9a1dcd1913ccd8e09c97c657b2323c768b3a", 0xe4, 0x81}, {&(0x7f0000001940)="7b4904bd6209cf4d45ed8a816382ff60ca91a47f3659cd27e8fc533479f1645e9341958f49077a5089d649df75458dc325a9703683b339d0b8d59eaa1fe6883849176fc0a2793590e9e5165f7809fd2f49014456e5b12b7da775e20ba0e47de6013cfe61e0070863dcc337026e", 0x6d, 0x66}, {&(0x7f0000000300)="3b18e4b340e27d1b06c86db482ba348f18ca2785fd104f66c28e", 0x1a, 0x1}, {&(0x7f00000019c0)="3132226bd1fc0b355aedc989a79d10c1d2f27500e60acdfa8ee79b86328b2ee9153fe30be45829f1aa6b4aede720abb86320c9ab9ea9c62d7f68c467ba5e472127c0e8e8ea0268fd993bdb8de489458d691ec1864075e196ef29328a83d68c2034566d21d5f67e585edef01e943a1923fb5124c653d1a5ea705752a13ad001b8f74d998945a5b5ad7896d2a37b7122f3339087914c8013e09d87108830c423112c99564650ca0fc0f72bad246034943244c40deeadd6f2eb0bfdac", 0xbb, 0x8}], 0x128001, &(0x7f0000001b00)={[{@utf8='utf8'}], [{@hash='hash'}, {@smackfsdef={'smackfsdef', 0x3d, 'cpuset.memory_migrate\x00'}}, {@dont_measure='dont_measure'}, {@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}, {@audit='audit'}]}) 00:31:40 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./\xffgroup.cpu`', 0x200002, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x40000) write$cgroup_subtree(r0, &(0x7f00000000c0), 0x0) [ 448.739972] FAULT_INJECTION: forcing a failure. [ 448.739972] name failslab, interval 1, probability 0, space 0, times 0 00:31:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="f4b481bb0023e8ce05c49655615fcdc7e1ca779252ec4fa50b21b91e4e19b38e7c99124bad2816b643c28e33ecc436dfca568365c8a4325fb098a42f4733aca1fc990dc8d8768ec5aa805198fbf09b65a85abf2977dfb4bc7903f62e4fcade28cb9c000e1f5ac01d1644b7f61c7290e5699f2203781d8e154fe06a1a0cd298dcc898e6f1a069d59a7ff7d6d50e51ebd5cd59a690120b6e462411afdf7a3f56b94173a13306c9b86a1e2e21f7a4c6cdb95727b506f46f5c9182cfb7d689235258f628700d5ac4420a9f247ea772e44bab73cc6f211999449daf5ad82ee4d5dded12752507479eb40654f872f2acd943ee92dc1bef932d", 0xf6, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x20000004) r3 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") modify_ldt$read_default(0x2, &(0x7f0000000000)=""/41, 0x29) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200), 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x100000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x3}) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)=""/242) [ 448.783615] CPU: 0 PID: 10503 Comm: syz-executor.2 Not tainted 4.14.156-syzkaller #0 [ 448.791589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.800981] Call Trace: [ 448.803588] dump_stack+0x142/0x197 [ 448.807334] should_fail.cold+0x10f/0x159 [ 448.811504] should_failslab+0xdb/0x130 [ 448.815502] __kmalloc_track_caller+0x2ec/0x790 [ 448.820195] ? save_trace+0x290/0x290 [ 448.824009] ? mutex_trylock+0x1c0/0x1c0 [ 448.828077] ? alloc_trial_cpuset+0x23/0x110 [ 448.828094] kmemdup+0x27/0x60 [ 448.828104] alloc_trial_cpuset+0x23/0x110 [ 448.828114] update_flag+0x26/0x420 [ 448.835820] cpuset_write_u64+0x1f4/0x230 [ 448.835834] cgroup_file_write+0x43c/0x700 [ 448.835846] ? __lock_is_held+0xb6/0x140 [ 448.835858] ? init_and_link_css+0x580/0x580 [ 448.835873] ? init_and_link_css+0x580/0x580 [ 448.843734] kernfs_fop_write+0x291/0x450 [ 448.843753] __vfs_write+0x105/0x6b0 [ 448.843764] ? __lock_is_held+0xb6/0x140 [ 448.843773] ? kernfs_fop_open+0xc90/0xc90 00:31:41 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0x0) [ 448.843781] ? kernel_read+0x120/0x120 [ 448.843791] ? __lock_is_held+0xb6/0x140 [ 448.852165] ? check_preemption_disabled+0x3c/0x250 [ 448.852182] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 448.852196] ? rcu_read_lock_sched_held+0x110/0x130 [ 448.852206] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 448.852215] ? __sb_start_write+0x153/0x2f0 [ 448.852226] vfs_write+0x198/0x500 [ 448.852237] SyS_write+0xfd/0x230 [ 448.852247] ? SyS_read+0x230/0x230 [ 448.852255] ? do_syscall_64+0x53/0x640 [ 448.852270] ? SyS_read+0x230/0x230 00:31:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2) [ 448.860718] do_syscall_64+0x1e8/0x640 [ 448.860728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.860746] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 448.860753] RIP: 0033:0x45a649 [ 448.860758] RSP: 002b:00007f6936e64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.860768] RAX: ffffffffffffffda RBX: 00007f6936e64c90 RCX: 000000000045a649 [ 448.860784] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 448.860790] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 448.860795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6936e656d4 [ 448.860800] R13: 00000000004cb18d R14: 00000000004e38f0 R15: 0000000000000005 [ 448.869187] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 448.996397] jfs: Unrecognized mount option "fsname=}securityeth0.@" or missing value [ 449.058310] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 449.095103] jfs: Unrecognized mount option "fsname=}securityeth0.@" or missing value [ 450.790140] Bluetooth: hci0 command 0x1003 tx timeout [ 450.795451] Bluetooth: hci0 sending frame failed (-49) [ 452.870204] Bluetooth: hci0 command 0x1001 tx timeout [ 452.875698] Bluetooth: hci0 sending frame failed (-49) [ 454.950175] Bluetooth: hci0 command 0x1009 tx timeout 00:31:51 executing program 2 (fault-call:2 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000100)={0x4002, 0xfffffff7, 0x3, 0x10000}) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r3 = syz_open_dev$mouse(&(0x7f0000002340)='/dev/input/mouse#\x00', 0x4, 0x80400) openat(r2, &(0x7f0000000140)='./file0\x00', 0x8000, 0xcc) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002380)={0x8}, 0x1) 00:31:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2b308be5910876e822a5b001f40c01cabfdffe34611a9e1b7cb0bb185fd0c134b890fc3c1f8cc011888b16fb0648dd578752bffb5f6ecf9b86846d0ec127f6158a4558"], 0x2) 00:31:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) accept$ax25(r0, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:31:51 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x1ff, 0x1, 0x8, 0xb1b8, 0xc, 0x0, 0x1, 0x1, 0x80, 0x20}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) 00:31:51 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x62fd, 0x40) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffffffffffffe, 0x4}, 0x10) 00:31:51 executing program 4: r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000002100010026bd7000fddbdfc34c88b1bfa96562000900000000000000080006000000010014000100"/60], 0x3c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, 0x0, 0x4000000000dc) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={r5, 0x0, 0x1}) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 459.407374] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 00:31:51 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, 0x0, 0x4000000000dc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000008c0)) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) r5 = fcntl$getown(r4, 0x9) r6 = syz_open_procfs(r5, &(0x7f0000000a40)='nIt/nfsfs\x00') sendfile(r0, r6, 0x0, 0x4000000000dc) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f00000004c0)) ioprio_get$uid(0x3, r7) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r10 = socket$inet_dccp(0x2, 0x6, 0x0) accept(r10, 0x0, &(0x7f0000000440)) openat$cgroup_int(r9, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x3f, 0x0, &(0x7f0000000440), 0x100000, &(0x7f0000000580)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_win95='shortname=win95'}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@fat=@quiet='quiet'}, {@shortname_winnt='shortname=winnt'}, {@shortname_winnt='shortname=winnt'}, {@shortname_winnt='shortname=winnt'}], [{@pcr={'pcr', 0x3d, 0x38}}, {@pcr={'pcr', 0x3d, 0x1a}}]}) write$cgroup_subtree(r11, &(0x7f0000000100)={[{0x2b, 'cpu'}, {0x2d, 'rdma'}]}, 0x4b) [ 459.477087] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 00:31:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x2) 00:31:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2bb418757830"], 0x2) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x50480, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x200100, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x3, 0x7, 0x1, 0xf9, 0x0, 0x20, 0x40001, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0xafab75ea9980b6ee, 0x8, 0x5, 0x0, 0x4, 0x3, 0xffe1}, r0, 0x2, r2, 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x80000, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="0ad73df2f6c249e53e2ecfffe6ae5dc012b564d96f2c171190bd2d6b2c0d721488118f98201fbbdddbed9f566e1f9b75bf0d137ec75546d525e5939fffe9f266081a73fa607eb32bf8f6c68108a426cc67a03877fb6463fbabd39abffc9ebd5a39d75833ca28c6a13a83", 0x6a) 00:31:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, 0x0, 0x4000000000dc) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000140)={0x0, 0xff, 0x8, &(0x7f0000000100)=0x1}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xffffff80) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0x51f, 0x400, 0xffff0001, 0x5, 0xe7, "46f75706ed1fd9addd5a757a7554c71a060de6", 0x5}) 00:31:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0xfffffffffffffed7) [ 459.579630] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 00:31:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x20000041, &(0x7f00000002c0)}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000280)={0x0, {0xdcc, 0x10000}}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000140)=[0xca, 0x7, 0x9, 0x0, 0x101], &(0x7f0000000180)=[0x40, 0x401, 0x400, 0x1ff], 0x10, 0x9, 0x6, &(0x7f00000001c0)=[0x8, 0x9, 0x9, 0xca1b, 0x81, 0x3, 0x2, 0x8, 0x20], &(0x7f0000000200)=[0x4, 0x66, 0x5]}) 00:31:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x78fdb005622fa8d2, '', 0x30}]}, 0x2) 00:31:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) capset(&(0x7f0000000080)={0x19980330, r1}, &(0x7f0000000100)={0x9, 0x400, 0x0, 0x7, 0xffffffe0, 0xf34}) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) r5 = dup3(r3, r4, 0x80000) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x9) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000140)=""/64) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, '\x0f\x9f\xea\x9dq\x99\x9b]\x9b\x12\x95\xb19\x06Zc\xc2\xb2\x16\xacyM\x8e\x02P\xc18\x96\xd9\xd8\x10\x8b\xb7\x06\xa82;\rE\x95\xed\x1cn\xe0G\x8dGa\xf1\x06\x99\x1dT\xf7\xc1i_\x92xy-w2\x9e)\x99\rPay\xe6\x88\x03\xdc@N\xe1\xa1\x96\x91\x9f\x12\xc1X\xdd\xdf1V\x8asq\r\'\x00\xa8#b\xd8\xfa\x97\xc7I\x81\x12<\x90E\x01\xb8\f\xa3a\xb42\xf3F\x1cdK7\xf2\xcd/w.\xdeAU^n\x0e\xfbb\xa8~\xde\x89\xe8\x95 \x83\x7f\xaf\xa8\x1a\x13\x90\x0fc\xb0\x97.\xb9\xee\xd5\x03\xb9\x177=\\I\xc0[\xf1\xd5\x1d:B*o\xcc\x966\xd4\x1cy\xc1S\xd8\x1eL\x1c\x01P\xbd}\xc5\x8d\xab\xf6l\xdb\x99\xbc\xa3\xc5\t\xb6w\xf6\xe9N\xa0\x9a\xc3\xab}\x9f\x9f\xbb\xd5}\x92\xb6`\xf4-\xdci\x7f:\"\xdc\x9b\xdc}g\xc2\xfa\xdf\xa1h\xbd\x03;\xe1\xcc\xb5\xfb\x12\x1ch\xd9\x11\xcd7\xfc\xe7|\xf3\xbf\xde\xe8 \xde6\x00\x1d\x91\xfd\x19\xfa\xb0;\xbd.\x1dr.\xea\xdf\xcf`\x8b\xecw\xd8\xc8\x8c\xfb\xc9\xbd\x17A\xa0X\xc5,\x10\xab\xa86\xfc\xd3\\_g\xee\xafQ\x9b\xf6L'}]}, 0x132) 00:31:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x81, 0x9}) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="cd00"], 0x2) [ 459.681894] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 459.759119] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 459.773941] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 459.814621] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.826676] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.844199] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.859609] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 461.520168] Bluetooth: hci0 command 0x1003 tx timeout [ 461.525539] Bluetooth: hci0 sending frame failed (-49) [ 463.590161] Bluetooth: hci0 command 0x1001 tx timeout [ 463.595705] Bluetooth: hci0 sending frame failed (-49) [ 465.670178] Bluetooth: hci0 command 0x1009 tx timeout 00:32:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) 00:32:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 00:32:01 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x5, 0x2, 0xffffff81, 0x6, 0x10, 0x400}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xfffffffffffffe9c, 0xd, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0xfffffffffffffd94) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x6, 0x8, [0x0, 0x7ff, 0x87c3, 0x425f, 0x8, 0x80, 0x5, 0x0]}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000400)={r3, 0xc6, "ac095ecee42d5876e7d466e25bccf2e742c659eefdbc5ecc19253ab171fd82d9e7f70ce61d028d777ed0c02c6bff53f3c7b3884316fbe49cc84e0a8f4ab9353358ef296b5861a0897e3e05e9eceb87d6a0c0c852fda3d9df879044a5074c2b0b6302d7641dad23709332e7be8ac96785367decaea78ee6aebb45bfb55122a93c3b2babca1cb80dfb04147ec896f94fa5dc7d0b6173463ca5d37baeebef3a7e64fee806df59546854bee28740ee6ce38f9699b08b7d39de7ea365eb3ec695bc48bbd0f4cdbde7"}, &(0x7f0000000500)=0xce) r4 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) chroot(&(0x7f0000000140)='./file0\x00') r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r6, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000068}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x20}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4) 00:32:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x100) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:32:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x12}) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='=proc/thread-self/attr/current\x00', 0x2, 0x0) 00:32:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x7b, '', 0x30}]}, 0x2) 00:32:01 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x400000) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:32:01 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x126041) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2300, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000240)={0x1, 0xfb}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400a645e712a7375bbb7304459e9d72148279421a7498000000000000"], 0x2) 00:32:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56}) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r3) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r4, r5}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'rmd256\x00'}}) keyctl$revoke(0x3, r5) 00:32:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80080, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x1) 00:32:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) 00:32:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f00"], 0x2) [ 471.670299] Bluetooth: hci0 command 0x1003 tx timeout [ 471.675622] Bluetooth: hci0 sending frame failed (-49) [ 473.750369] Bluetooth: hci0 command 0x1001 tx timeout [ 473.755750] Bluetooth: hci0 sending frame failed (-49) [ 475.830199] Bluetooth: hci0 command 0x1009 tx timeout 00:32:11 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) fdatasync(r0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x200800, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x740) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x400000, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42}, 0x0) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000400)) r7 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:32:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:32:11 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x80000) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'CL\xe7\v\xfd\x8cC\x82T\xd83Z\xbe\v\xd72p\xb5\x89Hr~\xa2\xfb\xbaS\xc2\xf1\xb6?Mt\xd0A\xfcMpD\xa7\xde\xcf\xbb\xb2\xf9\x18\x06\xe7\x91Q\xaf\xdb\xecFW.!\xd8\xf6\tIy(\xf4 \xa8\xe1i\xf0B\xe3\nQ|\x03a!\x0e\xb7\xa0\xaawX\x0fM*\xae 3\xe9-d_\xaa\x80V\xbbc\xf7K\xcd\xed\x01\x94\x0f\xf1\xaa\xdc\x10\x90\xb0\x1a\xd0\xa6\xf3\xf3\x03g\xcb\x17\xe3\x1d\b\xadQP\xa9]\xfb\xdc\x92\xa5f\x19\xe4\xd5\xdf\xf1\x12z{i\xb3m>ge\xad\x86\x04\x9b\x98\xc8+\x84x\x81\x8ej\xf1\x88N\x1f*5?\xac\xd6\x8a\x13\xbf\xfeK\xbf{\x03$\x81\xb6\xb1\xa7\xe9d\xc1\x95', 0x30}]}, 0xfffffffffffffd64) 00:32:11 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) 00:32:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x10) r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x70, 0x9, 0x40, 0x9, 0x5, 0x0, 0x1, 0x10000, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x79d, 0xd, @perf_config_ext={0x1e8, 0x8}, 0xa118, 0x5, 0x8, 0x6, 0x1, 0x3ff, 0x8}, r1, 0xd, r2, 0x4a4c499aba96ccd5) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x15, '', 0x30}]}, 0x2) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0xa0000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040)=0x4, 0x4) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = add_key$user(0x0, &(0x7f0000000000)={'syz'}, &(0x7f0000000380), 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) keyctl$chown(0x4, r6, r7, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x800, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}], [{@fsmagic={'fsmagic', 0x3d, 0x64}}, {@dont_hash='dont_hash'}, {@uid_eq={'uid', 0x3d, r5}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_gt={'euid>', 0xee00}}, {@audit='audit'}, {@uid_gt={'uid>', r7}}, {@pcr={'pcr'}}]}) 00:32:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000400)={0x1, 0x1bb1, 0x4, 0xc2a, 0x4}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x7fffffff, 0x1, 0x6e7, 0x2, 0x14, 0x6, 0xfe, 0x2, 0x3, 0xfffff889, 0x4, 0xfffffffb}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x406, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000480)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:32:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000100)={{0x40, 0x1}, {0x7, 0x8}, 0x7, 0x0, 0x6}) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:32:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="da46637919db1efa30a0577c15a93cfb6099ba5cabe64a9f4aeb1dbb5d7b675edcd8290663d008b7c983c8dfdc1ced3b6a4e2a0db06af7a9c2ba4787043c2e290a2aa23d30446d4bcf50afaa8e6b"], 0x2) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, 0x0, 0x4000000000dc) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) sendfile(r3, r4, 0x0, 0xba32) [ 479.874089] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 479.920254] SELinux: security_context_str_to_sid(root) failed for (dev bpf, type bpf) errno=-22 [ 479.936677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10688 comm=syz-executor.3 [ 479.951363] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 00:32:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000040)='\'em1\x15$%eth0@vboxnet1\x00'], &(0x7f0000000280)=[&(0x7f0000000180)='./cgroup.net/syz0\x00', &(0x7f00000001c0)='-vmnet0\x00', &(0x7f0000000200)='./cgroup.net/syz0\x00', &(0x7f0000000240)='\x00']) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 479.967808] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.974039] SELinux: security_context_str_to_sid(root) failed for (dev bpf, type bpf) errno=-22 00:32:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x1) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xfffffffffffffff8, 0x200480) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000180)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x62a, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r8, r10, r12) r13 = getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) fsetxattr$system_posix_acl(r6, &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x1}, [{0x2, 0x2bf3eddb28179e1d, r12}], {0x4, 0x2}, [{0x8, 0x6, r13}, {0x8, 0x0, r14}, {0x8, 0x8, 0xffffffffffffffff}], {}, {0x20, 0xd}}, 0x44, 0x3) r15 = getuid() mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x40800, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x9000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r14}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@hash='hash'}, {@euid_gt={'euid>', r15}}, {@smackfsroot={'smackfsroot'}}, {@smackfsdef={'smackfsdef', 0x3d, './cgroup.cpu\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@dont_hash='dont_hash'}]}}) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\v0'], 0x2) 00:32:12 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) recvmsg$kcm(r2, &(0x7f0000001780)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f0000000540)=""/105, 0x69}, {&(0x7f00000005c0)}], 0x8, &(0x7f0000001740)=""/12, 0xc}, 0x10000) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r3, 0x0, 0x4000000000dc) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000017c0)=ANY=[@ANYBLOB="0000bd000085251737373ec4ec3d259841546e9e688d103d83f3527ef41b0a27dbca871ed0a79a37b49ee97d858b25c0e1096bbc220b96ddf362948d71cd7102489c6f66ce7899ccd93a06873918001784ba0b54a9b3457910ec3b2f47006aafdd6b1f38e94bca013da19b358820c08751c653b43202fbe5ea29e8f85dfd9e13fab2b16e155efcee147ce0de3186842bfd9a968e08bb30"], 0x2) 00:32:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x1, 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x68, r3, 0x10, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000000}, 0x1) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 480.011369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10704 comm=syz-executor.3 00:32:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000100)={0x1, 0x4b6, 0x40, 0x5, 0x8}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000200)={0xfb, 0x3}) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:32:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r3 = shmget(0x0, 0x3000, 0x54001a06, &(0x7f0000006000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYBLOB="3bd40d8e6e49c1798d4e31e41bae0e1295131b327e24b23d5c080b438ef9e6ba1ade4811220c7d8f0c5de60d5b153b0dc408d2b327f06ecea1ae55a9a5ae31b1973163ee629da8d78053c181cb168adacd751e046299cc833ed6f02a000b615799b6cc5beb9e0b721c0c940f684deacc3bc51cae3c4defd9a0f0451ea9ade9750aea0e37e3e8b3bdd695e468f94a52229693a7bea7cd9cf6f7d00ad20a8672ed95ab2da0c2101f24ea04c1507969a34288c3f0d107c6081f132f6edc4feb5b90f4fd9f6e0a58136f6e725210dfc176aed0245e7d8e66488d9f8091272648953ba22fa0f72905d3b6ca674d99208460f346a80f4bde309397b849c4df6a79de538483619eb754df4840003542018e4772cc269a509e1216eb0cc25c2c6c07a0ad10f7587e6efe74d1a01a2c89be4ce79ec32638ab20a2e9aa2e45d023cc7d0fe24279db9fa3ed1f7ecbd1ff619a0ff95c0ebb721c2176dff9d3c93ead8ef9d94cb8d1763555dfa4128cf951de315486b2fcebe5f602d5dca6a8ca7fd88bdddb1e7210284b85c44a23a1a22f7f056519eb0ebc4d7bba2b7dbaf2d4574198b9e0c5ba8ac3c9ff17eacdeaeb874623a30f52018d57befefdc50ba8aa5bf72e94ef822ec9036fee76249940ebe7b013f4225903dfb3605e827d5208815953a5945bd5dac82e8f1d67be395eb5a67ccfa125f1ea9b006c9de965e69042dee3e261e621226b0110f4593ec985048e60a98fcc88523f44c73691cd8e061f25ae165d163ab0c6ef5a777e3bbfd10d1eb747501721b4dc023e6b3ab63f08d17463c5c0e18989cd32b30f422294fd0a2aca833b65dc8b32250b0593d2d4eac8ea8e89e51534301c4ae165e3f06c4805ae595b9c0c6e5fd403f459081c011a973ddfd7180fa19144fd07028065e9038fd7daedc7eb9f2744c34f3cf493ebd1f64cd42d3617b01c72aab0196303fe0eb35623582294ad3bd88e2563cb9a29a3da15885284fba908cee9435c096fe1173dbac44518602b484a7740bddd4fc58a8609905efc692d4312169749124053e8ece9539df7b6f2698186d65db95db5096887b003428ebb9d183bc37dbd0e4feb5193574d85a36ee5133d08d7fd7851f9f3e1dd4c0520c085f2ad4f1f49013b005830046f8c0ce75f0f447ec1bf0bdb4062344400dd8bb95155d32b433ff180a7566a95e725b32731991911e4a3dadadec2ea9443618fea5fecd1dc60e5db13d51f0beb1dd058e25bcb6de8f37bcefc2fa4311a61fb491c66b85272f3ced9bc1c4721fb2bbfb6d2c7caef1ea9eb2a932fd4b2a358fda92d1903e4663d5b735ebdd058e6e42693266c8f8ecc27f85cd6c84c60e41c316e4c7eb10ee40507dd2722f4b847dcd937f795eec4eb1839af18ab971545a22037d33b7096fd040701f067b9060ff677e878e9918dd1c2c7cd32283f2e810c7dbd707c2c4b86ed478647a191afaa5413949048f5d63ac042c8b6fa4749c1ec3c08d238e9832b7efc97b93ce1a4f5d26e5e24a039520cd29c9c09bc5aabd598cb62e6af8e9f61e680f96990e6df04e625cf765552c17015a92581c386394df6ce47d69332a90e6b226d60df6c23942410e9e229a4b4086e2d74e232fbcd2149330b09a84b25e4662f3ba00a4d5c786a781dfef868f6beada90ee28e90abe6bb0d4840a0fa7eff61cc7f289d599e35dfbdd935603f0eeaf90f305d27a85fe2ccf95bc442b670f3b01765a5db76a6bc8128a0ce2182a668ed2209f8be5fd4905fec7ac93c92f5c76b7d22b3a78371020c8dc05e17fec0d3f198f3d2e7b38e33450e2805ea9442a635c6c6dbe67e6286a4a12bf8480b52ae5288712a22b619022f4fbd9d5e323832433024e0f3b40b8eda4c67501cb0294009cec22140467202f13c9ca137b6d09c1e12ef84f6a6ad49cd4fbdcb683664fc1a443502d21897e34674e06c8e90153f2d23f910d257de87d39a3d2ce9d13b810be4746754c04a6f9945d16fd4d7f3d3516f68753b62ff3dae561b6a18ecc9e7a4710a7b033f925c55f6326e54cc943afd9e2ab638f925930c6f3579d9b90c62a23ba65dea88ede2976ea83822321c6ed0d522067d32947cb225dbb78fb09e636e7f1494490d9007b8cb44068674f49936c6de253fe05b004f16be41932bb09fb2961051885a26caffb6bbd961fc65fd2e64f6b0a33f9a725ad93494947860699f929c8e2847637eb812eeaaa956f058b630af931fdbfef6db6746528b231e506bf349d07709f9adaf121fa3c0b3ad2e470abe29da46556879dab48532c4889363eb4517c42427bac78abf3af8b4bd5244a18cd79482c3ecf6da04296164cbd681f6daf3571c19cac4db6c75166dfdba7da29db048f8b51ddef76971a827e3c56fee7925cfe7389809113dcbf8b74eaf679ddb9b62e3437982246c87c1153ca9e4221fee3c72461b615346c8ac83c87785109c86ca0d1d12f38051d1ddd63a8a9b44b855014b54deb0be2e8402b5940492aa1f1fe2a685fb80d5ca3c6f7d32a24345a96cb6ebc6170d97565e3c112b116b32beaeaa27900688d8eb1b1870e65f0d5fc11d580221676cb69d774a046b108105377805ce04e5a659e10f2c50bedd7abf286ef3f46b5de2553082e480ea89ce8ea7f053e90b063b6f7137a181869fc63adda5dd687a9b76a1df9e19746bbd5929c72b9626abcc5bf28208464b630fdbb5ccae8dad84f23bb478635c99970e07a6d6cea763abf4162b2b892540ad06883fc4def7bafaa7597a99a02879c302d85f736fcb7d3005e7c6dda5025db468f39da0aeb3fac68aed6391fa18d7556acddd33f2451af919b69e80309ae704d35bf977f046147db657c4ef25a8d0a98bfa04b9f3b801880234cb294671cb9c39769d26235e7503dbf1b3441e0803b82f406dfce165db7ed386431130184874ce4d1290a837980a277530110d4d35deb73430663e4fed7fd48c486d2d27e867da8f969a818596d6bcb1ea60688321e9f5a459e5684e4ff4bb74a097c3ae95209d1fdfdf2f4b7ab30bbcf649d334067eb503bceb80e478dbd574ab3673177ade0b50f5b8ef73faa564de4a9d2c5f36a3193f8b49eb898ba46059820603867aea030250764ed7a1105a0636cfec3cd36ff41047699f244c2374810effcc65b10c27ed1d773794f338f78fa701d55abfb0f90a8074353076e6bd65f28df25fe3aed761a7d08b0f5fe5bdf42214979d97a28176f9a9bfe9fc315baec036984d8c96197a732a89daf09a9114719622febf7b03d651388806a1ee85005d3b053445ad9c52605b3853acf7df27cc0bbdb3e1bff9deea985ab654abfda8c602eee488bf7afbec856889a4cb2f93bacc70e2bcecfa84afb57c270b9257917b27cfe6b5c42c3b4dc69b5315660253cbffd3d5daa78bcfde8e8a57db803be4a81262431b668c15c5da448306df478b12228077838b5f10876ebebe77df4bbec059ca7c1e141dd968fa3ddff5e986b68a05eb847104b991aa41ca37e3a74cca786e706dc372352fedec47079fe89a1661ac1940d06f6551b5490d5d40bf94ea12af4821bdcf8caed62e02e2b5692271dd56ea8cf6f2b57d377578eeba53fbe920ab3ad74a9d2bc13ad7a07ae4a38bd547615f11108e6e78ede2f5070bf58258f117987fb3286fa07700ec83cd2cdce9925853dd89b07a7a8653a1534dc5ad7ea7fda6a5b7b41bf256dadf6f330a02c298ebabbf8d13b97fb4e03d6a12a700fbbc013e3b7ff56398aad213f22ae7830ad6992fd39ee5049a372f2c77d1e9ed4564fb181c49a8f59e5f87c5236103f66bf6b6609722d29abc7c042a3102db6c8ff9404a69df5d1bf5aa09f355953390361e28ddeb6513b877bfd0488cd4b05e274d4db480a40e249871d98d45ebee6442134ba277ec7975f21a6ed1c0e3745d454cd5c4941fdcbf5b09a4bc0702a59ede873e0e7ec4d70e17f7c2b78d8716c3a478e1dd6477f9f506f4864d19fe155a32b80de80d463fae722bdafced9d582599d513c6101d387c8bef2476e93f0285295ac7725830ac32ef14ac31636a8b91ce7785b7378b6011214a116301380bbad0933f9a3d48392b159b15c3dba08fb9c3f930393755a78e2ca93eba2e04a4bb7192de00feb783ccb5d033d9b5e0b0e7e145dcce75803b3865f67083d86fb110ba5121aff9db4287df36ba3d19ce5eabbc6ee49ae8569dcd8741e48ecefc326e265c69230656dae2cbab2730fee7ecc50b5dee0e93b0924f063d5a235ef2d603292621238e2830de0226fb3169c626d20c54758fbddd788e3bcd5ef1d8a02a007068cd4d47207eec47c9c86334e74e635f3852ba2c93e2b1761134a2ac770dcc4da963654e69308b9f48bebd30c04adfd2a0297bac807c6e9b5e72e19bd5386f8646ef54977f838931d4fd81b6a9d4ed97d9a2e82f27bc5a091e168fe7cd8cfd6e246111ae2941dd4997c2ff1d5534f4db7ccd16e4da73fb66ed3c90a77e2c65012458424ac6c3207b0e9f45c52487fcac892a5eb326272343b5bdb7a7e1bc9a7a3999b95725fbb6beb998c4d09e1d2fb8b7f7c766aef734ddba16297124d02143a819a428fc101c82687f4ea075fc2d2b289aa5a2fbb9728c9ebe195be56af79ba58dc1ad78b42c873669d2f447e01c67253f3e6c371dce3e8aec1f926cbc92c8c3b50db18f78340a3ff78ff4b30cbaf9b0b2362ca53b749750bd1df86877848187153e20404c5970475ac1765dd5341a9b5de4095d8ec9fc79d503a91e248df21e42a06825f56f890a3033c510337dbc5c0a8474733edf93d69105845b47b375d5e721ad0636d352cbd6a416fd9030754f01c589a81e47d2cfe4dcfe33af66ade964da5d2488e52640e92a2e00a4c53a14ea685f82424f0f9f858885c8a9b05674fb838e60591638efe6202132728b11fff1d045b8361d00cf1c99fddc59edc2f751340fa0da0cd0f37df1ca01dd931a74e150f9cf8a3cc6c022ae5344306ebf0928995c25c76e43c07774fa0ccd4c3d77730242e9b11a22f7b94141a5589a6e89d4391aafbefd05f8c705edf1187800ad5d9d644e5d0076efcdc58c2622331663d3b88c0787071fbe80bb04e52d83e26f96a8eeb2905296cb6ab9b34d60ff5b3cbeec0c3a3c91f0f7aa3ecacff131e268ad007ee0b4313ce7fb08d3ef10a3e58aa951a4f35f85a85b3ac5ecd2bfa6ebc79014b490b8ade5876d831c24cadedad8b4502fba33be8f918d149c49128207d764115ada92244499228500666f2b0b2a6981e8e30b74240d213c3159b64089f95d2baa4bbb63344f7fcdedad30e1b072119ffa869680b4c3cf3aee31d13469900e360f829b40f90d832570f666deb872b62b16bdef054b6506e8d2da41ddf8ea68dcbf83490a2300771f56b7a64885d631cb283d9f70d3babc8adf5fd5105165503be711e49cb71b223929be125b201a518699746bdf68f63d6e3b89544d5bb10876b4467914a5ded8dca16fddc92970314421a2df1788ff9d5f00946ac8249a7a2b232a087a1bdc163caa8662b9f497755e8ff715bf703377f0bbdfaa0a5398c0d6f7e067f7d66579322d6357402e0105b05500e928f43f48e4e0f258e57938bdbeadbd832f3764953633c1d605a14a78cc3750491b2f74cce79533e32c8716aeddf527c29f4ab512a598790c2b15711a0a32e11e0d2e0af495cb7edea531b1389a4719ce684f999fcd6d9e987e1dce6a6c5a9868c280e337b12514bca0f3a2db16ad590dffa4d1ee8bb17b8b9852f36df73c199a82fa0a219951c943b74777a776845f5ba03fef54b966384c9807a39a60", @ANYBLOB="b48f350ded3a07522dcf016a4b5523b131a08ba491b36bf81456834a659c", @ANYRES32=r1, @ANYRESDEC, @ANYRES16=0x0], @ANYRESDEC=r3, @ANYRES16=0x0], 0x80) 00:32:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000400)={0xfffffff8, 0x2, 0x4, 0xab, &(0x7f00000001c0)=""/171, 0xb6, &(0x7f0000000280)=""/182, 0x82, &(0x7f0000000340)=""/130}) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, 0x0, 0x4000000000dc) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xb7, 0x4, 0x5, "cac10853cef1bc101d2dadcd514d0aa2", "9345c324207b06ab46484aba542bed1b97da91df73309d6ab6a6f23009cda5c9ffe4b7b5fe9a7ac5b68ec549e14954b2b91c43db235a079acdff6af24ca0984cec7142768881eb22d2f5c0eab3f3fbe596eb61a14b3381731127717dc1ff05f0961e1a572db96e1702be2073e94b80db8cffa61272ab2770d4c9585ab788514d654008b785c2dce21647684271511fff9a66b2b0d9baa725fe52eee2eac8f01d4026"}, 0xb7, 0x2) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="483d00002b591527eb6d94d17cf7850230"], 0x2) [ 480.114185] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 481.910269] Bluetooth: hci0 command 0x1003 tx timeout [ 481.915572] Bluetooth: hci0 sending frame failed (-49) [ 483.990224] Bluetooth: hci0 command 0x1001 tx timeout [ 483.995562] Bluetooth: hci0 sending frame failed (-49) [ 486.070301] Bluetooth: hci0 command 0x1009 tx timeout 00:32:22 executing program 2: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:32:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, '', 0x30}]}, 0x2) 00:32:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='cpuset.memory_mig|\x89/.s\x85~=q\xe5\x9e\\\x86N\xc3rate\x00\xa6\x9a\x18h\x015v,\xac\xd4CO\a\x9f\xd3\x84F\xaf\xb8+\x1f\xe2\xa9\xa8\x1d\xaey\xaa&', 0x2, 0x0) syz_emit_ethernet(0x2fc, &(0x7f00000006c0)={@local, @dev={[], 0x19}, [{[], {0x8100, 0x4, 0x0, 0x2}}], {@ipv6={0x86dd, {0x9, 0x6, "93ff0c", 0x2c2, 0x30, 0x0, @local, @empty, {[@dstopts={0x2f, 0x2, [], [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x6}]}], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xe4, 0x2, [0x1], "594b257514b4f9fc79def1f1eaf9fd6a08dbaaf2005e8f1c74feb01302bd1e962a9a2f6c20e99bd586e16da1846088ee5a1cc9c5fabb47dd95c181997a62458c58f2e2c4692d6868d4e499fa0a9e8cfb807f807985e66921139f90169fcad9353d6c0cb411b6e27e38faa0ae87614aa80e544776ef40b7cfe80ba19e39afc94c2bb89ae766754b523d9a9ba976cfc64b04a48f95793bde8ee4a277a40758b60866f03710d83183118b23405d90d791be47fd2d4b112c745319358eb8b62a64976d6872fc2adac0506492ca720f5600531dd05615c6731b757176aec203b4d400d6ef02ca"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9], "3452ffcbd09be15aeae24183de6c9120da923b7b893366bf6f1464a84352cdce139fb0a0ad4113bc9fc49cab6f9fd6117ce5d5f58d506fb288fb2adb0f8468929d5da8e225fa90ca4f39c22c502130f2a8c1ff9a80674d6c7d22c351a733fbae49dd42ccd2ae78b66fcbb7aec0890b9094e44ef7ed5d1a0ad624d4f0097a9df8fcbc07b039ea684619d026031470fdb29347d4a8da0e629ed3bdac5ea79ca6748019ba6ba40083336f20d3ac34e5456962ce4d9f2b6c6e28d2e426b09f7ecd82f5a30dbe202e77f7a38cb98d61"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x1, 0x7, 0x5], "01b4dbbc458aa7b310754a724d2991baa0dc60c06be9a408ee180feb6ef978084f9071eb0b6ec7"}, {0x8, 0x88be, 0x3, {{0xe, 0x1, 0x1f, 0x0, 0x0, 0x3, 0x4, 0x4}, 0x1, 0x6}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x20, 0x1, 0x1, 0x3, 0x5, 0x7f}, 0x2, 0x7f, 0x4, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}}, {0x8, 0x6558, 0x2, "803f6e8bb74666258004adf4073dce4784d580019827d468d97adce49b092ed8796e307c0557662e82bf6d93cd705d49d17913cccaf248e706cdd14110f2360809167408e07eb93e767d88d91adde858ca7859e315fc930da4478623a3d03a1cdee039f198fca8eb051b632117e34d923ede4928166f0535ccb68156"}}}}}}}, &(0x7f0000000000)={0x0, 0x2, [0xc89, 0xc7e, 0x1ae, 0x342]}) write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="2b1deb89e9772295cf1bc249a4e59a238747391a0f0700248c50d584814a9729e7451ba14604a17a8c2fbdfdcb8046a2d21d48c32bca1cb1578af4dedbefcf65a2f52e21f968426326892f5e566bce40db8e11"], 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000080)={0x3, 0x1, r3, 0x0, r4, 0x0, 0xff, 0x101}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x3cae362309e8c6e5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffffffb, 0x5a, 0x9}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r6, @in={{0x2, 0x4e23, @rand_addr=0x9}}, 0x8000, 0x1dfc}, &(0x7f00000002c0)=0x90) prctl$PR_GET_CHILD_SUBREAPER(0x25) 00:32:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="28da6cf7caef1526d1ad9d17381195461a3a31d049311b7a9f58e60a9d2b7786641aa0b8285bae758c091df51a3e6168c1d36f9205e20bf3b05dd0dee42f55308e34e027d7a512fedd878544eb6adc5754b5aac14ca757876c0c26b1256497ecbc53db377b7d1d3faea81a07a03c91181147eca1cd523b4f33a6ede423f45971eab922c6f146d4e0a63368ce247b8cc23fcac9fcc03775e752e970407d2dab773c73a96616678f0f56fe2ac4157c03463399a0581bca903ddd87baade3f115f182d6a1b2ce2becc4afc49f40357c5b6dbaf0bea3205c23"], 0x2) 00:32:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r3 = gettid() ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000140)=0x7fff) sched_setparam(r3, &(0x7f0000000000)=0xffff) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2be7a822a577ed4dadc8d4080080ca6530"], 0x2) 00:32:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, 0x0, 0x4000000000dc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x62a, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r6, r8, r10) r11 = getegid() getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) fsetxattr$system_posix_acl(r4, &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x1}, [{0x2, 0x2bf3eddb28179e1d, r10}], {0x4, 0x2}, [{0x8, 0x6, r11}, {0x8, 0x0, r12}, {0x8, 0x8, 0xffffffffffffffff}], {}, {0x20, 0xd}}, 0x44, 0x3) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="b000000000000000060000000000000001000000000000000300000000000000060000000000000000000000000000000300000002000000010000000000000001000000000000ff0000000000000000080000000000004000000000000000e9a300000000000000000000080000000100000000008004ff070000", @ANYRES32=r3, @ANYRES32=r11, @ANYBLOB="0600000009000000000000000400000000000000ff7f00000000000001000000008000002f00000000000000"], 0xb0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 00:32:22 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x0, 0x3, 'veth0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000000)={@reserved}) 00:32:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0x8) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8602"], 0x2) 00:32:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, 0x0, 0x4000000000dc) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, 0x0, 0x4000000000dc) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000089d5bb5c55e8fead16a02fbc11a1deecdbc3e704772732c2004f24cf0a1bb3ebefd3b680005ed5a83d1cb03edd999cc92e6863da01dc8e000000006eaf06d8df579c5f4bbdad00474e81256b0a2f777571857f6a38ae9f7df879341096701cf91ad9bbcf126a"], 0x2) 00:32:22 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgr\xed\x81p.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) 00:32:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x80) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) readahead(r1, 0x43, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10100c04}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1dc, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2ec}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb0}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xca}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x35}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x9}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fffffff, @empty, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}]}, @TIPC_NLA_NET={0xfffffffffffffffc, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xda22}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, 0x0, 0x4000000000dc) sendmsg$inet_sctp(r6, &(0x7f0000000680)={&(0x7f0000000600)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000740)="5d38fb32277d0f8c70a733f8a800e5c9ecf619a00b6d0990d36b0c8e7fa6f6d1a0951d57c73287315d705a7041f061c845e51824e4a4a85db8c4100014939468c7a4026f4c456717005baaf6d18bc6f9c83964964f20a81152022bb4e141c7a1ead4688c9ce6eadedb9b2ca5f03fbc0f34b38a0b08735c82c05b4eff37547dffe3f446663b4fa2b403c6ad81d5d3da0ab7a09fe932dbf26bf433bafe1ea5b4a4a2d29e01f6415b3b7d44ff8aef51e97da330d6d0c610e899301c56a292b1f9d036c79dfe143276b696151e6beee24db6e55862a1ee30de1c7566c0aaeb6d57c277f11c2b811a496745c4964ed20a9b45a3d4c0", 0xf3}], 0x1, 0xfffffffffffffffd, 0x0, 0x4000001}, 0x20000045) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x7ff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x8, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0xc, 0x1, 0x6}, &(0x7f00000001c0)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0xc0000}}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 490.214031] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 00:32:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x180800) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000100)=""/36, &(0x7f0000000140)=0x24) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000240)={0x1}) sched_setattr(r2, &(0x7f0000000240)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffee3}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1}, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r6, &(0x7f00000003c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958", 0x47) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r6, 0x0) sendfile(r6, r6, &(0x7f0000000200), 0xff8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) r7 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000180)='Z\x00') semctl$IPC_RMID(0x0, 0x0, 0x0) r8 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="c0b10eb0d03df700416c3752fb7660129dc40c5979b250d5ec16d697cbe8f9a380cbecd519bc9efcbc94a6807cf73ef6bd4811156ff7a2bfb35506b3256d95af93f0b9eccabc284013844d51048590e5b0743bb88ac3675a7635e29f"], 0x2) 00:32:22 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe2, 0xcc, &(0x7f00000000c0)="c7c4752eb52796561c664e4c3f039858914e127e3b6135388c5edc18622874f3db4836f61aecf2527a7f6d701f8bd4123c7822a5f8b1b4c1f87eea4c48241ed5f297f1d34c9e21baefe1fa8923a35952d88a0e1222b3d5f4ec99b6101835ccfb688042ca028b180343e54ffd722c9c1022abc73eacb515f77f3c43883a3149f8512a3825e8ad83ac12671122855204b38a97a789406cfa7d4ebc6b95344dff3b8bec20c44a65add4717618f26df3cb930dedea52c19d0a4af66c05c4be826eb67f9bf4261d0ea9649fd3515bf8960083c5d99b5fb81ba4c10ebd17608694637a5231", &(0x7f00000001c0)=""/204, 0x5, 0x0, 0xf5, 0x7d, &(0x7f00000002c0)="715746f1107b2aad5e92ab16a9e31212a04dfeb897b68abddf5426c45dd8545f037b0578fe93a2cf3b57978033e50cb89181271c2c7d220a1d161da694be51d9f450d344e2209bb2415e0236a59535d761bad4d9719494bf910c9125f7ce8ebbccedbc4f2a461db837f01a3f0234335c418a6104abef9f51714393f7a94d8bfc79693d765bade1a0ef56885e60ebb67886ffc6223709023aefd612ae5b37327acea73b519b3cef5c0d4538bc453518401c025b827af30c793258c2e9e6440a74c47aa387a846bbe449a97a41a34ce0a8d84d7897a5a07a4a51265858dd109620fe8235d241ed6b06851675a94ab5fa01b7cf4f4faa", &(0x7f0000000500)="49af9a36064de0e4a8755123e2682d4b88231a37d394ec576322314d4f7d7e34b695efb1739b9ed747f7582a4b3e94917b56c50784dc1fc6a077e38b9b55ac9d4d4efc950f50ac6dd74d2a0b9aa885160f979d818beaaf00d1a5881686ebcaaf97afae1306efcb27ccb2afae448b6b7f399ef79edc8b33e1cc07cf8413"}, 0x40) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000100)=""/230) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) [ 490.298342] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 490.325561] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 00:32:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="e42900"], 0x2) unshare(0x4030600) 00:32:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0bff30"], 0x2) [ 490.363959] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 00:32:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) bind(r4, &(0x7f00000001c0)=@hci={0x1f, 0x0, 0x1}, 0x80) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_delrule={0x3c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x14, 0xff, 0x5, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}, @FRA_DST={0x14, 0x1, @empty}]}, 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, '', 0x30}]}, 0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x8, [0xdd, 0x0, 0x4, 0x9, 0x7f, 0x2, 0x8, 0x40]}, &(0x7f0000000100)=0x14) 00:32:22 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgr\x02up.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ba790fa3352b309cd96de1f723946d10598dd992d15c6f7e3929e9dff75b47477a733304c1b490601b2556eb13fdef63641952aaba896da7ff3835f3ae8512fe458528c2fcc692b47e16bf0667c415f55e38b611d0ca047622b16579e33d9264d49391b12e76ec55a4057e9df9c1f597678714cb3e975f49db0cca93d7f4f7c318a4eb0b30cc2f42c1afdc07fc862c23f8ec0cf468351b1f8296"], 0x2) [ 490.469694] audit: type=1400 audit(1574901142.576:51): avc: denied { map } for pid=10791 comm="syz-executor.3" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=40579 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 490.529728] Bluetooth: Error in BCSP hdr checksum [ 490.677885] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 490.714839] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 490.733409] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 490.768652] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 490.780350] Bluetooth: Error in BCSP hdr checksum [ 492.310139] Bluetooth: hci0 command 0x1003 tx timeout [ 492.316441] Bluetooth: hci0 sending frame failed (-49) [ 494.390309] Bluetooth: hci0 command 0x1001 tx timeout [ 494.395618] Bluetooth: hci0 sending frame failed (-49) [ 496.470165] Bluetooth: hci0 command 0x1009 tx timeout [ 500.312150] ================================================================== [ 500.320362] BUG: KASAN: use-after-free in kfree_skb+0x2e9/0x340 [ 500.326865] Read of size 4 at addr ffff88808f7949a4 by task syz-executor.0/10764 [ 500.334522] [ 500.336180] CPU: 0 PID: 10764 Comm: syz-executor.0 Not tainted 4.14.156-syzkaller #0 [ 500.344139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.353703] Call Trace: [ 500.356301] dump_stack+0x142/0x197 [ 500.359956] ? kfree_skb+0x2e9/0x340 [ 500.363672] print_address_description.cold+0x7c/0x1dc [ 500.369216] ? kfree_skb+0x2e9/0x340 [ 500.372952] kasan_report.cold+0xa9/0x2af [ 500.377276] __asan_report_load4_noabort+0x14/0x20 [ 500.382420] kfree_skb+0x2e9/0x340 [ 500.386093] bcsp_close+0xc7/0x130 [ 500.389744] hci_uart_tty_close+0x1cb/0x230 [ 500.394155] ? hci_uart_close+0x50/0x50 [ 500.398250] tty_ldisc_close.isra.0+0x99/0xd0 [ 500.403058] tty_ldisc_kill+0x4b/0xc0 [ 500.406852] tty_ldisc_release+0xb6/0x230 [ 500.411019] tty_release_struct+0x1b/0x50 [ 500.415170] tty_release+0xaa3/0xd60 [ 500.418880] ? put_tty_driver+0x20/0x20 [ 500.422876] __fput+0x275/0x7a0 [ 500.426324] ____fput+0x16/0x20 [ 500.429752] task_work_run+0x114/0x190 [ 500.433653] exit_to_usermode_loop+0x1da/0x220 [ 500.438244] do_syscall_64+0x4bc/0x640 [ 500.442417] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 500.447645] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 500.452836] RIP: 0033:0x4141e1 [ 500.456100] RSP: 002b:00007ffd66ca9f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 500.463893] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004141e1 [ 500.471222] RDX: 0000001b32320000 RSI: 00000000000010e2 RDI: 0000000000000003 [ 500.478504] RBP: 0000000000000001 R08: 00000000f0c5d0e2 R09: 00000000f0c5d0e6 [ 500.486300] R10: 00007ffd66caa000 R11: 0000000000000293 R12: 000000000075c9a0 [ 500.494244] R13: 000000000075c9a0 R14: 00000000007611d0 R15: 000000000075bfd4 [ 500.501774] [ 500.503399] Allocated by task 5: [ 500.506939] save_stack_trace+0x16/0x20 [ 500.511044] save_stack+0x45/0xd0 [ 500.514586] kasan_kmalloc+0xce/0xf0 [ 500.518478] kasan_slab_alloc+0xf/0x20 [ 500.522416] kmem_cache_alloc_node+0x144/0x780 [ 500.526988] __alloc_skb+0x9c/0x500 [ 500.530618] bcsp_recv+0x38a/0x1450 [ 500.534242] hci_uart_tty_receive+0x1f4/0x4d0 [ 500.538728] tty_ldisc_receive_buf+0x14d/0x1a0 [ 500.543591] tty_port_default_receive_buf+0x73/0xa0 [ 500.548636] flush_to_ldisc+0x1ec/0x400 [ 500.552697] process_one_work+0x863/0x1600 [ 500.557380] worker_thread+0x5d9/0x1050 [ 500.561579] kthread+0x319/0x430 [ 500.566165] ret_from_fork+0x24/0x30 [ 500.570000] [ 500.571729] Freed by task 5: [ 500.575134] save_stack_trace+0x16/0x20 [ 500.579353] save_stack+0x45/0xd0 [ 500.582840] kasan_slab_free+0x75/0xc0 [ 500.586766] kmem_cache_free+0x83/0x2b0 [ 500.590761] kfree_skbmem+0xac/0x120 [ 500.594469] kfree_skb+0xbd/0x340 [ 500.598031] bcsp_recv+0x28c/0x1450 [ 500.601662] hci_uart_tty_receive+0x1f4/0x4d0 [ 500.606151] tty_ldisc_receive_buf+0x14d/0x1a0 [ 500.610732] tty_port_default_receive_buf+0x73/0xa0 [ 500.615758] flush_to_ldisc+0x1ec/0x400 [ 500.619724] process_one_work+0x863/0x1600 [ 500.624120] worker_thread+0x5d9/0x1050 [ 500.628083] kthread+0x319/0x430 [ 500.631455] ret_from_fork+0x24/0x30 [ 500.635311] [ 500.636930] The buggy address belongs to the object at ffff88808f7948c0 [ 500.636930] which belongs to the cache skbuff_head_cache of size 232 [ 500.650429] The buggy address is located 228 bytes inside of [ 500.650429] 232-byte region [ffff88808f7948c0, ffff88808f7949a8) [ 500.662365] The buggy address belongs to the page: [ 500.667344] page:ffffea00023de500 count:1 mapcount:0 mapping:ffff88808f794000 index:0xffff88808f794280 [ 500.677071] flags: 0x1fffc0000000100(slab) [ 500.681592] raw: 01fffc0000000100 ffff88808f794000 ffff88808f794280 0000000100000005 [ 500.689675] raw: ffffea000249bca0 ffffea000253fb60 ffff88821b75f3c0 0000000000000000 [ 500.697594] page dumped because: kasan: bad access detected [ 500.703562] [ 500.705205] Memory state around the buggy address: [ 500.710252] ffff88808f794880: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 500.717620] ffff88808f794900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 500.725167] >ffff88808f794980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 500.732642] ^ [ 500.737056] ffff88808f794a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 500.744415] ffff88808f794a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 500.751942] ================================================================== [ 500.759588] Disabling lock debugging due to kernel taint [ 500.765381] Kernel panic - not syncing: panic_on_warn set ... [ 500.765381] [ 500.772966] CPU: 0 PID: 10764 Comm: syz-executor.0 Tainted: G B 4.14.156-syzkaller #0 [ 500.782127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.791576] Call Trace: [ 500.794173] dump_stack+0x142/0x197 [ 500.797831] ? kfree_skb+0x2e9/0x340 [ 500.801594] panic+0x1f9/0x42d [ 500.804962] ? add_taint.cold+0x16/0x16 [ 500.808933] ? ___preempt_schedule+0x16/0x18 [ 500.813431] kasan_end_report+0x47/0x4f [ 500.817404] kasan_report.cold+0x130/0x2af [ 500.821632] __asan_report_load4_noabort+0x14/0x20 [ 500.826963] kfree_skb+0x2e9/0x340 [ 500.830503] bcsp_close+0xc7/0x130 [ 500.834043] hci_uart_tty_close+0x1cb/0x230 [ 500.838417] ? hci_uart_close+0x50/0x50 [ 500.842398] tty_ldisc_close.isra.0+0x99/0xd0 [ 500.846995] tty_ldisc_kill+0x4b/0xc0 [ 500.850878] tty_ldisc_release+0xb6/0x230 [ 500.855109] tty_release_struct+0x1b/0x50 [ 500.859411] tty_release+0xaa3/0xd60 [ 500.863125] ? put_tty_driver+0x20/0x20 [ 500.867091] __fput+0x275/0x7a0 [ 500.870371] ____fput+0x16/0x20 [ 500.873654] task_work_run+0x114/0x190 [ 500.877655] exit_to_usermode_loop+0x1da/0x220 [ 500.882447] do_syscall_64+0x4bc/0x640 [ 500.886408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 500.891254] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 500.896602] RIP: 0033:0x4141e1 [ 500.899836] RSP: 002b:00007ffd66ca9f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 500.907535] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004141e1 [ 500.914798] RDX: 0000001b32320000 RSI: 00000000000010e2 RDI: 0000000000000003 [ 500.922284] RBP: 0000000000000001 R08: 00000000f0c5d0e2 R09: 00000000f0c5d0e6 [ 500.929667] R10: 00007ffd66caa000 R11: 0000000000000293 R12: 000000000075c9a0 [ 500.937056] R13: 000000000075c9a0 R14: 00000000007611d0 R15: 000000000075bfd4 [ 500.946239] Kernel Offset: disabled [ 500.950094] Rebooting in 86400 seconds..