[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 29.314325] kauditd_printk_skb: 7 callbacks suppressed [ 29.314337] audit: type=1800 audit(1543770115.156:29): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 29.349297] audit: type=1800 audit(1543770115.156:30): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.50' (ECDSA) to the list of known hosts. 2018/12/02 17:02:06 fuzzer started 2018/12/02 17:02:09 dialing manager at 10.128.0.26:33637 2018/12/02 17:02:09 syscalls: 1 2018/12/02 17:02:09 code coverage: enabled 2018/12/02 17:02:09 comparison tracing: enabled 2018/12/02 17:02:09 setuid sandbox: enabled 2018/12/02 17:02:09 namespace sandbox: enabled 2018/12/02 17:02:09 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/02 17:02:09 fault injection: enabled 2018/12/02 17:02:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/02 17:02:09 net packet injection: enabled 2018/12/02 17:02:09 net device setup: enabled 17:05:29 executing program 0: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000008c0)=0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="74756e6c3000000000000000e4a100", 0x10) write(r0, &(0x7f0000000ec0)="89", 0x1) sendto$inet(r0, &(0x7f00000003c0), 0xa00, 0x0, 0x0, 0x0) syzkaller login: [ 243.722367] IPVS: ftp: loaded support on port[0] = 21 17:05:29 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@alg, &(0x7f0000000340)=0x80, 0x80800) sendmsg$rds(r0, &(0x7f00000007c0)={&(0x7f0000000380)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/21, 0x15}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000940)=""/220, 0xdc}, {&(0x7f0000000740)=""/108, 0x6c}, {&(0x7f0000000a40)=""/249, 0xf9}], 0x9, 0x0, 0x0, 0x8000}, 0x20008000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000008c0)={0x0, {}, {}, {0x2, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='bridge_slave_1\x00'}) r2 = socket$inet6(0xa, 0x3, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") [ 244.012587] IPVS: ftp: loaded support on port[0] = 21 17:05:30 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) close(r0) [ 244.329132] IPVS: ftp: loaded support on port[0] = 21 17:05:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, 0x0) [ 244.880820] IPVS: ftp: loaded support on port[0] = 21 17:05:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 245.389398] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.420319] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.427872] device bridge_slave_0 entered promiscuous mode [ 245.454042] IPVS: ftp: loaded support on port[0] = 21 [ 245.586918] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.600556] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.614682] device bridge_slave_1 entered promiscuous mode [ 245.748364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 245.916927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 245.996700] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.014982] bridge0: port 1(bridge_slave_0) entered disabled state 17:05:31 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 246.037001] device bridge_slave_0 entered promiscuous mode [ 246.213324] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.249852] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.251560] IPVS: ftp: loaded support on port[0] = 21 [ 246.282704] device bridge_slave_1 entered promiscuous mode [ 246.318069] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.341982] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.348431] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.371000] device bridge_slave_0 entered promiscuous mode [ 246.438823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.460152] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.529210] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.554179] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.571722] device bridge_slave_1 entered promiscuous mode [ 246.592296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 246.751462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.894051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 247.047612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.068143] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.090447] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.097853] device bridge_slave_0 entered promiscuous mode [ 247.114156] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 247.130431] team0: Port device team_slave_0 added [ 247.226831] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 247.240727] team0: Port device team_slave_1 added [ 247.248221] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.269898] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.293959] device bridge_slave_1 entered promiscuous mode [ 247.303212] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.317490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.392769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.440688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 247.513350] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.531760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 247.581853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.653691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 247.667700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.685379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.843099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.853164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.875613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.902941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 247.910299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.959496] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.969967] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.977387] device bridge_slave_0 entered promiscuous mode [ 247.987269] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 247.996721] team0: Port device team_slave_0 added [ 248.018980] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 248.102041] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.112268] team0: Port device team_slave_1 added [ 248.120167] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.126604] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.144189] device bridge_slave_1 entered promiscuous mode [ 248.224076] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 248.236511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 248.254953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.280533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.301087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.314529] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.335484] team0: Port device team_slave_0 added [ 248.352970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 248.376030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 248.397602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.440726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.478815] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.486705] team0: Port device team_slave_1 added [ 248.584776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 248.600698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.611041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.640523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.656126] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.680059] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.687542] device bridge_slave_0 entered promiscuous mode [ 248.728402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 248.737287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.760445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.811893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 248.820513] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.826910] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.843535] device bridge_slave_1 entered promiscuous mode [ 248.850824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.862176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.875639] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 248.911278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 248.982066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 248.989284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.000695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.036790] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.078937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.089315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 249.109857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.130432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.142996] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 249.151054] team0: Port device team_slave_0 added [ 249.220253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 249.227948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.280819] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 249.288398] team0: Port device team_slave_1 added [ 249.371574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 249.378913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.456635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.536587] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.543164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.550360] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.556789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.573870] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 249.597110] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 249.625127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.761460] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.771724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 249.779564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.788440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.812146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.831762] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 249.851220] team0: Port device team_slave_0 added [ 249.889503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 249.909798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.944745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.970703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.988707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.016677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 250.040624] team0: Port device team_slave_1 added [ 250.050318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 250.057847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.167242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 250.182397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.193787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.331645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 250.350091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.358172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.416106] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 250.439451] team0: Port device team_slave_0 added [ 250.452927] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.459321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.466110] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.472536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.516805] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 250.549890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 250.557502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.572849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.619141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 250.631611] team0: Port device team_slave_1 added [ 250.697247] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.703715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.710510] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.716889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.745496] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 250.754673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 250.773956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.784446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.811240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.827312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.836028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.901156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 250.908874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.930714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.049860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 251.057064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.076685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.290768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 251.297998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.320773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.629238] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.635749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.642490] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.648869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.671802] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 251.779923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.183073] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.189477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.196293] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.202702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.211193] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 252.724041] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.730530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.737238] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.743696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.782136] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 252.790302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.797596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.169089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.679456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.981366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.051019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.170655] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.177790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.192955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.460881] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.615688] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.740730] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.941508] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.947688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.960213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.062356] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.068541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.077288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.122650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.410125] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.592549] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 257.600655] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.763675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.019036] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 258.035133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.048445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.106869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.295234] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 258.541286] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.562705] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 258.752595] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 258.758783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.766989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.024120] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.040409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.049322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.250439] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.549054] 8021q: adding VLAN 0 to HW filter on device team0 17:05:45 executing program 0: r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") shmat(r0, &(0x7f0000001000/0x1000)=nil, 0x6000) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000000f000/0x3000)=nil) madvise(&(0x7f000000e000/0x3000)=nil, 0x3000, 0x9) syslog(0x3, &(0x7f00000012c0)=""/4096, 0x1000) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) 17:05:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f0000000100)=0x78) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0xe80}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local={0xac, 0x5c}, @dev, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, &(0x7f00000000c0)={0x0, 0x0, [0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff]}) 17:05:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) getpgid(r1) r2 = semget(0x1, 0x7, 0x40) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000000240)=0x4) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000301ffff808f00f53c88f5710010ae1b"], 0x14}}, 0x3) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'veth1_to_team\x00', 0x3ff}) r4 = dup3(r3, r3, 0x0) r5 = semget$private(0x0, 0x4, 0x2) semop(r5, &(0x7f0000000200)=[{0x4, 0x100000000, 0x1000}, {0x0, 0x100000000, 0x1800}, {0x5}, {0x1, 0xfffffffffffffffd, 0x1800}, {0x3, 0x1, 0x1800}, {0x3, 0x101, 0x800}, {0x3, 0xfffffffffffffffb, 0x1000}], 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'nr0\x00', 0x0}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000001c0)={r6, 0x1, 0x6, @local}, 0x10) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) 17:05:46 executing program 1: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x4, 0x9, 0x4, 0x0, {0x77359400}, {0x3, 0xa, 0x8, 0x6, 0x9, 0x7fffffff, "11877a20"}, 0x4, 0x3, @fd=0xffffffffffffff9c, 0x4}) ioctl$void(r0, 0x5450) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x44}}, 0x0) 17:05:46 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), 0x4) [ 260.610420] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 260.622501] hrtimer: interrupt took 32934 ns [ 260.671135] netlink: 'syz-executor1': attribute type 4 has an invalid length. 17:05:46 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)={'filter\x00', 0x293}, 0x14) 17:05:46 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = shmget$private(0x0, 0x1000, 0x30, &(0x7f0000ffd000/0x1000)=nil) setsockopt$inet6_int(r0, 0x29, 0xff, &(0x7f0000000040)=0x1, 0x4) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000180)=""/159) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f0000000140)=0x1f) socket$inet6(0xa, 0x2, 0x8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x10) 17:05:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r1, 0x8b0b, &(0x7f00000002c0)) shutdown(r0, 0x1) [ 260.788789] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) 17:05:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x0, 0xa}, &(0x7f0000000040)=0x20) accept$inet6(r0, 0x0, &(0x7f0000000140)) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:bsdpty_device_t:s0\x00', 0x25, 0x3) 17:05:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x6700, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000009c0)=""/213) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x32, &(0x7f00000000c0), 0x250) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000280), 0x0) r3 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1ff, 0x0) ioctl$TIOCSBRK(r4, 0x5427) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x1, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in=@dev, @in6=@local}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000cc0)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000e00)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000e40)={@multicast1}, &(0x7f0000000e80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000ec0)={{{@in=@remote, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000fc0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001040)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000010c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001140)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001180)={{{@in6=@remote, @in6}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000001280)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)=ANY=[@ANYBLOB="3c00020038000100240001006e6f746966795f7065657273"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$KVM_RUN(r5, 0xae80, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000380)={'veth1_to_bond\x00', 0x1}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4008000013d) 17:05:47 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x10, &(0x7f00000000c0)={&(0x7f0000000000)=""/136, 0x88, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r1, 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rfkill\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000400)={0x0, 0xff, 0x9, 0x8}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000480)={r4, 0x80000001}, 0x8) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r7 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000000340)=0x8) connect$packet(r2, &(0x7f00000004c0)={0x11, 0x1b, r6, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000380)={0xffffffffffffff51, 0x800d, 0xfffffffffffffeff, 0x6449, r8}, 0x10) sendmsg$can_raw(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{}, 0x0, 0x0, 0x0, 0x0, "6324cf6d6bb989b2"}, 0x10}}, 0x0) 17:05:47 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) fcntl$notify(r1, 0x402, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1000, 0xfffffffffffffffc, 0x7, 0x8c, 0x3, 0x3e, 0x2, 0x10, 0x40, 0x129, 0x9, 0xffffffff7fffffff, 0x38, 0x1, 0x8, 0x5, 0x4}, [{0x7, 0xffffffffffffff35, 0x3, 0xd450, 0x7, 0x9, 0x8a0b}, {0x2, 0x2, 0x79f4, 0x5, 0x8, 0x4, 0x7, 0x1}], "008c3da2b16a65fe764392c2f21bf2baf6bd6ec0172e7de587a4763809255d3a7c8227f78458e5fa81be9f2b", [[], [], [], [], [], [], [], []]}, 0x8dc) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) close(r1) 17:05:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000040)={{0x80}, 'port0\x00'}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) dup2(r1, r0) 17:05:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r1, 0x8b0b, &(0x7f00000002c0)) shutdown(r0, 0x1) 17:05:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 261.897280] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 17:05:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r1, 0x8b0b, &(0x7f00000002c0)) shutdown(r0, 0x1) [ 262.036483] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 17:05:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 17:05:48 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x65, 0x4, 0x0, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3, 0x6, 0x1f, 0x7, 0xaf8}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x400, 0x50, 0x20}, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @dev}, &(0x7f00000001c0)=0xc) accept4$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0xffffffffffffffb2, 0x800) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) accept4$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001c00)={@dev, @local, 0x0}, &(0x7f0000001c40)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001c80)={0x0, @remote, @loopback}, &(0x7f0000001cc0)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001d40)={@multicast1, @rand_addr, 0x0}, &(0x7f0000001d80)=0xc) accept4$packet(r1, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001e00)=0x14, 0x80800) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000022c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000002280)={&(0x7f0000000640)=ANY=[@ANYBLOB="10040000", @ANYRES16=r3, @ANYBLOB="00002dbd7000fcf1df000100000000000000", @ANYRES32=r4, @ANYBLOB="f800020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000008000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="f40002006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c0004000100090300000000090008200c01000000000000800000000008087ff8ffffffc00000fb0800000001000402ff030000128d067e0100000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400080000004c000100240001006c625f74785f6d6574686f64000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617072696e67000000000800010000000000000000000018add01a20a60d7e09b1e17ee62faf8b711caccb1b51", @ANYRES32=r9, @ANYBLOB="f80102003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000"], 0x410}}, 0x800) memfd_create(&(0x7f0000000200)='veth0_to_bridge\x00', 0x6) 17:05:48 executing program 3: membarrier(0x1, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20101, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0xfffffffffffffffd, 0x2, 0x303f, 0x1}) 17:05:48 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) fcntl$notify(r1, 0x402, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1000, 0xfffffffffffffffc, 0x7, 0x8c, 0x3, 0x3e, 0x2, 0x10, 0x40, 0x129, 0x9, 0xffffffff7fffffff, 0x38, 0x1, 0x8, 0x5, 0x4}, [{0x7, 0xffffffffffffff35, 0x3, 0xd450, 0x7, 0x9, 0x8a0b}, {0x2, 0x2, 0x79f4, 0x5, 0x8, 0x4, 0x7, 0x1}], "008c3da2b16a65fe764392c2f21bf2baf6bd6ec0172e7de587a4763809255d3a7c8227f78458e5fa81be9f2b", [[], [], [], [], [], [], [], []]}, 0x8dc) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) close(r1) 17:05:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 17:05:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r1, 0x8b0b, &(0x7f00000002c0)) shutdown(r0, 0x1) 17:05:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1f, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x7}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) [ 262.326799] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 17:05:48 executing program 1: r0 = socket(0xa, 0x2, 0x0) clone(0x12004000, &(0x7f00000001c0)="ba97c70a0fcd4a909af4df6db4b61998aad8c4d28e992058b7451128ef26765d584f886f3815ad354a94d55cd4447f5487451d2a1a761758d9833ce2f0b7ff449198bbc8d036e6b175a774620447673d46ab4faeaf2c437906a4f3497e9e65fc0514da0c04bbe53c73f5bfe12627e692a1310587911372da78f2a523bdcfa14f81b0a4a96e7690c66bdc2d211d85dcf7af01ee77ac95b30445413885e6de94643a72818d0ace492840f3d911511bdac56f3d20782005a02c998b9aadaf7aa28d1d0100f895db9cb077ee660c901ce7e0ba2ecb6522c4", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="792d3b5fa4dc0798396170b095e6e1487bf7f9de887f52c8ca933fdffccbd7910fb9c59515d6cb7ab7d4b28279187b3aa5ffdb103fcb90fdeeec03f9fb16c960938ab721ea7629626d457aac5556174fc7132496e31a7b7670bdfa4e16f2e9188b58bcbe4728420e9e1ba066fc3cf9fe319acd1ae86eb151f92dcf476e2b95e259fb1531024c867c21d9178ece") setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8001}, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4800, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x20000000000001ad, &(0x7f0000000080)=[{0x0}]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x7ff, 0x1}, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x5) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="ab674c723f8c09e13b4fee8773158437", 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000004c0)={0x2, "d407"}, 0x3) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r2, 0x2}) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000400)={0x6a7f, 0x3, 0x9, "b98d460df76b213bdd0070c964a334b458e1a01f810dc7d06e46d50bfe58969d46dde16282adacc14c7c1024cccf04122a8b547057dfe0cf4467c3c9", 0xa, "fe99ad752162b7a94a6ce9b7522b1dfa22ca59092a130ee02df986ed11e137c74921063a3bb04410175f438f5d1a1c346300c90fd88131a6130b749f", 0xa8}) 17:05:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) 17:05:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0)={0x0, r2/1000+30000}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x80000001) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) gettid() setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x0, 0x5}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x80, 0x4) sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffdf4, 0x0, 0x0, 0x0) 17:05:48 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000017d400300000000006506000001ed00002f040000000000006f460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)="505c881c"}, 0x48) 17:05:48 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 17:05:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x8b0b, &(0x7f00000002c0)) [ 262.594394] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 17:05:48 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000480)={0x8, 0x6, 0x0, 0x3, 0x2, 0x3, 0x0, 0x7, 0x0}, &(0x7f00000004c0)=0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000280), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000003c0)={0x7006}) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) clone(0x0, &(0x7f00000001c0)="8becfe1b2afc2b8e9b59d6b9a0813a03339fc12b541b71505171d7a91cbea5", 0x0, &(0x7f0000000000), &(0x7f0000000280)) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000040)) r6 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x4) ioctl$RTC_PIE_OFF(r6, 0x7006) r7 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000200)) io_setup(0x1ff, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280), &(0x7f0000000300)=0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="fb0072094e00000000000000000000000000000000"], &(0x7f0000000540)=0xa) setpriority(0x2, 0x0, 0x5) 17:05:48 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_int(r1, 0x1, 0x26, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af23, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') 17:05:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x121a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000440)) r2 = dup2(r0, r0) sendto$inet(r2, &(0x7f0000000040)="8c1426ad41bc10276c0d7ea0189c7d6065c4dbf6e1a986ee94458e236bdd1bde860993d06f09f09e14a87929fcdbc58905a57c57f0913cc27979", 0x3a, 0x4000000, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x80000000}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x800454b3, 0x0) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x900, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="215508fd51e62671a20cc44a24f7abb5b7edd0f65740bc4ca9eeedfc171c5203591661bde54cfb2c22f8f4355c552a72327274e92de06490851b7d8e2b38c09d560b945c357bafd9ba1ca25089f97689ba0587eeda803d9a8d2ea4f046ae2b63a384c8b92af2f49227a1fa9ae7d9989f0adaf044450bbe24e7a162f83bfbd741f40ca5c8fa4eedaa1fe772e661b1bb0d235d6f885bd34853dc0c2205656409865434e483eb1de046241eb4ec9825cd", 0xaf, 0x5c}, {&(0x7f0000000200)="a0b86c8b37386469ba198ed76ae294ab46411bbb79c6cb29beba1cb21297fb17e0245a03eec0ed3aeaebe22734e65d030e3ca891cbabb740a0ae09a933beb3fbb5ed6e21fd6caf24afe232ccdd39edc227645ad61d5fa532364497a961ad0082f45303d44393b8fc2f0485087c4861792479eb5e35f011e545d59c6f3007783a04638536ec719e360c4b8df865647edece2eef2fbd467d412087a282fd350822f83b9f99ccf32438d63b52", 0xab, 0x5}], 0x802, &(0x7f0000000300)={[{@jdev={'jdev', 0x3d, './file0'}}, {@noquota='noquota'}, {@hash_rupasov='hash=rupasov'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@usrquota='usrquota'}], [{@obj_type={'obj_type', 0x3d, 'system\'\v:$mime_typekeyring'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@obj_role={'obj_role', 0x3d, '/dev/dri/card#\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[,cgroup'}}]}) 17:05:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) [ 262.740878] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 17:05:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @empty, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x93, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/152, 0x98}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000300)=""/134, 0x86}], 0x4, &(0x7f0000000700)}}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0xf9, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1c) [ 262.790481] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "hash=rupasov" [ 262.876242] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "hash=rupasov" 17:05:48 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) 17:05:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x0, 0x100000000, 0x8, 0x40, 0x2, 0x80000000, 0x7fffffff, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9, 0x9, 0x7f, 0x10001, 0x8001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2, 0x3}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000000)="849fc5f64465b8e21de0274cd8eaef8c53f43d9b50cf3f0c67c7680cbb88494b5b305b1bb24918df1636134427c0f0481608a1ad6deea78d6995d14aed11d25d89c50bfaf980", &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="a97e8566167cb32d2bbdc8f6589e5a759df1d3d9ed81b27a318f9489269716f06175db845ff630240fd0839a93f69f962984f46824a6ab2ebd86c49078a9db26a632a9df6b0288e2fc8bc87b398ad9e3de8616e975babd7d3c5058a2d902af64ec37d10435a9fe8e88b9ca365239a8851e55c6626804c593e072f67ac98eee081b23f222277803b3aa59440110099d0c8ff5766b9be8c518a4fee1bc062cba6433925c3cb078134d0db370cf27c64fd8e7f94005f8cf4958370986d11610") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000280)={0x0, 0xfffffffffffffe08}) [ 262.960422] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:05:49 executing program 4: r0 = open(&(0x7f0000042ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000000100)={0x77359400, 0xffff}, 0x8) rt_sigsuspend(&(0x7f00000000c0)={0x4}, 0xfffffffffffffdfc) truncate(&(0x7f0000373000)='./file0\x00', 0x0) 17:05:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) 17:05:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x0, 0x100000000, 0x8, 0x40, 0x2, 0x80000000, 0x7fffffff, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9, 0x9, 0x7f, 0x10001, 0x8001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2, 0x3}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = shmget(0x0, 0x1000, 0xc86, &(0x7f0000ffc000/0x1000)=nil) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000300), 0x1, r4, 0x30, 0x0, @ib={0x1b, 0x84ba, 0x8001, {"02aec728eb64f4e6054e302a0cf89dc2"}, 0xfffffffffffffc01, 0x0, 0x8}}}, 0xa0) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x1000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x9, 0x4e22, 0x0, 0x2, 0xa0, 0xa0, 0x2b, r5, r3}, {0x1, 0x6, 0x51, 0x0, 0x9, 0x7, 0x8001, 0x4}, {0x4, 0x0, 0x256df1aa, 0x266f}, 0x5, 0x6e6bb2, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d3, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x3500, 0x3, 0x1, 0xc7, 0x8001, 0x10000, 0x7fffffff}}, 0xe8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7, 0x0, 0xffffffffffffffd4) 17:05:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) 17:05:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x0, 0x100000000, 0x8, 0x40, 0x2, 0x80000000, 0x7fffffff, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9, 0x9, 0x7f, 0x10001, 0x8001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2, 0x3}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) 17:05:49 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r0 = syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x5, 0xd0db4659247dc1b2) accept4$bt_l2cap(r0, 0x0, &(0x7f0000001900), 0x80800) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) futex(&(0x7f0000000300)=0x1, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0), 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_flags=0x1800}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0x62, 0x4, 0xfffffffffffffc01, "ab77d1952f4df59d0a9d6826d9986fc2", "33bce5bb46418db96db06d403118fffef4f97aa09d1b66ff30dd4c947ce641b50cf04e63f2656e23c2ebbb8dbcf9181e16bfb36804b448c4b0b6b1d80fa7a6f1da7522144fc957c14b6bcbb5e8"}, 0x62, 0x2) sendfile(r1, r2, &(0x7f0000000380)=0x8, 0x2000100000001) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000000000000a004e208909000000000000000000000000000000000000808a248fe5b95ee8a2ef1dbcf01e4a000000004000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000020000"], 0x1) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000600)={0xa0, 0x0, 0x6, {{0x4, 0x2, 0x63708992, 0x8, 0x800, 0x0, {0x5, 0x5, 0x5bcc, 0x5, 0x0, 0x9e, 0x6, 0x7, 0xf351, 0x7, 0x6, 0x0, 0x0, 0xfff, 0xffffffff}}, {0x0, 0x6}}}, 0xa0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r3 = socket(0x0, 0x0, 0xf644) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000740)=""/249, &(0x7f00000002c0)=0xf9) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000280)=0x4, 0x4) io_setup(0x2, &(0x7f0000000180)) [ 263.575768] print_req_error: I/O error, dev loop0, sector 376 [ 263.622282] print_req_error: I/O error, dev loop0, sector 0 [ 263.628135] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 263.636390] print_req_error: I/O error, dev loop0, sector 8 [ 263.642187] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 263.649940] print_req_error: I/O error, dev loop0, sector 16 [ 263.655770] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 263.663512] print_req_error: I/O error, dev loop0, sector 24 [ 263.669330] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 263.677047] print_req_error: I/O error, dev loop0, sector 32 [ 263.682922] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 263.690676] print_req_error: I/O error, dev loop0, sector 40 [ 263.696478] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 263.704205] print_req_error: I/O error, dev loop0, sector 48 [ 263.712096] Buffer I/O error on dev loop0, logical block 6, lost async page write 17:05:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0x71) 17:05:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x0, 0x100000000, 0x8, 0x40, 0x2, 0x80000000, 0x7fffffff, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9, 0x9, 0x7f, 0x10001, 0x8001}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2, 0x3}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) [ 263.719844] print_req_error: I/O error, dev loop0, sector 56 [ 263.725653] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 263.733363] print_req_error: I/O error, dev loop0, sector 64 [ 263.739187] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 263.746918] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 263.870608] tmpfs: No value for mount option 'security.capability' 17:05:49 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x1000000}) 17:05:49 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r0 = syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x5, 0xd0db4659247dc1b2) accept4$bt_l2cap(r0, 0x0, &(0x7f0000001900), 0x80800) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) futex(&(0x7f0000000300)=0x1, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0), 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_flags=0x1800}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0x62, 0x4, 0xfffffffffffffc01, "ab77d1952f4df59d0a9d6826d9986fc2", "33bce5bb46418db96db06d403118fffef4f97aa09d1b66ff30dd4c947ce641b50cf04e63f2656e23c2ebbb8dbcf9181e16bfb36804b448c4b0b6b1d80fa7a6f1da7522144fc957c14b6bcbb5e8"}, 0x62, 0x2) sendfile(r1, r2, &(0x7f0000000380)=0x8, 0x2000100000001) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000000000000a004e208909000000000000000000000000000000000000808a248fe5b95ee8a2ef1dbcf01e4a000000004000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000020000"], 0x1) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000600)={0xa0, 0x0, 0x6, {{0x4, 0x2, 0x63708992, 0x8, 0x800, 0x0, {0x5, 0x5, 0x5bcc, 0x5, 0x0, 0x9e, 0x6, 0x7, 0xf351, 0x7, 0x6, 0x0, 0x0, 0xfff, 0xffffffff}}, {0x0, 0x6}}}, 0xa0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r3 = socket(0x0, 0x0, 0xf644) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000740)=""/249, &(0x7f00000002c0)=0xf9) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000280)=0x4, 0x4) io_setup(0x2, &(0x7f0000000180)) 17:05:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) 17:05:49 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x0, 0x100000000, 0x8, 0x40, 0x2, 0x80000000, 0x7fffffff, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9, 0x9, 0x7f, 0x10001, 0x8001}}, &(0x7f0000000200)=0xb0) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) 17:05:49 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x22005, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xffffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, 0x0, 0xfffffe9d) stat(&(0x7f0000000380)='./file0\x00', 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, r1, 0x0) lstat(0x0, 0x0) 17:05:49 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r0 = syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x5, 0xd0db4659247dc1b2) accept4$bt_l2cap(r0, 0x0, &(0x7f0000001900), 0x80800) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) futex(&(0x7f0000000300)=0x1, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0), 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$sock_ifreq(r2, 0x0, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_flags=0x1800}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f00000006c0)={0x0, 0xfb, 0x62, 0x4, 0xfffffffffffffc01, "ab77d1952f4df59d0a9d6826d9986fc2", "33bce5bb46418db96db06d403118fffef4f97aa09d1b66ff30dd4c947ce641b50cf04e63f2656e23c2ebbb8dbcf9181e16bfb36804b448c4b0b6b1d80fa7a6f1da7522144fc957c14b6bcbb5e8"}, 0x62, 0x2) sendfile(r1, r2, &(0x7f0000000380)=0x8, 0x2000100000001) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000000000000a004e208909000000000000000000000000000000000000808a248fe5b95ee8a2ef1dbcf01e4a000000004000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000020000"], 0x1) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000600)={0xa0, 0x0, 0x6, {{0x4, 0x2, 0x63708992, 0x8, 0x800, 0x0, {0x5, 0x5, 0x5bcc, 0x5, 0x0, 0x9e, 0x6, 0x7, 0xf351, 0x7, 0x6, 0x0, 0x0, 0xfff, 0xffffffff}}, {0x0, 0x6}}}, 0xa0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r3 = socket(0x0, 0x0, 0xf644) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000740)=""/249, &(0x7f00000002c0)=0xf9) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000280)=0x4, 0x4) io_setup(0x2, &(0x7f0000000180)) [ 264.108424] audit: type=1804 audit(1543770349.946:31): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir892344177/syzkaller.HGXjEi/5/file0" dev="sda1" ino=16562 res=1 17:05:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000140)="0a5c2d0240316285717070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000080)=0xfffffffffffffe60) bind$bt_hci(r1, &(0x7f0000000040), 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001d80)={"74756e6c3000000000000000e0002000", 0x0}) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, r4}, 0x58) close(r1) 17:05:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:50 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x5, 0xfffffffffffffffa, 0x2, 0x751a, 0x0, 0xfffffffffffffff8}) getsockopt$inet_int(r1, 0x10d, 0xf, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) 17:05:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x0, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) 17:05:50 executing program 4: chdir(0x0) symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7570706572646d723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776f72ca5269723d2e2f66696c6531"]) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001840)={{{@in, @in=@empty}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000001940)=0xe8) r1 = getuid() r2 = geteuid() syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file1\x00', 0x1, 0x9, &(0x7f0000001600)=[{&(0x7f0000000080)="b76b584b32c063ae1fc347d4aef97fa4e901a33724e7650add98b8fdb081e66e4c828f7ae274a9b62db80faccd21c02fbc6e0018541f890289d5a86ada1272c2", 0x40, 0x301}, {&(0x7f0000000140)="da0e8ad501ba68fb87d3d0b0b9da52f7dccc18c3cfc4c955d2dfd78e04f59df8633f37b1348725665535528ded07455f75775346e078ae20d7c684427b737348bfd72a2bfffd6797c708fa335c12dbb27c8976519ee00afea2bd041461d5787f571f41e429aca4fd130882fa1b58bbaa8762ad9d411eea3fdd2ea0061ee8e0927a187ffa7d1fd1493733c2014d22e0fb53c71e27cc3b38b4cae8", 0x9a, 0x8}, {&(0x7f0000000340)="63704d252fb633d20e8c2a87e65a3b5ec7d76d8576856dddcf0e9a65209a5ecf3d3cafeb41d38dbaf7718f581894043a667f332d40c77c9b33a943906e40eb8ec9d1dc2f2f2414715ed734f0549969dadcc21b3bfd0cf3e5c3ddeb78374ebe8ff8c45cd4366477bc9bbef39a52104e24c54b9527252645fde3553a48c6887388182217ac5680c9f0539a84591e6efbbb7ffeb4dac84c46c558867bcfbf0653ff89a224ff9362c3f965de311296931a563de0db0c7de39647537916df282d2ca1ebbe4ce22e5be1877a3c72080577ab03ed780e2a0acac1884dc95b06b45600e1ee7135ae5347d48c3ffc52a4d29eb6e24d6b150b7bbc226c4780a56b0f73ba62eecf4c734d3e27c7f5c34ff9dfdeb079d2ab87fe0cb20cb21b53d7a015a8a347f17817f7bb9d8569e62dde4b602f8b54f190b78aea01138759ef57b1f48aab8c06fbd38a9794a775efc44a7def26d4d37bb143de4065477255e0e377d90307f772fd490908b7f45bf0103d2792b27d1d77c6399d8ba1bcc3ee5c21a1b9155823d2becb391127c97d21caba45255f407139990986f8d91044d3c8433b87d67ea889a1bfe396374c5f1978107e5994aebed99c15e65fdc9c7fcbbc46b664306e28e012e29674796a69180333f1311f09f9baaf8e10ab842dc05e094068a5fddaeb3a9fad964f711ff6dadab7634c14cc78353452ad5d731f9b108278c6181b5d8e0c786b137212832b667addb747c1f044d93f6e2d7e4be1e4cc0a2425725f35cfbbb6d534a309c61534166e2f5bbf3006f58eba35e2fa7ab309ec4bc72bf2aaa3d3eb0ed65c343847495b3c7991f0de72aa2dc70ec24c5f90df68b33b11f7fc3743c9d77394733755fe8067cad11461cfcee082bf8f7594c36a8b765ec2f181ba5927b17b71195cb4357eb43a35be50bea305ec0c018dc2fc26655a298511ee094215c939aa0c4a6e1b08b897d4f0b15a6aa4dcbcef891c0f3d05f147cd1724a68236704c4ad798373ebe5798c7b2553374753a08bdba774ebe534bfa79a5a7221cd15be5907574815ae3635fd6a1b95aeaee7975e29636787d56a97769a013551a5933e50f206d847942940e5932719b6fe884e9f6095ad6a57d5905e47462db0325229c885fd25b203f12299c1e622348cae0e0fe649113de901d23855ca11e782a3d0d7db787bab05c911d65e1d5f70fe9f789937ea080c8efc74bed4c52cd42f7a0154ce91354532f629319c171cfe3cbc7e325a12653a8d5207c72755c5248e5d73e5c14df7af148d6d68d4d45724b11b19b7c84a0b5a38c2fa8c5e04a56b9769083a0a903b2c171e34a4f5ae46abb86f3099ff17fa04fff7f929bdce82457b3aee473e3e50d207a2c83fa4a359b6dbcd3fced079a8794605f11ae20d627f23faf4b2f8638991879987159ba16e0bc255753bea0ba48499e1eea36544a42fba9d20fac2ff550f18ed4020c185eedf1304093c1aba03841bff8f93fc75a52ae517ff962617272dad96e8b24ee6d1c8a9136ce20b61f316561a7b827760a9dc2f5612f511e5b6bed96f3693752d4d652cad79a809c52973c2922a939c370e1707afc6a9c16aa06faa5a60f0cdd902b0cb1241e602ecde05e7854d4f24f912d85b9ff6becebb65a6a17057c3ba27b51e1021bba38d7c7e9673c1001c938f1195e5ae70dcfb4ccea11e005c198a353f584818552d0ff39e31a74adf4414c92273393f9887dd7467d20b6c950a6fcabb604da733d5a07a74f9897d8ef757b058fc21e3744154abbcf05489b94cfffdf792dde4cb0d9f2835ffe73a21e8248c459f6855f0260090fd6500235f3dbe7aeb4e6d766c199c93e3255e2d6a11a30bfe123627c8b6a5ae3def69958c0ac94fbcec8e8593cb4daaf31c525d3e830cc1089eee576c74495377a15c8c07d5ae0d1f48c3c6a44c68797d9c1970e5d094ba7ef3086b0e7bbee20cbd9d1377cdcab5fdfcaf563f373f6ed508354aa8b836fb893512f4ead7e3389ed1f71a2f1f35573d9f76599fecf7efe95eb873a8bd8dcc0f47b1e0f9871c0917845f95a75e39e30010255e37a8c6f3494d9d82bf30deb7096ed2597d23be3548c127c08c6b6b31b76f2fb761f2aa32aef5341333bc6024ff39cdc18cf51398298986f6e663cbaee51a074bab3c9b6005e5b34f160751a5699f0bd62ed59dca445d0e2bdf27866b280dfe98efef3dfa95ed5cf94d1cfc30b056894bbd9a57ed75fad8166d0eb4fcc2c9df75f6a9204e1783e56aa07e082bced0e773489c3ec73c7ab5e962ca246adcdaf46393567fede811833b2f6d2a422cc9e5e4c1773bcd78867969a1a756838991f701971935b26628bd2cb774436fd0d3049eec655e669c729f2dfcf79f18c432587fe6f649d64ef4ec72ac968fdf236cf5995ea1c2beaec2cdef072ddadb313be52b99035c357cea167a394395380a07bffbf809136762f3a80e838d09d167d471144f70008c3b3056751fa1648e0a12ff266630ae1fe950758bd6edd425331f6b89651a61922e9d5a871389e2ed34cab8881896795a1113f61f58a03c80fda1a751032ed93bfbfba7dd7ff3f0b8ee513d9720bd63a5dca159e203bcd7a7a10dfdbd215e14cce6ff68571db4bf1df8f4ad43c74b44ed3e6c1daea7a06bffbeacc5b280d7b474b723b4e7c197567a0a3520f48993e77d42e834e268ede805909a30420e5e1b2ee2d6a3d37b44b34495cfc9cfc83cc763a1cfbe492770c3f05c5f58986a3a104172fedfcda109c8a7b7b299c4e42049b1779b70f4584a939f17e72399d5c72b304ac843a3bfabd849ce3996e39747e568e31a0d9e37f3f98324a95dff333777f87fa83e50c6ba8893168ad95bfc22a89f6e324a75844508921d807c9f036e10977e91c42e3964b9e36ce4f05510811389168e2301e54d6ce2fd6a28f020ef99c2a7bea6a540275745ffcffb2474b16411fd23cc2448eb25a8181e089f89daf012ab00b48dae63e1d6e17edf8ab234f63e567df65ecad9539427f040488052bb4ac2f1bb23a60945c58eba82f4882e9208c1c54f840f57f27e7808de10e3c78e7d6a9fe171ff651ea86c19d5fddc564b8129bafd00d23041861e7545b068e88adef7972a6eb72f9c92d143d2a13498f14ccc38d83297d564a572bc262d1b640e31c30ad6a051729cc058fddbe5111184a3c6b421e55b163f61ebc54b3e0ccd0a5b81a046b5027b53ca6639483a64819e047b0ec63b4855d35cd56efab04235f8f7845aa4e70c14142bff0319db40c61cbf6a3c80db5c144ffb1f421099686cb680733cf85c458a8576fabd5620f944570cb64fbd2a325a08cf1a60e43a94754daf4253a8ebd5bd692fcb17347ec037ead963108c9b7b829914e65cf8449523d724cbb10509d8adc6986ed07858eef9bccc6ec91103d3e29a4377361b8613515a9df469a2cf77f000e0cfa5a00ede476d6b2ec481e52ec71ccfa669d7075be113328082120ac5914e3a8acbb90cfbbdc5c93b0535d20f132f5b3f96f66378e90db8707110a9c9ee4f7eeaa3a0bfc0f2e1511a07ed4f8e49883d5a894fda433c40777a7a97ad3a1e6ac521a585036ac430ac1b4fe97e25d67bb029bed1a27484c310f34acc7735110d9b0f6f23eed09bf77093054efd319fa33c1322acff926c065777ade03077245e0e24b635b7e15dc5a9aa70cb30403f1dba2048bc8958614cc6a4f49073e4bafd2f49e3cce06d4d14bbd18cc93d20de4f86a037a637dce0df696b274ec6003565f609e6b208c5a8acfda2feb2fa574590b3f297d0a94888cc648b056e613b2b288a13625a8047876357c1c08debaa9da818fed84529d9ce5a086be342205910ae0e3e85e4894c422f79a076e0dce41935763acb04396fb70898bae638dbeb54e8ae15c29b7e820af1cf7dbff51ff1cc5cb777b8b494775f704bf10b79dcb4ace1e45730871c208ebd6a32678b69ed8ba4794a7755fdfbe593283345ae909dc2694d040c50063b65c19f49cb8d644ca9b68047259c4f52eecdca8b79a5a06fde6ffc29ef07ce01171fdd1ba9933b56a68649d37fe44284eba94749f125ddbba40973e36883111af665b7c57b3fe8d9b807c29e44941f266644a9067673c541450a4e99ba02f70de9903995ebf29ada402085482a701a757c39102aab5b0874dcbc8b6158b8c9fd9f8582b4483fa0cb43fa32fb07acfef59526b5ab6aac639903cd633023471561c4a7cd28f88ecdb2e225845b36ca79ad1376fb2ab580b98aaaa19446b323f3331c836751dbfa0cbe75a85fd42158bedfdca8e639208f7d1ff2ad2c6d17c792dbd4ba9f0072f0a8a3c16c985e2e37d30d43b13dfc446240fb2bc62f34f37451bbc1aede3d6927adb3bd2da8e40a6fd8ff392e42006a6557428c289123f7d55d32344fe7c268c923e9e80bba8569c94afa418e8a47a346cd49b17bb7ef68735f16b597c487236f5ba427643332b50af795de0768f291e27509e7431721c23374bb1de6e7ae4573b564e4711d6136a99563044117e7862c79cf385e553b8dd261683b15d380f5dbab378286dcd41de2113b3a562a7744cc146bb8634426c7f80a3c0a40f8326497dd41e88a6daae66b13f6312e12e477be8f0318e83f6b0d4f80125a1119e9ddafd7ff2b5ea42c175c6c7c0f810e6cc04d2537d6ffcbc22eb1903633246ab6c70c2a1ab81babf4a241a16135ed167252a359b941cf9b1e32b774253ccd61b4dd21466a20a1f0fa493cd408b46a69c466450302ac6b437b7f88e1e3e1089c02057a6713af43a059e88c4cacb28030e34c457dc0cbdc52eb0c85e9d9b7abb0e1c31d2458fe3ab62f45567f44b9edcb0a35c40d1e1d74683f92bb366d677d51347ff62f2eb0679a4cce01866388d8625153f5e383c4e0ab0c7904babc72d16cc17ab18320458221c52fc0575d11826fd4b6c3874f40f67a35573efd07a0e22b95b73d95dc737b0198cad71e6080a3577eb629e9124c371427bddd690d966ac40ee71298df23ae2069eb27b50c4b7a3bb534d614b4abb6cffce4e149fbf18235469c7108692219fac36f1da7355ce8cfd5532aa52dd82b5bdf4bc7b36608f3160f0120563beed61ad1e8bc54979c27e8173586abe11bc4e8b41e3c7ff09c1bcc45be62f378bafc3f74c42e58ce8cc731cc81829a59c0cbb0b8218b6821574180b3e3f4f93f3d542a8122ef933d9ae5a805540418501f1d6fb9a3a71240e3882b3431d377ca3bc65862af6baa7f8ba97dbba9d748bb47519b82121b43caa360aadb2a87dfdb9f7f7614c5b40f0c4afd291008480b34ac0d618a487ed71ce4d60983340277aeb374292f404ed4cb0f09e4bd882c378d2f8aacc3cc3f922c476851acf27b9ecd9369985ad143407d5ebe524a3b50d1d13d88e9ae3c4c9fe0222f0b3190d01da74b888adddef61c84522c097a02b0dcc0dc7630b2cb7959b176552b347d306c9db835d6323a5fbde4941be79dcd90237f242e41281168debea8b601c5b71d75d74fbff100008ab87f719a889c82e39ada7876ce6e2664649be2f78e08d8ab9d52757cc06309c2ecae1e7dc3e3673dbe4b0ed8726d389704cffafc9a7526aa7e38f21007b8f687bfc6ab5d5c817934e624258f31d7eb914f9b8827ab833600eae80ee7ab741e6ec7f64ae453f7109858aba7f26a72aabf9db6b7fbeeec2d3ca0f97f523cb6e0c7b3910abfe04f57312095231bb3bbea76ac4c48503e64b3b75af7e4b9c76ad552a31b04b9c9a592d5ff63be4e66016f8c0fb35ebb7fdd0bbe7127535f4e097e93a9a17281f3b1f5182f6e9db5bdd21", 0x1000, 0x9}, {&(0x7f00000000c0)="0b7a88d404bde0f0b99d9d9ea64ddd3e16e5642b8c4cc6d841fa36", 0x1b}, {&(0x7f0000001340)="66f572d44882", 0x6, 0x80000001}, {&(0x7f0000001380)="bdbc2218e0face5f15a76aa01a6d1250d9b5cccf4634a2d8bdd99b174b2ccd1237dc9657dc14c0c2abd28f5a1348cc503cd79ad1129aa5b299d2ea0e7d313dffbd29b8a0deac425f576884be277a31af47cbd912064f3f606345fdc52c9e43d15c06abbb3bfafdcff769", 0x6a}, {&(0x7f0000001400)="7860fd2738d623ded289c500142f0358cb016ef1be05df308a72925e41212defb6c5b8b8e632794f637f5b61bd83bfc629249703be986191d468bbf84e42d72a19ee324533bc56e884ab087cb781506e31d34c4e9967855a08e778c1537c47cc6d2e2c6d50e20e1970cc75b2b49ecff25acdae8a1db4b2c062142c67ad65cfd23e6126d273ed75010bc02a1a2562f8237acd006f2c478dfc69759241", 0x9c, 0x7ff}, {&(0x7f00000014c0)="bdc1ddec8d60b20e3d5da5c3933351605a6e59f1016aff73a11901b71ab53f3766bd8a1cd1188c25a55273c9dcb5241cbc3f84bd756f9a8daed71a9db3a0efad4a0adf5f9d66b0435fe9f473607eec31a5a6ac042c3e0c2bcd8a312d0287412b99fdc24be9d0bbeff759a44d65e724fac24670de81536c527ed6e7e8ec01e9812681dc9a40475a76d4708f310eb8d5369f467208e5fa14941e926e46189f4f45a584e0f682aefa6958c761e59814da6fdfb531530469f63f8b4c600627f617bda5e3be6ab3e57cb6c68e501e9fe9682cf74dd3ddf6d05bfe", 0xd8, 0xfffffffffffffffb}, {&(0x7f00000015c0)="72dee470adb1c6c0dac5c50d224887e86cad7037f67727eae04a0a98b0c2e007158128139295cd61b14462810b367eafa57d9db454697b", 0x37, 0x8001}], 0x9000, &(0x7f0000001700)={[{@clear_cache='clear_cache'}, {@acl='acl'}, {@space_cache='space_cache'}, {@degraded='degraded'}, {@treelog='treelog'}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x8}}], [{@fsname={'fsname'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@fowner_lt={'fowner<', r1}}, {@euid_eq={'euid', 0x3d, r2}}, {@fsmagic={'fsmagic', 0x3d, 0xe6}}, {@dont_appraise='dont_appraise'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 17:05:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(0xffffffffffffffff, 0x8b0b, &(0x7f00000002c0)) 17:05:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) [ 264.433862] overlayfs: unrecognized mount option "upperdmr=./file0" or missing value 17:05:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x147000}, 0x2, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x9162d7f95a1128d6, 0x2) ioctl$NBD_DO_IT(r2, 0xab03) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000200)={0x1000, 0x11d040}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1a, 0x0, 0xfffffe14) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:05:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semtimedop(r1, &(0x7f0000000040)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400}) semctl$IPC_RMID(r1, 0x0, 0x0) 17:05:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d) fsetxattr$security_ima(r1, &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000500)=@sha1={0x1, "eb5872e416c6fbd3c4be4fe4c109e1924209a35f"}, 0x15, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10) r2 = userfaultfd(0x80800) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000480)={0x0, 0x1, 0x1, 0x8}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x80000, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x18) readlinkat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/161, 0xa1) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000540)={0x7fffffff, 0xc39}) syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x85, 0x40002) shutdown(r1, 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r4) r5 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000}) 17:05:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x0, &(0x7f00000002c0)) 17:05:50 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x80000000, &(0x7f0000000080)="0100006401000000180400000001000000559b2b7a5d040f45426d0270ec787070cc6afc2cb3dfd849832f77d03fa5442c2eb295f8b2bcfe7b3e33825e3116c56df51252bf97511957e6946da15227a4") [ 264.615513] overlayfs: unrecognized mount option "upperdmr=./file0" or missing value 17:05:50 executing program 3: ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="2a21c0d9e906", 'dummy0\x00'}}, 0x1e) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/59) [ 264.688535] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_0, syncid = 0, id = 0 17:05:50 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x2000, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x4000, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x40, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x7ff, 0x42) r6 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r7 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x9, 0x2) r8 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0xfffffffffffffff9, 0x1c5400) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="08002bbd7000ffdbdf25020000000c00050006000000000000003c00070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="080001000000000008000100000000000c00080000f0ffffffffffff08000100000000000c00020001000000000000000c000200d80b0000000000000800010000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000005c0)={0x1, &(0x7f0000000500)=[{}]}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000001c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, "6c362de6e1071cae5c75f706920d8e981b8afa26623e3dd6bb3e1776a5e32b5eaeb52b3b12029f6cf48f42d8fc3721452dd2c1748b40b9eaf9d6c2a5b76bf1a157b79f62d57f9fdb541ec67c70f4f5d86db929cc006989830f3b25f45e248355fedc019c7e07d1642ec540d74ed6aa3672e3c1f529c603c213348bba3d5e19e2"}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x140, r9, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x23f}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xad}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x15}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x18}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0xc0c0583b, &(0x7f0000000140)) 17:05:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:50 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, 0x0) 17:05:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f0000000280)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000300)="14a367e9a60df93db5e7b6e9be00a7b185a39088c48035e921003173258473cfe873b995181893e0f3d56d8a1fd452119ed9dff8e5e90e490bfeb296ef14b4c6e4b48dd6b512423e9934aea94e229ec3e0db1e4b48b66deae491d0343658569bbf711d3c15ea4c5150542b6d5bd4ba0af5dd21d38cccdedfe41099250940b2a37078947ce5a2de6d38d39582e54c77db0fdeac97e12fc46ec9", 0x99}, {&(0x7f00000003c0)="fb4e10f02a9ca46ed637661da7d0297d1e7e7c89e5fefa13163b5263babccee0c792ec13d8f733324a75138860cbf44567037ffdc920532489f7bab19b8ebf86758b3fae436e8f938014a7e780b5f69fe7c492ee73ae147e57c45b3b295ac0647f6c26a29639d68f14d71ea59e3e9f3e9f4f2d57c24d6009a0c5a9efac923040eb5459cd6852994809335dfbd31347b1df50a8c61515e1f3f547e449aa52cf03", 0xa0}, {&(0x7f0000000480)="12515e91371f258e0adfe774b4e1b41c4536d172d2290845acaab1a30d346d05bd5e0c56e1174b24fa65306667ab0697fbdfeca0cfd10d9c0950cb935ef0ba06d0cf63d234254b642ff83cf62d93aa93d947108dbe6c963adad09a2994f356", 0x5f}, {&(0x7f0000000500)="3c92e41edf301678d1465624b16b1966ccb35d295d3070d53b4b52887a8217c69188f8963467d5de0f168e44b3e502f896bcd29e7be3a60ed4b550d7a6dddb96e8d5043081affb49e159e5f512ba70c9b443937f5fd1d90e99aa1a609f018eccfe32ecc77ab3972c82bb1524244217b599a336b1efc6b0a23f9e9a663aa4988763996bb90c53140de1c052b2e82bb7ecee67e83893290dd7ce65c26917b0d7b7f5a3fb1550207ac1de24dca51053f3a263965c81cd4f2912287dcbb4ba4d31e89ebb18df2245fa94609a620ddb1f8a61ef941a624d3545", 0xd7}, {&(0x7f0000000600)="8cec1fd6806f9981b8e865ed90dfbd56b23243cca5aaae5bb71d34956f2eabd2e6424770778dd5e742d1afd4d40f7f4377b7921afabdf687db9a8bc914a748057caf7b4c2b8b8408c84775ae80c400a9a727438478f5e76414c575134ce6773520cff656567b8d13a1757de81b7aa3579b9d4e81ecba427fb733f5ef79f0768155340602e50d6d2219cbe57d78aa3717c998dc29e68dc712482719de6e53fb6383a71038", 0xa4}, {&(0x7f00000006c0)="cceeabc577267c9785059de6386db9db87226374bdeea3cc6735def1976f257b81e8fce07aa9c2cd6d4d86fb052385cc74fac0718b49d58243a349ccb2ea2c79f3aa34a073ee68b1661d1be112107e49a85bde8911f28dc5a186b766a987dcfa389d4dbf480959424983dd94e5ec95508c7700ccaf98e3aec13b8992561e033ce67bddac3e7456a260b39a5e8da749ffa7104a175c7f86b38c78e5bc4f780613d89e26be862f450dafb18346762c172b53dad6e47efe4c585f9a622d1454dbc71c8a6029a50c88dda5c8cb62d09e67084b8038b058b9b6a3384af2b63059294c269e96640b674a36", 0xe8}, {&(0x7f00000007c0)="a01f69b2c0ca4c", 0x7}, {&(0x7f0000000800)="52b4f6899f441bf4ef7815bfa87d8fefbc7d6a89a7378d1330b1cabb6b698e6b85fb32e75dab7bc1ce568fdfb8a4127007cffdb25d4799626023680e0147cdba88426de8cdec888ad222b7b83b757408b8cc919767c7", 0x56}], 0x8, &(0x7f0000000900)=[{0x78, 0x13f, 0x2, "319e1fd44d18536ee21d957644e3703176cd1fd7be04b29a8d6c9de1384ca2c821477077078b664bdd86f882999868482dd5519dd46d146de88f7546041887329011f0e0201599540447b1679b2d3aec5b0481c6e99a9bd059c6e6c599e43b3fc4755dbca20a92"}, {0xd8, 0x117, 0x5, "e7103cda5e734e4a1d2f0d846839fa1befdd0cb0ed4fb027c12a6079b3af50b37b2153ccabedba8912c2247c1b535e9eb0e3c993e9d7dd2a841e91dcd533b38a599e8ee48ebdc56c30e952aae62852ce84ac2c677c10d64613ad938b607d5152e6634a7e70cd4682dae7c44664c0593681aa156e17993400e05553e25cb32f143f78ffa6f25150bf5a6a1121cdacb30be9b3902d3475fb3a18d6252041eb3b82f64506514310f82ddf51ab208fed440b8baea0b1f16a56330d13536a1df2baabd533fe"}, {0x30, 0x118, 0x0, "3d0203f188f680f90ebfef60f61144829fb682a7cc00fd8b24ac9f"}, {0x40, 0x116, 0x100000001, "b6465c365211e508ee5d580c7dde9425334dd7fbe9b25de6fc6aef76180f5e469de3235e1b5e95348c8d0a1bc57200ac"}, {0xc0, 0x103, 0x4, "90bec15e0136c29880e4d6419560f64123c873b2f801def71d6fb1f3678baec39d65b2d87b55bb6f2c4b970945a5e1410c6089609dc03bdc8691c83674dd78b9fad6974af8598783b331309892f8d63e17fa5b49f97b9c9e04e72d59dd7d6f451060c63dd74bcc8b3058bd0cbc29e9d6961cff9410b664755e84c454b4de2b462df03e9e99ca8fa86675ab1ffa75ad0b3363fdd512f8133972d3a92392a9811b0c37ae8a21736116664c83211bdec859"}, {0x68, 0x1ff, 0x101, "c828af6456ecced516af1d9202698f106af2c7543b1dc8c307049c54289583f4d9064f5fd46097e32a71ab2ccf709451fa8abc4d07c3e32c7d47d6122a2876a39125467c6e2b305fc605f3deed512e623b"}, {0x58, 0x84, 0xd79, "7dbb7dd5246b9fdf6a7e45d630b2b620a6302d2581479655c076c08b9195cda099e22775b365a9455aa5507accebc9d641f0f89f3ef16ca9264ac519ad532fa1ecbaaa541d"}, {0xf0, 0x118, 0x1ff, "c458defb0e4b1b4313509676d9b01aee1d293da57b93bcbf6fcd18bce3ccf16f5a0b686271b6a6aa429185fd140e1834bb2dfae13af370f3bd3356bc0e82510c08a904e7fc6478bf66c3c99a730809b79d437c85efea277dfc4f3884da75a58f685f8d27ee49f050926fc41a1c0161a3fa966f621513574280285471a7b68dbf7ec990072c706c528f0c6c17283a5f9e45b5615ab6a6f9500bb56c22fd40e4d219896db4d6a8e532f0d2fd5fc491188a8d8aa95c700de3f66715d22988d7e5b5978fa086c482c4ab5c48126a0a7e89b10a588e1422eb360d6dcfd506"}, {0xb8, 0x11f, 0x0, "52a2c9fe903e7850ceb02d08288187b12d3805e3811aa195401acd1d51fbd9d461a039cf2be38cbfacb0ce1c8fa651e506fbb1f763cf1ee788f4461f0c8d54986a5dbaa6cfe8e01b6c8d3df43aeb0c81c83f48cd4e26d01f51eecc3db6aef35b12697f65e626732d0cc43efd3e0f9625a460c6c4596c655c850626110c059dfa38f969e31c3db86d1b392fee2c3a54c382760cc3f40b1c6e49765418922167ab198a36e3107212"}], 0x4e8, 0x4000000}, 0x80000001}], 0x1, 0x20004000) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = memfd_create(&(0x7f00000001c0)='/dev/ptmx\x00', 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)) r3 = syz_open_pts(r0, 0x200000) ioctl$TIOCEXCL(r3, 0x540c) syz_open_pts(r0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='/dev/ptmx\x00', 0x2) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000e40)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000e80)={r5}) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f0000000180)="036a5f22daee91fda15ffb289a546a2fa04b") 17:05:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d) fsetxattr$security_ima(r1, &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000500)=@sha1={0x1, "eb5872e416c6fbd3c4be4fe4c109e1924209a35f"}, 0x15, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'team_slave_0\x00'}, 0x18) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x2000f401, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xe803000000000000, 0x91ffffff]}, 0x10) r2 = userfaultfd(0x80800) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000240)={0xfffffffffffffff7, 0x0, 0x0, 'queue1\x00'}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000480)={0x0, 0x1, 0x1, 0x8}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x80000, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x18) readlinkat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/161, 0xa1) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000540)={0x7fffffff, 0xc39}) syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x85, 0x40002) shutdown(r1, 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r4) r5 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x240000) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000000c0)={0x9, 0x2, 0x10001, 0x7f, 0x1, 0x200000}) 17:05:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="3c000700030001001e00080000000000000000930cdc00002000000000000000200000004000000000000000"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x2e1, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs(r3, &(0x7f00000001c0)='net/connector\x00') 17:05:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:50 executing program 0 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) 17:05:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = semget(0x1, 0x7, 0x2) semctl$GETNCNT(r2, 0x3, 0xe, &(0x7f0000000000)=""/102) write(r1, &(0x7f0000000180)="ed3729361710b227aaec956179f43a83df84a62cbada9c1114ce3932307604536bfd33e277e1e8cb13e9a6062d2f89e0f68ee6299eb96e55a5ddbf869873483a114dbe1f7f57e30cd03a74854688ff57e3901f1093bb09aefedd06668d48cea71aba9a63ffc36124e26e921d598d03c08b3596d04425272b9bb9591b045cfc59d470b151d9eb1b3ffda78348694135b59414e48a5421dd897b45050b7a2f2e19246e9b8ae7915bc166decdf4038a78209f", 0xb1) 17:05:50 executing program 5: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)="b9637075716363742e75736167655f75f3b07c84751689f3736572", 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0xfffffffffffffdef) ioctl(r2, 0x800000000008992, &(0x7f0000000840)="dd3ba0e2a25f899ca27eae9cf66a94abef853ff4f761cce7fd8225588801fa12112f73b6c160563e0d348ea2498ad9323e3b824669fd5065d356017145dc1a38e7b3a695931fd8828491cd4feb6f875a3f61409faa9e6e26d18815b388ba549960b0692b0277a2432279bb46c63894f324e3ee2dd744e235bf4950d78f94b5e94740927ef002ffe8f9194476f42ac9e869eba854744b7faf6f14c57bc073294f63dbb7323a69d49240df548abd") r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030000120000000004000000000000000069127f0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424ff0e322903f5bad93ae7ef35b4c5f4e09e154fb199422ba5fbe2f6b026e54b8ee2a5a9d00401eff2d718a063a44b44a701cdd350cfcc7ac9b06cfb20478fd4dcdc7c526854077b000000000000000000000000000000ae10a0c4fe25798503b4130e7075aa60e703859159352a"], 0xbc) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274a1f1576385a885b764dc4babfdf01646fa6053ebc9"], 0x0, &(0x7f00000007c0)="feffffffffff19ff393200", 0x8000000000000002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xfffffffffffffffe, 0x3, 0x9, 0x6}, &(0x7f00000006c0)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB="54000000e742b9b81ac1f2ba886080678370a8e01c4f49f6"], 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000740)={0x0, 0x1000000000000, 0x2}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) r6 = memfd_create(&(0x7f0000000800)='/dev/ppp\x00', 0x8000000000000) syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x200, 0x40087f) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) ioctl(r5, 0xfffffffffffffbff, &(0x7f0000000e00)="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") io_submit(r8, 0x20000000000000c7, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r7, &(0x7f0000001000), 0xffffffffffffffe1, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xffff, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000e00)=ANY=[], 0x0, 0x840}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6) memfd_create(&(0x7f0000000a80)="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", 0xfffffffffffffff8) [ 265.150838] FAULT_INJECTION: forcing a failure. [ 265.150838] name failslab, interval 1, probability 0, space 0, times 1 [ 265.183911] audit: type=1400 audit(1543770351.026:32): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8025 comm="syz-executor4" [ 265.203018] CPU: 1 PID: 8020 Comm: syz-executor0 Not tainted 4.20.0-rc4+ #359 [ 265.210317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.219727] Call Trace: [ 265.222407] dump_stack+0x244/0x39d [ 265.226055] ? dump_stack_print_info.cold.1+0x20/0x20 [ 265.231339] ? __lock_acquire+0x62f/0x4c20 [ 265.235659] should_fail.cold.4+0xa/0x17 [ 265.239753] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 265.244867] ? mark_held_locks+0x130/0x130 [ 265.249128] ? mark_held_locks+0x130/0x130 17:05:51 executing program 3: mprotect(&(0x7f0000162000/0x2000)=nil, 0x2000, 0x3000008) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x400) getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) exit_group(0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000160000/0x4000)=nil, &(0x7f0000163000/0x1000)=nil, &(0x7f0000160000/0x2000)=nil, &(0x7f0000162000/0x3000)=nil, &(0x7f0000163000/0x2000)=nil, &(0x7f0000164000/0xa000)=nil, &(0x7f000016d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000167000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100)="362e6b06b837ce997c16b38c8d3cdaa320f2c4532e461e7fc790efcd8055926b36e5dcd4f87420b747990785e6a601110f530108a201033545c136ea2d812bf29623536033bec26f5f413f93aaf2f97c5b655e8ec75ec4f2bdd71af88ef793236b29a5ac131ce6aa5ed9ee5dc4f3a756036a643975da51cb21830f83dbaaa2d2a93f17e8969d816476a942e3e6d5f2fc70488fff543d0471ffe749e71bde1e132aba74c79331e2ba53d59692d024b2ce7bb4274e0b654f567c9e", 0xba, r0}, 0x68) [ 265.253389] ? print_usage_bug+0xc0/0xc0 [ 265.257469] ? find_held_lock+0x36/0x1c0 [ 265.261599] ? perf_trace_sched_process_exec+0x860/0x860 [ 265.267100] ? check_preemption_disabled+0x48/0x280 [ 265.272167] __should_failslab+0x124/0x180 [ 265.276467] should_failslab+0x9/0x14 [ 265.280342] kmem_cache_alloc_trace+0x2d7/0x750 [ 265.285058] __request_module+0x419/0xf0a [ 265.289219] ? mark_held_locks+0x130/0x130 [ 265.293465] ? free_modprobe_argv+0xa0/0xa0 [ 265.297810] ? lock_downgrade+0x900/0x900 [ 265.301987] ? check_preemption_disabled+0x48/0x280 [ 265.307039] ? mark_held_locks+0x130/0x130 [ 265.311318] ? print_usage_bug+0xc0/0xc0 [ 265.315390] ? __lock_acquire+0x62f/0x4c20 [ 265.319631] ? zap_class+0x640/0x640 [ 265.323403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.328952] ? refcount_sub_and_test_checked+0x203/0x310 [ 265.334417] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 265.339898] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 265.345480] ? apparmor_capable+0x355/0x6c0 17:05:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x21) write$P9_RREADDIR(r0, &(0x7f0000000100)={0x68, 0x29, 0x2, {0x3, [{{0x50, 0x0, 0x3}, 0x6f, 0x7, 0x7, './file0'}, {{0x4, 0x2, 0x2}, 0x0, 0x4, 0x7, './file0'}, {{0x85, 0x2, 0x6}, 0xffffffff, 0xf2, 0x7, './file0'}]}}, 0x68) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x100000000014, 0x4, 0x8, 0x100}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000440)="55f1", &(0x7f0000000340)=""/166}, 0x18) 17:05:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x4c0000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x100}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r3, 0x4}, &(0x7f0000000180)=0x8) listen(r1, 0x0) r4 = socket$inet(0x2, 0xc00, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffffff40, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x110, r5, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffffffff}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc3c95c1e982e5e41}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x13}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x40) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x0) dup3(r1, r4, 0x0) [ 265.349828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.355404] ? cap_capable+0x1f9/0x260 [ 265.359310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.364879] ? security_capable+0x99/0xc0 [ 265.369125] dev_load+0x1f7/0x210 [ 265.372662] wext_handle_ioctl+0x175/0x270 [ 265.376916] ? call_commit_handler+0x110/0x110 [ 265.381516] ? kasan_check_read+0x11/0x20 [ 265.385732] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 265.391040] ? rcu_softirq_qs+0x20/0x20 [ 265.391109] sock_ioctl+0x32c/0x690 [ 265.391128] ? dlci_ioctl_set+0x40/0x40 [ 265.391151] ? ksys_dup3+0x680/0x680 [ 265.391220] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 265.398946] ? dlci_ioctl_set+0x40/0x40 [ 265.415555] do_vfs_ioctl+0x1de/0x1790 [ 265.419474] ? __lock_is_held+0xb5/0x140 [ 265.423542] ? ioctl_preallocate+0x300/0x300 [ 265.423558] ? __fget_light+0x2e9/0x430 [ 265.423574] ? fget_raw+0x20/0x20 [ 265.423629] ? __sb_end_write+0xd9/0x110 [ 265.423651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 265.445032] ? fput+0x130/0x1a0 [ 265.448371] ? do_syscall_64+0x9a/0x820 17:05:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @data}) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980914, 0xfdfd}) 17:05:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x101040, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0xd4, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000600)=[@release], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x0, {0xffffffffffffe99c, 0x1fb4, "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", 0x32, 0x4, 0x2, 0x8, 0x9, 0x401, 0x6}, r4}}, 0x128) r5 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100810, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x6c, 0x0, &(0x7f0000000200)=[@enter_looper, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r5}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000040)=[@flat={0x0, 0x101, r6, 0x4}, @fd={0x66642a85, 0x0, r3, 0x0, 0x1}, @fda={0x66646185, 0x9, 0x3, 0x27}], &(0x7f00000000c0)=[0x0]}, 0x1}}, @increfs={0x40046304, 0x2}], 0x17, 0x0, &(0x7f0000000140)="9bc95d1049ca1d2cd4588aec08991c6f7762f080d1babc"}) [ 265.452377] ? do_syscall_64+0x9a/0x820 [ 265.456365] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 265.460964] ? security_file_ioctl+0x94/0xc0 [ 265.465387] ksys_ioctl+0xa9/0xd0 [ 265.468852] __x64_sys_ioctl+0x73/0xb0 [ 265.472770] do_syscall_64+0x1b9/0x820 [ 265.476667] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 265.482065] ? syscall_return_slowpath+0x5e0/0x5e0 [ 265.487006] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.491919] ? trace_hardirqs_on_caller+0x310/0x310 [ 265.496946] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 265.501983] ? prepare_exit_to_usermode+0x291/0x3b0 [ 265.507017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.511889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.517086] RIP: 0033:0x457569 [ 265.520292] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.538794] binder: 8042:8044 unknown command 0 [ 265.539203] RSP: 002b:00007f4b59afec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:05:51 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, [0x9, 0x8, 0x3]}) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) write$P9_RLERRORu(r0, &(0x7f0000000280)={0xac, 0x7, 0x2, {{0x9f, "707070312d59356da83f9d6211fb8baa3d5cc2f097050980c83769af7a721aeca976cd3f41ea7f1e1f0c38c9825f12b491aa5b57f9c614a2a91bb9a1413957f8c745a1a536df4ea42883f8bca0f266a48bb2939ea7a6736aa3143267f061479c58151fb0c7e329532551841a8a34dbd0af557e67e0772bdcc84d6d722d9f3a4d11bace3716c96b19812cc23a035cf59e0dfdc9bd891959d6997cd7511ca5ee"}, 0x3}}, 0xac) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) 17:05:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) [ 265.547766] binder: 8042:8044 ioctl c0306201 20012000 returned -22 [ 265.551623] RAX: ffffffffffffffda RBX: 00007f4b59afec90 RCX: 0000000000457569 [ 265.551633] RDX: 00000000200002c0 RSI: 0000000000008b0b RDI: 0000000000000003 [ 265.551657] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 265.551667] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b59aff6d4 [ 265.551676] R13: 00000000004c21d0 R14: 00000000004d38f8 R15: 0000000000000004 17:05:51 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) 17:05:51 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) [ 265.700172] binder: 8042:8044 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 265.735861] binder: 8042:8044 BC_FREE_BUFFER u0000000000000000 no match 17:05:51 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x5450, &(0x7f00000002c0)) [ 265.775090] binder: 8042:8044 got reply transaction with no transaction stack [ 265.811135] binder: 8042:8044 transaction failed 29201/-71, size 80-8 line 2741 17:05:51 executing program 5: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = socket$netlink(0x10, 0x3, 0x8) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000400)={0x5, &(0x7f0000000180)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000440)={r2}) socket$inet6(0xa, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x4}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x7, 0x101, 0xff}, &(0x7f0000000200)=0x10) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000100)={0x8, 0x1}) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000480)=0x1, &(0x7f00000004c0)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000500)) 17:05:51 executing program 3: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x4000, 0x0) write$P9_RVERSION(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="1300000078ffff090000002300395032303030eae3456c0631276851c4420fac4405471b9d930f724dcda650d8cb8deae5fcf852717cfa2e9eb58778d55fc995560154b7635a88d160db8f62a26dec1939c0526226bfc7aa681775962dff755c07f092ebd686cf525c834cd2e92f7d35f55ece1fea38245d6d38f3037869a52b13fd0d01d845d6fff819cc5bc753c2b8f51e8ff3f7cd20b6d31b20002cb828023af5c7686f28e636170cd2d1149ef89a7e2b65bc16d3e82669a7256c4acdad3ac79edba33319cd7bb2f56ff25ded28761e110cf9644f40060a1bdc8e6a206d3d96addd874b23f947bb32e33ffa1c6f82ea6ce11e354a9d7ab301"], 0x13) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x49168c7b827f233, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x101}, 0x1) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0xf, 0xfff, 0xb, 0x8, 0x1, 0xa950, 0x5, 0x34}}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000100)=0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x9a84, 0x9, 0x7, 0x3}, 'syz1\x00', 0x25}) read(r0, &(0x7f0000000200)=""/250, 0x78000) getsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000300)=""/186, &(0x7f0000000180)=0xba) 17:05:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 265.855905] binder: 8042:8061 Acquire 1 refcount change on invalid ref 0 ret -22 [ 265.870343] binder: 8042:8061 unknown command 0 [ 265.880496] binder: 8042:8061 ioctl c0306201 20012000 returned -22 17:05:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) [ 265.944332] binder: 8042:8061 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 265.971794] binder: 8042:8061 BC_FREE_BUFFER u0000000000000000 no match 17:05:51 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, [0x9, 0x8, 0x3]}) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) write$P9_RLERRORu(r0, &(0x7f0000000280)={0xac, 0x7, 0x2, {{0x9f, "707070312d59356da83f9d6211fb8baa3d5cc2f097050980c83769af7a721aeca976cd3f41ea7f1e1f0c38c9825f12b491aa5b57f9c614a2a91bb9a1413957f8c745a1a536df4ea42883f8bca0f266a48bb2939ea7a6736aa3143267f061479c58151fb0c7e329532551841a8a34dbd0af557e67e0772bdcc84d6d722d9f3a4d11bace3716c96b19812cc23a035cf59e0dfdc9bd891959d6997cd7511ca5ee"}, 0x3}}, 0xac) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) 17:05:51 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0xc020660b, &(0x7f00000002c0)) [ 266.007720] binder: 8042:8061 got reply transaction with no transaction stack [ 266.021542] binder: 8042:8061 transaction failed 29201/-71, size 80-8 line 2741 [ 266.030560] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.045426] binder: undelivered TRANSACTION_ERROR: 29201 17:05:51 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r1) ptrace(0x10, r0) ptrace$getregset(0x4208, r0, 0x2, &(0x7f0000000280)={&(0x7f0000000100)}) 17:05:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 17:05:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:05:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x480000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000280)) 17:05:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0xc0045878, &(0x7f00000002c0)) 17:05:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000240)=""/111) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) 17:05:52 executing program 5: r0 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)="7917d5b156fd15219544ece8cb7d7f4056267b5a69b54d9058588eab7a654403ab6a6787255253c7ce3df9e2a454bb73687fd3dac6e447989a94383b883e89071f342ab7fe86cc25d59c78455e4e25a95ea1b26b7eed5d0a06094c524ec045fd67b6e72b422000b4fd29d313dda15a3f8bbe299ffcd0aba343b2b2c6d794828d08ee91d676eda5091100400c087963c4ba55c45f39c5f4bba648994b59054a1a4694d9941f1cf94d2090f009f197b13163a97ecd1c71ae5a5222", 0xba, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0x5) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@nodecompose='nodecompose'}]}) r1 = semget(0x2, 0x4, 0xe) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)=""/215) [ 266.367320] encrypted_key: master key parameter 'LRNÀEýg¶ç+B' is invalid [ 266.404752] hfsplus: unable to find HFS+ superblock [ 266.447947] tls_set_device_offload_rx: netdev lo with no TLS offload [ 266.472381] encrypted_key: master key parameter 'LRNÀEýg¶ç+B' is invalid [ 266.497946] hfsplus: unable to find HFS+ superblock [ 266.658660] tls_set_device_offload_rx: netdev lo with no TLS offload 17:05:52 executing program 3: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000002c0)={0xb, {0x80000000, 0x8001, 0x9a8c, 0x100000001}}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xf, 0x3ffff) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x0, 0x6, 0x3, 0x7}, 0x1, 0x6, 0x20}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000240)={0x7, 0x12, 0x5, 0x6, "3da316eaf3e63344d200de95c32af545a2206de07ce1ce95f9dceac7e9d16285"}) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x80323, 0x104}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000300)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@dev, @in6=@ipv4={[], [], @loopback}}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) 17:05:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x2, &(0x7f00000002c0)) 17:05:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:05:52 executing program 5: fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r0 = socket(0x10, 0x20001000000003, 0x0) write(r0, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22) r1 = socket$netlink(0x10, 0x3, 0x18) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000480)=r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x3b2, 0x0, 0x800}) fcntl$addseals(r2, 0x409, 0xe) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94) sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x8}, {0x306, @local}, 0x20, {0x2, 0x4e21, @loopback}, 'lo\x00'}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000240)=0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000200)) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372}) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0xc1, {0x89, 0x1, 0x6, 0x0, 0x7ff, 0x607d}}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r6, @ANYRES64=r0]) 17:05:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000240)=""/111) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) [ 266.804673] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'. 17:05:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000340)={0x7, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x0) 17:05:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:05:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b2b, &(0x7f00000002c0)) 17:05:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x10, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x2ec) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x17, 0xfa00, {{0x2, 0xfd, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0xfd830000]}}, {0x2, 0x0, 0x2f4, @local={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff]}}, r1}}, 0x48) [ 266.930702] tls_set_device_offload_rx: netdev lo with no TLS offload [ 266.931219] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value 17:05:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') bind$llc(r1, &(0x7f0000000040)={0x1a, 0x103, 0x1, 0xf3af, 0x4, 0x4, @dev={[], 0x10}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, [{0xa000000}]}]}, 0x24}}, 0x0) 17:05:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x0, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x0, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x40049409, &(0x7f00000002c0)) [ 267.176393] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'. 17:05:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x1fff, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0xf3, 0x1, 0x8, &(0x7f0000ffd000/0x3000)=nil, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000280)=""/121, &(0x7f0000000040)=0x79) r1 = socket$inet6(0xa, 0x3, 0x100000400000003a) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x400, 0x10002) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ftruncate(r0, 0x7) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) 17:05:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffc5, 0x0, 0x0, 0xffffffffa0008000}}, &(0x7f0000000080)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 17:05:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x0, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000240)=""/111) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) 17:05:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0xc0189436, &(0x7f00000002c0)) 17:05:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:53 executing program 3: socketpair$unix(0x1, 0x80000008000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x4e6, 0x0, 0x0, &(0x7f0000000680)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:05:53 executing program 1: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0xab) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000240)={0x2, 0x7, 0x15fddb78, 0x9, 0xfffffffffffffff7}) r1 = socket$inet6(0xa, 0x803, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x54, 0x30, 0x701, 0x0, 0x0, {}, [{0x40, 0x1, @m_connmark={0x3c, 0x0, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c}}, {0x4}}}}]}, 0x54}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924924f0, 0x0) sendto$unix(r2, &(0x7f0000000000)="8d7e018c0812e86637e866961e30c82e729c38", 0x13, 0x80, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 17:05:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x3f}}, 0x272, 0x3f, 0x8, 0x7ff, 0x56f}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r3}, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="0f011fea2738000057003e67360f0134f0f699bf00000066b8ed008ed0f866dc7800c4c15016e00fc76d00b805000000b9040000000f01d9", 0x38}], 0x1, 0x24, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:05:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:53 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x42001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000380)={{0xa, 0x3, 0x3, 0x69a, '\x00', 0x8}, 0x0, [0x6, 0x7fffffff, 0x683e40ec, 0x4a1195c6, 0x9, 0x100, 0x884, 0x5, 0x9, 0x7, 0x1, 0x4f83, 0x100000001, 0xff, 0x4, 0xd7, 0x32, 0x5, 0xfffffffffffffffb, 0x5, 0x101, 0x3, 0x9, 0x3, 0x7ff, 0x6bba00000000000, 0x100, 0x0, 0x4, 0x0, 0xc9ad, 0x7, 0x6, 0x20, 0x5, 0x8000000000000, 0xfe, 0x300, 0x2, 0x46, 0x0, 0x4, 0x5, 0x6, 0x401, 0x4, 0x4, 0x6b6, 0x4, 0x80, 0x8000, 0x7, 0x8, 0x604, 0x7, 0xfffffffffffffff7, 0xff, 0x8, 0x6, 0x10000000, 0x4, 0x358000000000, 0x8000, 0xfff, 0x0, 0x9, 0xcac, 0x1000, 0x5, 0xc, 0x3, 0x3, 0x6, 0x6, 0x1f, 0x200, 0x0, 0x80000000, 0x2, 0x3, 0x6, 0xfffffffffffff800, 0x0, 0x10001, 0x6, 0x3, 0x5, 0x10000, 0x3, 0x8000, 0x100000000, 0x6, 0x9, 0x7e, 0x43, 0x3, 0x3, 0x4, 0x8001, 0x2, 0xf0, 0x7f, 0x1, 0x2, 0x6, 0x9, 0x1, 0xfa, 0x8, 0x2, 0x8, 0x3, 0x2, 0x3f, 0x600000000000000, 0xfffffffffffffffe, 0x1, 0x1, 0x8001, 0x6, 0x8001, 0x4d, 0x3f, 0x7fff, 0x4, 0xfff, 0x100, 0xfffffffffffff801], {0x77359400}}) clock_gettime(0x1, &(0x7f0000000340)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{r0, r1/1000+30000}, {r3, r4/1000+10000}}) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000000)) mount(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="d165142033fd06f9fe92aeab51df1f0646671ef41bb8ca6f19352888015eeb64d240fc080c9f678e3b746610610034be96591ebf9c1d54b2e7b76276380c7aaa1a797b9483233a45d058c7f0b29e669a84b172e06e5937a8009c170371812c91af6a9fd7858975f2c3603a748ea8cc3185313f812e0ee84df12378c6f4712a85b267f6a77d19"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0xa3020, 0x0) 17:05:53 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x80ffffff, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xfffffde7, &(0x7f0000003080)=""/4096, 0x0, 0x0, [], 0x0, 0x11}, 0xfd64) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") 17:05:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x5451, &(0x7f00000002c0)) 17:05:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:53 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz'}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xecfcd93c16f24c6a, 0x813, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="62775352edbf01d493a9a8f1fecfb2f7d6e34df5c13dfe709d072fa8c6b735f21d2d14012fa1f44ca1ca5bf57b52bc59d06e57c407"], &(0x7f00000001c0)=0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000240)=0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0xce27fd0e5270a155, 0x0) timer_create(0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000500), &(0x7f0000000600)}}, &(0x7f0000000700)) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@nfc, &(0x7f0000000300)=0x80) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f00000003c0)={0x0, 0x1, 0xa7b, 0x1, [], [], [], 0x0, 0x0, 0x7fffffff, 0xeb, "7b7593a591599c540c4749f950a83b1a"}) [ 267.878777] tls_set_device_offload_rx: netdev lo with no TLS offload 17:05:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0x18, 0x249e1a, 0x8000000001}, 0x2c) r1 = dup2(r0, r0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x101000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000002c0)={r4, 0x40}, &(0x7f0000000300)=0x8) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000480)=""/206) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)=0xf573) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000380)) sendmsg$nl_netfilter(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x8c, 0x2, 0xb, 0x200, 0x70bd27, 0x25dfdbfb, {0xf, 0x0, 0x5}, [@generic="3ae49263fafe131d3b3f03077413c5f330b4e2f3e0f937253d1dfe3e674046738c21fdfa04f415285e63dd1b6af756d49de55bdcd7d292c07aeddd7d7a889af5a4fcf149412c44352e200c8937ed9ede14884de976efba17748f2f9ca1fdc69e5f0f96813b8900c5168b3ab7d461c98c3ab0df8bef0bcd"]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x3f0000005e1e0100}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000000c0), 0x0, 0x1}, 0x20) 17:05:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000000000a) clone(0x2102801ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={"6e6174000000000100", 0x19, 0x1, 0x130, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth1\x00', '\x00', 'bcsh0\x00', 'veth0\x00', @dev, [], @remote, [], 0x70, 0x70, 0xa0}}, @common=@STANDARD={'\x00', 0x8}}]}]}, 0x1a8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x20881, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000280)={0x6003, 0x2, 0x9, 0x1000, 0x2}) 17:05:54 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x18000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0x100000001}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) io_setup(0x0, &(0x7f0000000540)) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x801, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x4041}, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r3 = socket(0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e23, 0x0, @local, 0x1}, {0xa, 0x4e23, 0x0, @empty, 0x351}, 0x0, [0x5, 0x9, 0x987, 0x7, 0x7, 0x0, 0xffffffffffffffe0, 0xffffffffffff2271]}, 0x5c) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000580)={0x0, 0x0}) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x9, 0x4) 17:05:54 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b12, &(0x7f00000002c0)) 17:05:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d}, 0x14}}, 0x0) 17:05:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d}, 0x14}}, 0x0) 17:05:54 executing program 5: pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00') syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240), &(0x7f0000000280), 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xd) r3 = dup(r1) unshare(0x40000000) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000440)=r3) sysinfo(&(0x7f0000000500)=""/94) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0xffffffffffffff32, 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000005c0)={0x0, 0xda79, 0x401, 0x69697e96, [], [], [], 0x2, 0x2, 0x0, 0x3ff, "ee65efcac0f92cb8bf53fa68bcc1ba78"}) clone(0x400000000020000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r4 = getpid() renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f00000002c0)='./file0/bus\x00', 0x3) fcntl$setsig(r1, 0xa, 0x3) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797a3184d351d02a1683a22f50d3173a79680c45f6a5b222fa456af1c2bb7c3842ec772c1b5909199cec77771274920a17"], 0x1a) creat(&(0x7f0000000580)='./file0/file0\x00', 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl(r3, 0x0, &(0x7f00000016c0)="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") perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001680)) [ 268.517330] QAT: Invalid ioctl 17:05:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d}, 0x14}}, 0x0) 17:05:54 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x5460, &(0x7f00000002c0)) [ 268.855678] ion_buffer_destroy: buffer still mapped in the kernel [ 268.868065] print_req_error: 38 callbacks suppressed [ 268.868075] print_req_error: I/O error, dev loop0, sector 0 [ 268.879059] buffer_io_error: 37 callbacks suppressed [ 268.879069] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 268.892222] print_req_error: I/O error, dev loop0, sector 8 [ 268.898065] Buffer I/O error on dev loop0, logical block 1, lost async page write 17:05:54 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) [ 268.905836] print_req_error: I/O error, dev loop0, sector 16 [ 268.911808] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 268.919518] print_req_error: I/O error, dev loop0, sector 24 [ 268.925437] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 268.933180] print_req_error: I/O error, dev loop0, sector 32 [ 268.938987] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 268.939042] print_req_error: I/O error, dev loop0, sector 40 [ 268.939058] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 268.939097] print_req_error: I/O error, dev loop0, sector 48 [ 268.966216] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 268.967524] print_req_error: I/O error, dev loop0, sector 56 [ 268.973984] print_req_error: I/O error, dev loop0, sector 64 [ 268.980404] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 268.986667] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 268.993779] print_req_error: I/O error, dev loop0, sector 72 [ 269.001314] Buffer I/O error on dev loop0, logical block 10, lost async page write 17:05:54 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x4020940d, &(0x7f00000002c0)) [ 269.054116] FAULT_INJECTION: forcing a failure. [ 269.054116] name failslab, interval 1, probability 0, space 0, times 0 [ 269.085911] IPVS: ftp: loaded support on port[0] = 21 [ 269.186729] loop5: p1 p2 p3 p4 < > [ 269.200144] CPU: 0 PID: 8350 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #359 [ 269.207436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.207445] Call Trace: [ 269.207474] dump_stack+0x244/0x39d [ 269.207499] ? dump_stack_print_info.cold.1+0x20/0x20 [ 269.207531] should_fail.cold.4+0xa/0x17 [ 269.207557] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 269.237407] ? lock_downgrade+0x900/0x900 [ 269.241581] ? check_preemption_disabled+0x48/0x280 [ 269.246628] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 269.251561] ? kasan_check_read+0x11/0x20 [ 269.251621] ? __netlink_insert+0xd2c/0x13b0 [ 269.251637] ? __netlink_insert+0xd2c/0x13b0 [ 269.251658] ? find_held_lock+0x36/0x1c0 [ 269.251693] ? perf_trace_sched_process_exec+0x860/0x860 [ 269.251718] __should_failslab+0x124/0x180 [ 269.251745] should_failslab+0x9/0x14 [ 269.251779] kmem_cache_alloc_node+0x26e/0x730 [ 269.286780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.292371] ? check_preemption_disabled+0x48/0x280 [ 269.297428] __alloc_skb+0x119/0x770 [ 269.301160] ? netdev_alloc_frag+0x1f0/0x1f0 [ 269.305571] ? __release_sock+0x3a0/0x3a0 [ 269.309769] ? __local_bh_enable_ip+0x160/0x260 [ 269.314457] ? netlink_insert+0xfe/0x240 [ 269.318548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.324090] ? netlink_autobind.isra.34+0x232/0x310 [ 269.329117] netlink_sendmsg+0xb29/0xfc0 [ 269.333197] ? netlink_unicast+0x760/0x760 [ 269.337434] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 269.342377] ? apparmor_socket_sendmsg+0x29/0x30 [ 269.347140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.352687] ? security_socket_sendmsg+0x94/0xc0 [ 269.357467] ? netlink_unicast+0x760/0x760 [ 269.361709] sock_sendmsg+0xd5/0x120 [ 269.365455] ___sys_sendmsg+0x7fd/0x930 [ 269.369461] ? copy_msghdr_from_user+0x580/0x580 [ 269.374243] ? lock_downgrade+0x900/0x900 [ 269.378437] ? proc_fail_nth_write+0x9e/0x210 [ 269.382946] ? __fget_light+0x2e9/0x430 [ 269.386927] ? fget_raw+0x20/0x20 [ 269.390383] ? find_held_lock+0x36/0x1c0 [ 269.394453] ? kasan_check_write+0x14/0x20 [ 269.398693] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 269.403634] ? wait_for_completion+0x8a0/0x8a0 [ 269.408231] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.413803] ? sockfd_lookup_light+0xc5/0x160 [ 269.418327] __sys_sendmsg+0x11d/0x280 [ 269.422252] ? __ia32_sys_shutdown+0x80/0x80 [ 269.426664] ? __sb_end_write+0xd9/0x110 [ 269.430747] ? fput+0x130/0x1a0 [ 269.434038] ? do_syscall_64+0x9a/0x820 [ 269.438019] ? do_syscall_64+0x9a/0x820 [ 269.442012] ? trace_hardirqs_off_caller+0x310/0x310 [ 269.447126] __x64_sys_sendmsg+0x78/0xb0 [ 269.451193] do_syscall_64+0x1b9/0x820 [ 269.455108] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 269.460505] ? syscall_return_slowpath+0x5e0/0x5e0 [ 269.465444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.470292] ? trace_hardirqs_on_caller+0x310/0x310 [ 269.475314] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 269.480337] ? prepare_exit_to_usermode+0x291/0x3b0 [ 269.485365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.490221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.495431] RIP: 0033:0x457569 [ 269.498629] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.517551] RSP: 002b:00007fb57c4edc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.525276] RAX: ffffffffffffffda RBX: 00007fb57c4edc90 RCX: 0000000000457569 [ 269.532560] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 269.539840] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 269.547112] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb57c4ee6d4 [ 269.554382] R13: 00000000004c3fd7 R14: 00000000004d6808 R15: 0000000000000004 [ 269.818377] IPVS: ftp: loaded support on port[0] = 21 17:05:56 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="23767d2aa1c76e6574316e6f646576656d3100", 0x0) write$UHID_CREATE2(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)) 17:05:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b35, &(0x7f00000002c0)) 17:05:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0x18, 0x249e1a, 0x8000000001}, 0x2c) r1 = dup2(r0, r0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x101000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000002c0)={r4, 0x40}, &(0x7f0000000300)=0x8) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000480)=""/206) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)=0xf573) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000380)) sendmsg$nl_netfilter(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x8c, 0x2, 0xb, 0x200, 0x70bd27, 0x25dfdbfb, {0xf, 0x0, 0x5}, [@generic="3ae49263fafe131d3b3f03077413c5f330b4e2f3e0f937253d1dfe3e674046738c21fdfa04f415285e63dd1b6af756d49de55bdcd7d292c07aeddd7d7a889af5a4fcf149412c44352e200c8937ed9ede14884de976efba17748f2f9ca1fdc69e5f0f96813b8900c5168b3ab7d461c98c3ab0df8bef0bcd"]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x3f0000005e1e0100}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000000c0), 0x0, 0x1}, 0x20) 17:05:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) socketpair(0xa, 0x7, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) write$P9_RWRITE(r3, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x6db}, 0xb) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000011001903000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0000390452d2ee7e122c9a030d000000000004001a00"], 0x24}}, 0x0) 17:05:56 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000002c0)) [ 270.218822] FAULT_INJECTION: forcing a failure. [ 270.218822] name failslab, interval 1, probability 0, space 0, times 0 [ 270.316074] CPU: 0 PID: 8384 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #359 [ 270.323396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.323405] Call Trace: [ 270.323432] dump_stack+0x244/0x39d [ 270.323460] ? dump_stack_print_info.cold.1+0x20/0x20 [ 270.323494] should_fail.cold.4+0xa/0x17 [ 270.323520] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 270.323599] ? __save_stack_trace+0x8d/0xf0 [ 270.323636] ? save_stack+0xa9/0xd0 [ 270.323656] ? save_stack+0x43/0xd0 [ 270.323680] ? find_held_lock+0x36/0x1c0 [ 270.323747] ? perf_trace_sched_process_exec+0x860/0x860 [ 270.335810] ? check_preemption_disabled+0x48/0x280 [ 270.335833] __should_failslab+0x124/0x180 [ 270.335853] should_failslab+0x9/0x14 [ 270.335870] kmem_cache_alloc_node_trace+0x270/0x740 [ 270.335900] __kmalloc_node_track_caller+0x3c/0x70 [ 270.335921] __kmalloc_reserve.isra.40+0x41/0xe0 [ 270.344752] __alloc_skb+0x155/0x770 [ 270.344780] ? netdev_alloc_frag+0x1f0/0x1f0 [ 270.344816] ? __release_sock+0x3a0/0x3a0 [ 270.353952] ? __local_bh_enable_ip+0x160/0x260 [ 270.353977] ? netlink_insert+0xfe/0x240 [ 270.353999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.354015] ? netlink_autobind.isra.34+0x232/0x310 [ 270.354038] netlink_sendmsg+0xb29/0xfc0 [ 270.354062] ? netlink_unicast+0x760/0x760 [ 270.361998] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 270.362018] ? apparmor_socket_sendmsg+0x29/0x30 [ 270.362035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.362053] ? security_socket_sendmsg+0x94/0xc0 17:05:56 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) [ 270.362068] ? netlink_unicast+0x760/0x760 [ 270.362088] sock_sendmsg+0xd5/0x120 [ 270.362106] ___sys_sendmsg+0x7fd/0x930 [ 270.375254] ? copy_msghdr_from_user+0x580/0x580 [ 270.375290] ? lock_downgrade+0x900/0x900 [ 270.375311] ? proc_fail_nth_write+0x9e/0x210 [ 270.375331] ? __fget_light+0x2e9/0x430 [ 270.393443] ? fget_raw+0x20/0x20 [ 270.393458] ? find_held_lock+0x36/0x1c0 [ 270.393481] ? kasan_check_write+0x14/0x20 [ 270.393500] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 270.393522] ? wait_for_completion+0x8a0/0x8a0 [ 270.393548] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 270.403205] ? sockfd_lookup_light+0xc5/0x160 [ 270.403226] __sys_sendmsg+0x11d/0x280 [ 270.403245] ? __ia32_sys_shutdown+0x80/0x80 [ 270.403263] ? __sb_end_write+0xd9/0x110 [ 270.403285] ? fput+0x130/0x1a0 [ 270.403303] ? do_syscall_64+0x9a/0x820 [ 270.403322] ? do_syscall_64+0x9a/0x820 [ 270.411446] ? trace_hardirqs_off_caller+0x310/0x310 [ 270.411471] __x64_sys_sendmsg+0x78/0xb0 [ 270.411490] do_syscall_64+0x1b9/0x820 [ 270.411505] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 270.411526] ? syscall_return_slowpath+0x5e0/0x5e0 [ 270.420318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.420365] ? trace_hardirqs_on_caller+0x310/0x310 [ 270.420382] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 270.420400] ? prepare_exit_to_usermode+0x291/0x3b0 [ 270.420421] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.420443] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.420463] RIP: 0033:0x457569 [ 270.430044] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.430052] RSP: 002b:00007fb57c4edc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.430068] RAX: ffffffffffffffda RBX: 00007fb57c4edc90 RCX: 0000000000457569 [ 270.430078] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 270.430087] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.430097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb57c4ee6d4 [ 270.430106] R13: 00000000004c3fd7 R14: 00000000004d6808 R15: 0000000000000004 [ 270.988705] FAULT_INJECTION: forcing a failure. [ 270.988705] name failslab, interval 1, probability 0, space 0, times 0 [ 271.001305] CPU: 0 PID: 8402 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #359 [ 271.008610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.017962] Call Trace: [ 271.020573] dump_stack+0x244/0x39d [ 271.024246] ? dump_stack_print_info.cold.1+0x20/0x20 [ 271.029466] should_fail.cold.4+0xa/0x17 [ 271.033532] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 271.038466] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.043676] ? find_held_lock+0x36/0x1c0 [ 271.047749] ? zap_class+0x640/0x640 [ 271.051480] ? __mutex_lock+0x854/0x16f0 [ 271.055544] ? lock_downgrade+0x900/0x900 [ 271.059709] ? find_held_lock+0x36/0x1c0 [ 271.063774] ? __lock_is_held+0xb5/0x140 [ 271.067830] ? perf_trace_sched_process_exec+0x860/0x860 [ 271.073293] __should_failslab+0x124/0x180 [ 271.077550] should_failslab+0x9/0x14 [ 271.081338] kmem_cache_alloc_node+0x26e/0x730 [ 271.085911] __alloc_skb+0x119/0x770 [ 271.089616] ? netdev_alloc_frag+0x1f0/0x1f0 [ 271.094042] ? __mutex_lock+0x85e/0x16f0 [ 271.098102] ? genl_rcv_msg+0x13a/0x168 [ 271.102131] nl80211_get_reg_do+0xa4/0xa80 [ 271.106365] ? cfg80211_cqm_rssi_notify+0x7e0/0x7e0 [ 271.111389] ? mutex_lock_nested+0x16/0x20 [ 271.115609] ? mutex_lock_nested+0x16/0x20 [ 271.119834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 271.125359] ? nl80211_pre_doit+0xa7/0x640 [ 271.129583] genl_family_rcv_msg+0x8a7/0x11a0 [ 271.134072] ? genl_unregister_family+0x8a0/0x8a0 [ 271.138919] ? lock_downgrade+0x900/0x900 [ 271.143087] ? check_preemption_disabled+0x48/0x280 [ 271.148108] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 271.153042] ? kasan_check_read+0x11/0x20 [ 271.157183] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 271.162447] ? rcu_softirq_qs+0x20/0x20 [ 271.166441] genl_rcv_msg+0xc6/0x168 [ 271.170157] netlink_rcv_skb+0x172/0x440 [ 271.174220] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 271.178976] ? netlink_ack+0xb80/0xb80 [ 271.182848] ? down_read+0x8d/0x120 [ 271.186465] genl_rcv+0x28/0x40 [ 271.189729] netlink_unicast+0x5a5/0x760 [ 271.193791] ? netlink_attachskb+0x9a0/0x9a0 [ 271.198192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.203724] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 271.208751] netlink_sendmsg+0xa18/0xfc0 [ 271.212822] ? netlink_unicast+0x760/0x760 [ 271.217059] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 271.221988] ? apparmor_socket_sendmsg+0x29/0x30 [ 271.226746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.232281] ? security_socket_sendmsg+0x94/0xc0 [ 271.237023] ? netlink_unicast+0x760/0x760 [ 271.241267] sock_sendmsg+0xd5/0x120 [ 271.244981] ___sys_sendmsg+0x7fd/0x930 [ 271.248947] ? copy_msghdr_from_user+0x580/0x580 [ 271.253690] ? lock_downgrade+0x900/0x900 [ 271.257842] ? proc_fail_nth_write+0x9e/0x210 [ 271.262343] ? __fget_light+0x2e9/0x430 [ 271.266305] ? fget_raw+0x20/0x20 [ 271.269768] ? find_held_lock+0x36/0x1c0 [ 271.273834] ? kasan_check_write+0x14/0x20 [ 271.278069] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 271.282999] ? wait_for_completion+0x8a0/0x8a0 [ 271.287570] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.293095] ? sockfd_lookup_light+0xc5/0x160 [ 271.297626] __sys_sendmsg+0x11d/0x280 [ 271.301512] ? __ia32_sys_shutdown+0x80/0x80 [ 271.305920] ? __sb_end_write+0xd9/0x110 [ 271.309968] ? fput+0x130/0x1a0 [ 271.313237] ? do_syscall_64+0x9a/0x820 [ 271.317197] ? do_syscall_64+0x9a/0x820 [ 271.321165] ? trace_hardirqs_off_caller+0x310/0x310 [ 271.326274] __x64_sys_sendmsg+0x78/0xb0 [ 271.330348] do_syscall_64+0x1b9/0x820 [ 271.334229] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 271.339593] ? syscall_return_slowpath+0x5e0/0x5e0 [ 271.344522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.349367] ? trace_hardirqs_on_caller+0x310/0x310 [ 271.354376] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 271.359394] ? prepare_exit_to_usermode+0x291/0x3b0 [ 271.364418] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.369265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.374443] RIP: 0033:0x457569 [ 271.377634] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.396527] RSP: 002b:00007fb57c4edc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.404235] RAX: ffffffffffffffda RBX: 00007fb57c4edc90 RCX: 0000000000457569 [ 271.411520] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 271.418774] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 271.426030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb57c4ee6d4 [ 271.433285] R13: 00000000004c3fd7 R14: 00000000004d6808 R15: 0000000000000004 17:05:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x8, [@local, @broadcast, @local, @local, @empty, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote]}) 17:05:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)) 17:05:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000480)=""/255, 0x97}], 0x1) dup2(r0, r1) r2 = gettid() tkill(r2, 0x1000000000016) 17:05:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000080)={{0x77359400}, {0x0, r1/1000+30000}}, 0x0) setitimer(0x0, 0x0, 0x0) 17:05:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x100, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto(r0, &(0x7f0000000340)="7589f0da892457ee3604b3303d1176a13baaebcab9eba210a07246127b486e98e3029104796460b1dfef95b0368b0b19c338b1306db81cea8edfc66a6212607f01496a9963ef1a83caee01bd72e85c40dd287a0755ca6b801959badb1253ae3a85a47b0ec39b760f063d4756614fc1d3e68b9f4f32be2652ce67d2e776b433331ad58b9d70c0f258e00b9d56ff7ecb14e6050c70da00c5006b8cffd8f169f2861e2df3efe13056d1babf3dde7a2a1a5cc8cb207e10f61e215d2935a43c0db2cef01e23933caac8c3ea44870dd6b4e7e87ec42d4a8cfe2940ddd6a1b68a8b114bf5fc57a24b948eed855edf063898f64a0ce82678a3be37f9d56de9535406c2810de8f314a51ae300d351825ded003652d5ab0b30f7ced329324632f710076a9f79c3221e90ec03803b6ecd5595646214e391a3cfd74ca98d098d3fac9fccd6b0905b03f3c6a50eeef0e61cd07ad75b39267a304fb12bdde7b4d06e64a42aee0504ae42f36f13d5e3002975f648e632ec25aa10429d84a078914a28c47ae0b143f43b100790646f1f7bb25191ab9d0b210e18f5610749521e385a7dc15b6b946baa49a0b35b4c56947b57279e5b5e3d04baab408442f3ba124cc70dadeb8a564eb796fb7975859f50a8a41ebc9baf1ab48855b54d47884126e66d890d714fd57c5dec487bfb5d94c839d9bbe57e70dead6a26d44af14b53a620424cb3404a7e3961c7ff568f6345f6cc3a5c49be7e76a33e652acf88b3bbbe6f83bc49621654627eedc41393250fdc3f997f6aa3f4f8ba8184c8fc5fe9bd37ca8081077b72e93af80af9bf4a47f943df12bc25ca1f25fb5bc39fbe685aed03e20269fa1ceda0d1c31754b974081a14ec6801ab751acc29aff079fcde12237555463bf13eb77e16eeb6ae8aa7fe36806826fb5e4f86fa757ba66c7dc0ac4ffdfe411db3a40b1d0d6a79b1585122cc1d0c3a18f0aab8ac72942451f67ec6cc6fed353239f10a99c2a836b90320b803c04f931e6ffdad5d3dda56e62d379cd76eb87b8c9470cee2348913f2260e3ae0213183c4898c3d64bb826a5d227cc05e005538b1ac4e70f6fdda5e16b67a471c0d655e21c7dd5aa647058146104cad84a32002de9857704c66c162f866795076a503f69192fd49ffd327ac385012bc66edb2e14f0af6b53feeb6d8271391edd74396a986baa072bdf5221e829c7d8241cfb1c866112c8ca033e34fd845d84c5bc054646057fa523f757dcf484c8747314c5a1f5f11b3e0ba45edd10e09e9e2925fe4229bd155a1cc62a8928686d6518b3f0da7d39a2b26368bd07f9a3222ce9b3fe41b12988b004543879ac863842e0a81ee7b9ebc1a98bdb020d617c00953a9cd98632b7b2024f6be6cb8795688c131950a77579850aef05278eb5e7692a6bb52200a0d37327ceff14d7f75fa6f6058197caf451ff520a80e05231db86fd254da587cd70d0b8c74b1a81be258aa355968d5730c0c5234a85dde00fabc96ecfe2d483ebe79487124d5bc77b03fefba765c138d0302e2d3c65dbf6f2833aea785a0c66ec6cd7ad463aa158a23185ee494f886e35cc7051fab1ebd22751200c3790e090d122490a330df980e1e60f9930bca4410adc36e4fb5be6241e3db72972371e6da890306ac9a3bc9b5ce6ef3a71a5ce0652a17433edbc46da151d1cecf946a52c9cd9dba5021924e6f3d038d10d27d424e152e852bd1095bdc533c6b9f43f6e9ef2714d7e6c26da09ad3f6d22dc8ff14d3546a339e3be4751b422054be4199bc05d6a71f4a236bf9e5681e23e1a4b9943ebeb1424f89596afed8c61d3c7e6554959fefd8a1923c3256199c7e3c4142108bb6c817a44e1de7621f0311adf5a9fcf3e209b9af7183b4c42d32586d5ab7a9d4d32f482aa6aee9af9ebe79d0dca8e0d716903f468f48c71c92a4f30da7dad9781a153e71d23d082b419e5f7bf1f956a7aa3a22ab66b0a00333c1c085679910e8a66994dc09f142907597b170390ec0d5a3ab0c6d22dd6a9b92f598d884d65235e47fb8459a5014f1c95f5bcaebb0066620cb890134fee3f03ecf530f9e4533b8dbfa2a5a8405e127b4164fe8d027e1a3a61081c5a04ed9a328da849deb9d154901daf4912baf3eafa3bdd8648cad22afa4aa0c0001e376fba11971e0fe4e418fa001cd56d5f3ea94178becbe2189d5a6d649b2889310f433625cf528bd6ce0f252ba879552b3134a1623ef2809d9a53b07d6ed0e62bbd660b8a7c54243ff20548c32b7a902ea6e133ac0d813c07bc2b60b05ab371bf32e5eaa0d1fd2e9595725f70bb0e855946be5d5017648e70057b08625a2b3227a59eb83ebd3b9e4c76d62b3fc6ecb0944b09abfc9adbfb2afd8ce62efdbb9b2c669f2d0645227cd4c9bc4d8857fd3cae24c92ce419c1d794b4419035f541bf0afdb37092844f0c27193622e25ea341ff221", 0x6c1, 0x0, 0x0, 0x0) 17:05:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x800000000000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) [ 273.526579] syz-executor3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 17:05:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0xc0045878, &(0x7f00000002c0)) 17:05:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) 17:05:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x7fff, 0x4) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0xfffffffffffffffe, 0xfdae) exit_group(0x0) 17:05:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x200000000000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:59 executing program 5: r0 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/160, 0xa0}], 0x1) 17:05:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000500)='/dev/snd/controlC#\x00', 0x3e, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc2c85512, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, "86195c5f6d862e013a2f76442ee8b753ffe838973c28fddca83501e3463516037660c46107d1ab965d3aa901"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8d797a30000000000000000000000100000000000000000000000000002000000000080000000000000000000000200000ff0f00", 0x0}) 17:05:59 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x600000000000000) 17:05:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') 17:05:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xfcffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:59 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, ')ead\x00', 0x0, 0x0, '_eqiv(echainiv(rfc4106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 17:05:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:05:59 executing program 3: mknod(&(0x7f0000000140)='./file1\x00', 0x88, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000740)='./file1\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 17:05:59 executing program 4: socketpair$unix(0x1, 0x20000000000003, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0f"]}) 17:06:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x3f00000000000000) 17:06:00 executing program 1: 17:06:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:00 executing program 5: clone(0xb102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0), 0xfd65) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 17:06:00 executing program 4: 17:06:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x500000000000000) 17:06:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xf000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:00 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8dab}]}, 0x10) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x4008080, 0x0, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socketpair(0xc, 0x7, 0x7, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0a5c2d023c126285718070") socket(0xa, 0x2, 0x0) 17:06:00 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, '%ead\x00', 0x0, 0x0, '_eqiv(echainiv(rfc4106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 17:06:00 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) shutdown(r1, 0x0) sendto$inet6(r1, &(0x7f0000925000)="e0", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x9}, 0x8) close(r1) 17:06:00 executing program 5: 17:06:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:00 executing program 3: 17:06:00 executing program 5: 17:06:00 executing program 4: 17:06:00 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x4000000) 17:06:00 executing program 3: 17:06:00 executing program 5: 17:06:00 executing program 4: 17:06:01 executing program 1: 17:06:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x34000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:01 executing program 4: 17:06:01 executing program 3: 17:06:01 executing program 5: 17:06:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x40000000) 17:06:01 executing program 4: 17:06:01 executing program 3: 17:06:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x600) 17:06:01 executing program 1: 17:06:01 executing program 5: 17:06:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xfffffffffffff000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:01 executing program 4: 17:06:01 executing program 1: 17:06:01 executing program 3: 17:06:01 executing program 5: 17:06:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xfcffffff00000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:01 executing program 4: 17:06:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x2) 17:06:01 executing program 1: 17:06:01 executing program 5: 17:06:01 executing program 3: 17:06:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x9effffff00000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:01 executing program 4: 17:06:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x700000000000000) 17:06:01 executing program 5: 17:06:01 executing program 1: 17:06:01 executing program 3: 17:06:02 executing program 4: 17:06:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x4000000000000000) 17:06:02 executing program 1: 17:06:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x6000000000000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:02 executing program 5: 17:06:02 executing program 3: 17:06:02 executing program 5: 17:06:02 executing program 4: 17:06:02 executing program 1: 17:06:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x3f00) 17:06:02 executing program 3: 17:06:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xfffff000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:02 executing program 5: 17:06:02 executing program 4: 17:06:02 executing program 1: 17:06:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) 17:06:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x51010000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x4) 17:06:02 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 17:06:02 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180)={0x1, 0x8}, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'vlan0\x00', {0x2, 0x4e20, @multicast1}}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e02870309b45bbe70c383c8eb8cf78ae"], 0x10) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_IOCTL(r0, &(0x7f0000000200)={0x20, 0x0, 0x7}, 0x20) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x15, 0xffffffffffffffff) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, 0x1, {0x100000001, 0x0, 0x7, 0x7829}}, 0x20) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17:06:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x2003fff, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) futex(&(0x7f00000006c0), 0x0, 0x2, 0x0, 0x0, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r2, &(0x7f0000000140), 0x10) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x6, 0xffffffffffffffff, 0x0, 0xffffffffffffff87, 0xfffffffffffffa83, 0x6, 0x8, 0xb1, 0x8, 0xfff}, 0x10) pipe2(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r2) sendmsg$can_bcm(r1, 0x0, 0x8000000012) unshare(0x40000000) fcntl$getownex(r0, 0x10, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) 17:06:02 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in6=@remote}}}, &(0x7f0000000340)=0xe8) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$sock_ifreq(r1, 0x899f, &(0x7f00000002c0)={'nr0\x00', @ifru_names='bond_slave_0\x00'}) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) r2 = creat(&(0x7f0000000500)='./file0\x00', 0x100) uname(&(0x7f0000000cc0)=""/66) write$smack_current(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/254, 0xfe}], 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000b80)={'broute\x00', 0x0, 0x0, 0x0, [], 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x3, 0x0) perf_event_open(&(0x7f0000000d80)={0x7, 0x70, 0x3, 0x0, 0x0, 0x3, 0x0, 0x9, 0x8, 0xc, 0x81, 0x1, 0x0, 0x6e, 0x3, 0x2b, 0xc44c, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x6, 0x101, 0x4, 0x6, 0x0, 0x8, 0x0, 0x4, 0x9, 0x65bc, 0x8, 0x4, 0x2f8, 0x100, 0xfffffffffffffe00, 0x7, 0x7a, 0x0, 0xffffffffffffffe1, 0x0, @perf_bp={0x0, 0xa}, 0x44, 0x10001, 0x7, 0xf, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x10, r2, 0x8) finit_module(r3, &(0x7f0000000240)='/dev/urandom\x00', 0x1) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, 0x0, &(0x7f0000000300)) keyctl$join(0x1, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup.net/syz0\x00', 0x200002, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0xa, 0x0, 0x80000001, 0x5d0b, 0x21, r4, 0x1}, 0x2c) sendto$packet(r5, &(0x7f0000000a80), 0x0, 0x4000, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x6c00) 17:06:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:02 executing program 3: r0 = perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) stat(&(0x7f0000000900)='./file1/file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000880)='./bus\x00', &(0x7f00000008c0)='security.capability\x00', &(0x7f00000009c0)=@v3={0x3000000, [{0x100000000, 0x9}, {0x5e, 0xb7}], r1}, 0x18, 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000a40)='./file1\x00') r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), r2, &(0x7f0000000dc0), 0x0, 0x5) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f0000000b00)) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="667363721c998678743d73797374656d5f752c666f8a6e65723cbb047c1306f0e502596d0bb50040d827e33342a28194f9a9e658b5105e1571c817f33d0b14e91d9158d300c81e3d0a194e2a4e2ca2497f308997178e6e3c683cb1e282db7c97780c8ce37036acb55720000000dae29cbacc7facf73aa24cae7ea41ee2f7a989f6796d2e1213eb268e1a7ff5133e66e6b9", @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=\x00,\x00']) syz_mount_image$ntfs(&(0x7f0000000a00)='ntfs\x00', &(0x7f0000000a80)='./file0\x00', 0x1, 0xaaaaaaaaaaaaabc, &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f00000003c0)='./file1/file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101400, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000300)=@ipx, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000480)=""/212, 0xd4}, {&(0x7f0000000580)=""/86, 0x56}, {&(0x7f0000000380)=""/20, 0x14}], 0x4, &(0x7f0000000640)=""/33, 0x21, 0x1f}, 0x2) fallocate(r4, 0x40, 0x44, 0x81000f3) open$dir(&(0x7f0000000780)='./file1\x00', 0x200100, 0x1) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f000030b000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_type(r5, &(0x7f0000000140)='threaded\x00', 0x9) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4000007ffffe, 0x4002012, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) 17:06:02 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x161080, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e24, @broadcast}}) getsockopt$nfc_llcp(r0, 0x118, 0x0, &(0x7f0000000000)=""/177, 0xb1) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnetconf={0x14, 0x52, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40004) 17:06:02 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x5) 17:06:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:02 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e21, @broadcast}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}], 0x1c) [ 277.190994] overlayfs: failed to resolve './file1': -2 [ 277.207716] IPVS: ftp: loaded support on port[0] = 21 17:06:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x3f00, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:03 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0xffffffff00000000) 17:06:03 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101, 0x0) tee(r0, r1, 0x8, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x2801}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x8000000000}}]}]}, 0x2c}}, 0x0) 17:06:03 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="5cd8e6067e8ec25d6476158a7229"], 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}}}, &(0x7f0000000380)=0xe8) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x800000, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x1000}}, {@mode={'mode', 0x3d, 0x563b}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x8}}], [{@fowner_gt={'fowner>', r1}}, {@uid_gt={'uid>', r2}}]}) [ 277.502999] netlink: zone id is out of range [ 277.507599] netlink: set zone limit has 4 unknown bytes [ 277.699414] netlink: zone id is out of range [ 277.708314] netlink: set zone limit has 4 unknown bytes [ 277.717276] overlayfs: failed to resolve './file1': -2 17:06:05 executing program 4: set_mempolicy(0x4003, 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000380)) fallocate(r0, 0x0, 0x5, 0xa6ba0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) io_setup(0x40000100000003, &(0x7f00000001c0)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000150000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000500)) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000400)={{0xa, 0x4e21, 0x0, @mcast2, 0x2}, {0xa, 0x4e22, 0xfffffffffffffffa, @dev={0xfe, 0x80, [], 0xb}, 0x5}, 0x2806, [0x90, 0x553d, 0x3, 0x10001, 0x1, 0x6, 0xc, 0x3f]}, 0x5c) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x8000000001, 0x200000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, 0x0) accept4$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0x11, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x10000000400202, 0x0) 17:06:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x1000000) 17:06:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x5101, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:05 executing program 1: mmap(&(0x7f0000a0f000/0x2000)=nil, 0x2000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x200000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101e00, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0xfff, @dev={0xfe, 0x80, [], 0x21}, 0x4}, {0xa, 0x4e24, 0x3, @mcast2, 0x3f}, 0x1, [0x9, 0x9, 0x5, 0x100000001, 0x1, 0x6, 0x0, 0xffff]}, 0x5c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffffffff7fffffff, 0x8000) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000000c0)={0xbade, 0x718, 0x387c, 0x1}) write$P9_RVERSION(r0, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.L'}, 0x15) madvise(&(0x7f0000647000/0x2000)=nil, 0x2000, 0x11) 17:06:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x11, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000000c0)={0x7, 0x4, 0xbb, 0x2, 'syz1\x00', 0x4}) modify_ldt$write2(0x11, &(0x7f0000000040)={0x3ff, 0x0, 0xffffffffffffffff, 0x1, 0xa2e3, 0x100, 0xe0e, 0x6, 0x2, 0x7fff}, 0x10) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000700), &(0x7f0000000740)=0x4) fcntl$dupfd(r1, 0x0, r1) 17:06:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) socket$l2tp(0x18, 0x1, 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x111400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000200)="561f1cdc") 17:06:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x4104, 0x0) r1 = accept$unix(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000180)=0x6e) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={'ip6gre0\x00', {0x2, 0x4e20, @remote}}) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='/dev/ptmx\x00', 0xa, 0x2) ioctl$TIOCPKT(r0, 0x5420, 0x0) mmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x1000000, 0x20010, r0, 0x0) 17:06:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0xbacf86272d66dd19) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x47) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) getgroups(0x1, &(0x7f00000000c0)=[0x0]) fchown(r0, r1, r2) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x1a, &(0x7f0000004bc0), 0x227}, 0x200}], 0x31e9cd3487dc94, 0x0) 17:06:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:05 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, 0x0, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)=ANY=[@ANYBLOB="77000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009ce10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)=""/236, &(0x7f0000000900)=""/57, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x800000000000034}) 17:06:05 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x4000) [ 280.036659] syz-executor4 (8830) used greatest stack depth: 10960 bytes left 17:06:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) sendto$inet(r0, 0x0, 0x0, 0x900000020000000, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2840, 0x0) 17:06:06 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000100), 0x10, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="0600000028a500160bbc830000747654c3a8948f34b8d2a8000000c35c215ee455eb9389a202cc6dc01e099956d7969bc92e4cba3db6ea9609ed48cc4ec5f1c8894db6806ab324823d81f02a56b42b7ac900829dbf3bd2e88ca7216fced60fbde0791feeb855313ded7c152f5c0dde052f9b2a8a52582eb7d7123c746eab030407aae12ad4f3c0a466", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000008001f5ffff030000a0030200001e4653ccaf771016052fb31a1d1b8074575d158c84020e651b48bc9fd64452fd33b6ce13609505d3425be24a57169c246fb2e0a744debdf744b1d4e7c6ab8baca26bc7e14cb7cb5e1d3b8c84e4f9e600f4ab017a903ae2fb8e9535a2c6bdf804a2dba686da39943de430b2f3070000e47648c20cfb9b64e5121f85940963439a00b66d4aab60801c512328d68bcbc142c6e7657cbf33ef336e90f56eeef74490385a08dfff06180f06b852c43c1306d9f9cd227c270c81b613d653634e09027c3cad03f7f6779b3b84dcf07979ac65b3b15fcfee8bbe4d2c78243f2dca0fd1c0c73e4eb8816f74b4a0d9da7bfc1bd1936c5f99f95d3be425408b5eab34e6746200"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006240)='/dev/ppp\x00', 0x0, 0x0) accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x800) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xc400, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000075c0)=[{{&(0x7f0000006280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x3}}, 0x80, &(0x7f0000006380), 0x0, &(0x7f00000063c0), 0x0, 0x4}}], 0x1, 0x8000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r3, 0x0) setresgid(0x0, 0x0, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) shmget$private(0x0, 0x1000, 0x0, &(0x7f000044a000/0x1000)=nil) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000440)={0x5d815e40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xfffffffffffffffd}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 17:06:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000)="76626f786e6574302f6b657972696e6726b647504c27262c2c00", &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@fscache='fscache'}, {@cache_loose='cache=loose'}, {@debug={'debug', 0x3d, 0x7}}, {@version_L='version=9p2000.L'}, {@msize={'msize', 0x3d, 0xffff}}, {@cache_none='cache=none'}, {@msize={'msize', 0x3d, 0x2}}, {@loose='loose'}, {@version_u='version=9p2000.u'}], [{@subj_type={'subj_type', 0x3d, 'bdev}{eth1ppp0ppp0cgroupselfuser'}}, {@euid_lt={'euid<', r0}}, {@dont_measure='dont_measure'}]}}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x2, 0x0, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 17:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x5101000000000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x300) 17:06:06 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008913, &(0x7f0000000640)="e5aaeb73d61087d4510b005c2d023c1262080cad4058d42763b317fc50905858bcd2da7c0b9ed2efb53e") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x44003, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000300)=0xfffffffffffffffa, &(0x7f0000000340)=0x2) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r4 = semget(0x0, 0x2, 0x69) semctl$IPC_RMID(r4, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r3, 0x22c, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r5, 0x5}}, 0x18) r6 = dup(r2) ioprio_get$pid(0x1, 0x0) clock_gettime(0x7, &(0x7f0000000500)={0x0, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{0x0, 0x7530}, {r7, r8/1000+30000}}, &(0x7f0000000200)) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=0x0) ptrace$peek(0x3, r9, &(0x7f0000000280)) 17:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x300000000000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:06 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x6, 0x15, "63e37a22aae0a8c735db669ce5393b30660f0e3020b4b35c3833e1644efa08847d4902bc530bda5376d6ac781440914a90ca078c3be87bbfe81764468fd0fa3a", "21522aea926efc6056961819900986af1322a38d0348db2a47b8cb91eb0d3a64", [0xfffffffffffffffc, 0x2a1488d0]}) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x35d) r4 = dup3(r1, r3, 0x0) connect$l2tp(r1, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x1, 0x1, {0xa, 0x4e24, 0x1, @ipv4={[], [], @rand_addr=0x4}, 0x5}}}, 0xfe66) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000300)) 17:06:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x3f000000) 17:06:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e0"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0x1a, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb", &(0x7f00000000c0)=""/41, 0x100}, 0x28) socketpair(0x7, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000006c0)={'rose0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) openat$cgroup_ro(r4, &(0x7f0000000480)='pids.events\x00', 0x0, 0x0) socketpair(0x3, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'eql\x00', 0x1000}) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000000703000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f2000000b705"], &(0x7f0000000340)='GPL\x00'}, 0x48) r7 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36b, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x6}, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20d) recvmsg$kcm(r3, &(0x7f0000004a00)={&(0x7f0000003940)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000039c0), 0x0, &(0x7f0000003a00)=""/4096, 0x1000, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000004a40)={0xf, 0x9, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x101}, [@map={0x18, 0x0, 0x1, 0x0, r6}, @map={0x18, 0x7, 0x1, 0x0, r3}, @exit]}, &(0x7f00000004c0)='syzkaller\x00', 0x5969, 0xe7, &(0x7f0000000780)=""/231, 0x41000, 0x1, [], r8}, 0x48) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x100000000, 0x20, 0xb6, 0x7fff, 0x40}, &(0x7f0000000500)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000880)={r9, 0x3e, "156d6f43bebedc53f2c57d267a5a627f85a866b4501a6a3759f406e62f2a9b06affa5839bb3acad6763413d0ac45648114e1d717c91b5822dfa5b1ad7840"}, &(0x7f0000000640)=0x46) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a1) 17:06:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x3f00000000000000, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) 17:06:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x0, 0x1, 0x9, 0x0, 0xffffffffffffff41}, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 17:06:06 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)=0x7000000) [ 280.640219] ------------[ cut here ]------------ [ 280.645252] kernel BUG at net/ipv4/ip_output.c:776! [ 280.650350] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 280.655725] CPU: 0 PID: 8927 Comm: syz-executor5 Not tainted 4.20.0-rc4+ #359 [ 280.663022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.672462] RIP: 0010:ip_do_fragment+0x2447/0x2ad0 [ 280.677397] Code: ff 48 89 cf e8 ba 2a 23 fb e9 dc ea ff ff 48 89 df e8 ed 2a 23 fb e9 02 e7 ff ff e8 43 2b 23 fb e9 97 e6 ff ff e8 b9 d1 df fa <0f> 0b 4c 89 f7 e8 8f 2a 23 fb e9 2f e6 ff ff 4c 89 e7 e8 82 2a 23 [ 280.696303] RSP: 0018:ffff8881808067b8 EFLAGS: 00010216 [ 280.701671] RAX: 0000000000040000 RBX: ffff8881c97591c0 RCX: ffffc9000fe5a000 [ 280.708940] RDX: 0000000000017761 RSI: ffffffff869fca07 RDI: 0000000000000005 [ 280.716214] RBP: ffff888180806990 R08: ffff8881808ce4c0 R09: ffffed10301e8182 [ 280.723483] R10: ffffed10301e8184 R11: ffff888180f40c23 R12: ffff8881c9759284 [ 280.730783] R13: 00000000fffffff2 R14: ffff8881c9759290 R15: dffffc0000000000 [ 280.738083] FS: 00007f7153ed3700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 [ 280.745274] kobject: 'loop4' (0000000043e7d532): kobject_uevent_env [ 280.746317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.752933] kobject: 'loop4' (0000000043e7d532): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 280.758577] CR2: 00000000004cce30 CR3: 00000001ba22f000 CR4: 00000000001406f0 [ 280.758590] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.758599] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.758609] Call Trace: [ 280.787032] kobject: 'loop2' (000000006862d2d4): kobject_uevent_env [ 280.789923] ? release_task.part.14+0x130/0x1bb0 [ 280.789950] ? ip_copy_metadata+0xe10/0xe10 [ 280.792614] kobject: 'loop2' (000000006862d2d4): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 280.798925] ? ip_finish_output2+0x1860/0x1860 [ 280.798956] ? zap_class+0x640/0x640 [ 280.798978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 280.831308] ? ipv4_mtu+0x39f/0x590 [ 280.834982] ? rt_acct_proc_show+0x370/0x370 [ 280.839407] ? find_held_lock+0x36/0x1c0 [ 280.843516] ip_fragment.constprop.50+0x179/0x240 [ 280.848370] ip_finish_output+0x6b4/0xfa0 [ 280.852524] ? ip_fragment.constprop.50+0x240/0x240 [ 280.857590] ? kasan_check_read+0x11/0x20 [ 280.861766] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 280.867133] ? nf_nat_ipv4_out+0x2e1/0x340 [ 280.871392] ? rcu_softirq_qs+0x20/0x20 [ 280.875392] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 280.880504] ? nf_hook_slow+0x11e/0x1c0 [ 280.884494] ip_output+0x21d/0x8d0 [ 280.888046] ? ip_mc_output+0x15b0/0x15b0 [ 280.892201] ? pskb_expand_head+0x3bb/0x10f0 [ 280.896621] ? ip_fragment.constprop.50+0x240/0x240 [ 280.901652] ? bpf_prog_bebbfe2050753572+0xa32/0x1000 [ 280.906858] ? __ip_select_ident+0x16d/0x2a0 [ 280.911283] ? ip_idents_reserve+0x320/0x320 [ 280.915714] ip_local_out+0xc5/0x1b0 [ 280.919509] iptunnel_xmit+0x63b/0x9c0 [ 280.923408] ip_tunnel_xmit+0x15b8/0x3c04 [ 280.927568] ? ip_tunnel_init_net+0xac0/0xac0 [ 280.932073] ? __sanitizer_cov_trace_pc+0x40/0x50 [ 280.936924] ? kasan_check_write+0x14/0x20 [ 280.941166] ? pskb_expand_head+0x6b3/0x10f0 [ 280.945578] ? mark_held_locks+0x130/0x130 [ 280.949825] ? skb_release_data+0x9a0/0x9a0 [ 280.954150] ? __lock_is_held+0xb5/0x140 [ 280.958214] ? zap_class+0x640/0x640 [ 280.961939] ? mark_held_locks+0x130/0x130 [ 280.966181] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 280.971727] __gre_xmit+0x5e1/0x980 [ 280.975389] ipgre_xmit+0x3e7/0xba0 [ 280.979038] ? gre_tap_xmit+0x590/0x590 [ 280.983067] ? __lock_is_held+0xb5/0x140 [ 280.987168] dev_hard_start_xmit+0x295/0xc80 [ 280.991590] ? dev_direct_xmit+0x6b0/0x6b0 [ 280.995834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.001377] ? netif_skb_features+0x690/0xb70 [ 281.005872] ? rcu_softirq_qs+0x20/0x20 [ 281.009911] ? validate_xmit_xfrm+0x1ef/0xda0 [ 281.014420] ? validate_xmit_skb+0x80c/0xf30 [ 281.018843] ? netif_skb_features+0xb70/0xb70 [ 281.023342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.028894] ? check_preemption_disabled+0x48/0x280 [ 281.033914] ? check_preemption_disabled+0x48/0x280 [ 281.038936] __dev_queue_xmit+0x2f71/0x3ad0 [ 281.043265] ? save_stack+0x43/0xd0 [ 281.047374] ? kasan_kmalloc+0xc7/0xe0 [ 281.051293] ? __kmalloc_node_track_caller+0x50/0x70 [ 281.056406] ? netdev_pick_tx+0x310/0x310 [ 281.060561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.066107] ? check_preemption_disabled+0x48/0x280 [ 281.071138] ? __lock_is_held+0xb5/0x140 [ 281.075210] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 281.080232] ? skb_release_data+0x1c4/0x9a0 [ 281.084558] ? kmem_cache_alloc_node_trace+0x34b/0x740 [ 281.089841] ? kasan_unpoison_shadow+0x35/0x50 [ 281.094425] ? skb_tx_error+0x410/0x410 [ 281.098408] ? __kmalloc_node_track_caller+0x50/0x70 [ 281.103519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 281.109064] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 281.114609] ? kasan_check_write+0x14/0x20 [ 281.118852] ? pskb_expand_head+0x6b3/0x10f0 [ 281.123275] ? skb_release_data+0x9a0/0x9a0 [ 281.127602] ? __alloc_skb+0x770/0x770 [ 281.131120] kobject: 'loop1' (000000009601f17a): kobject_uevent_env [ 281.131502] ? __lock_is_held+0xb5/0x140 [ 281.131526] ? kasan_check_write+0x14/0x20 [ 281.137946] kobject: 'loop1' (000000009601f17a): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 281.141974] ? __skb_clone+0x6c7/0xa00 [ 281.141990] ? __copy_skb_header+0x6b0/0x6b0 [ 281.142004] ? kmem_cache_alloc+0x33a/0x730 [ 281.142025] ? skb_ensure_writable+0x15e/0x640 [ 281.172843] dev_queue_xmit+0x17/0x20 [ 281.176653] ? dev_queue_xmit+0x17/0x20 [ 281.180634] __bpf_redirect+0x5cf/0xb20 [ 281.184619] bpf_clone_redirect+0x2f6/0x490 [ 281.188954] bpf_prog_bebbfe2050753572+0xa32/0x1000 [ 281.193979] ? __sched_text_start+0x8/0x8 [ 281.198136] ? lock_downgrade+0x900/0x900 [ 281.202298] ? find_held_lock+0x36/0x1c0 [ 281.206257] kobject: 'loop4' (0000000043e7d532): kobject_uevent_env [ 281.206372] ? lock_acquire+0x1ed/0x520 [ 281.206389] ? bpf_test_run+0x3cb/0x780 [ 281.206406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.206428] ? check_preemption_disabled+0x48/0x280 [ 281.216397] kobject: 'loop4' (0000000043e7d532): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 281.216798] ? kasan_check_read+0x11/0x20 [ 281.244882] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 281.250169] ? rcu_softirq_qs+0x20/0x20 [ 281.254156] ? preempt_schedule+0x4d/0x60 [ 281.258318] ? ___preempt_schedule+0x16/0x18 [ 281.262750] ? bpf_test_run+0x25d/0x780 [ 281.266757] ? netlink_diag_dump+0x2a0/0x2a0 [ 281.271183] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 281.276726] ? bpf_test_init.isra.10+0x70/0x100 [ 281.281421] ? bpf_prog_test_run_skb+0x73b/0xcb0 [ 281.286194] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 281.291044] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.296587] ? fput+0x130/0x1a0 [ 281.299963] ? __bpf_prog_get+0x9b/0x290 [ 281.304036] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 281.308886] ? bpf_prog_test_run+0x130/0x1a0 [ 281.313306] ? __x64_sys_bpf+0x3d8/0x520 [ 281.317374] ? bpf_prog_get+0x20/0x20 [ 281.321189] ? do_syscall_64+0x1b9/0x820 [ 281.325254] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 281.330624] ? syscall_return_slowpath+0x5e0/0x5e0 [ 281.335559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.340404] ? trace_hardirqs_on_caller+0x310/0x310 [ 281.345438] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 281.350461] ? prepare_exit_to_usermode+0x291/0x3b0 [ 281.355481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.360335] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.365701] Modules linked in: [ 281.368972] ---[ end trace 3b18b44a2addbcc4 ]--- [ 281.373785] RIP: 0010:ip_do_fragment+0x2447/0x2ad0 [ 281.378728] Code: ff 48 89 cf e8 ba 2a 23 fb e9 dc ea ff ff 48 89 df e8 ed 2a 23 fb e9 02 e7 ff ff e8 43 2b 23 fb e9 97 e6 ff ff e8 b9 d1 df fa <0f> 0b 4c 89 f7 e8 8f 2a 23 fb e9 2f e6 ff ff 4c 89 e7 e8 82 2a 23 [ 281.397725] RSP: 0018:ffff8881808067b8 EFLAGS: 00010216 [ 281.403140] RAX: 0000000000040000 RBX: ffff8881c97591c0 RCX: ffffc9000fe5a000 [ 281.410459] RDX: 0000000000017761 RSI: ffffffff869fca07 RDI: 0000000000000005 [ 281.417753] RBP: ffff888180806990 R08: ffff8881808ce4c0 R09: ffffed10301e8182 [ 281.425072] R10: ffffed10301e8184 R11: ffff888180f40c23 R12: ffff8881c9759284 [ 281.432380] R13: 00000000fffffff2 R14: ffff8881c9759290 R15: dffffc0000000000 [ 281.439673] FS: 00007f7153ed3700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 [ 281.447963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.453890] CR2: 00000000004cce30 CR3: 00000001ba22f000 CR4: 00000000001406f0 [ 281.461195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.468472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.475801] Kernel panic - not syncing: Fatal exception in interrupt [ 281.483307] Kernel Offset: disabled [ 281.486929] Rebooting in 86400 seconds..