)=""/4096, 0x1000}], 0x1) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x1) close(r1) 09:34:12 executing program 3: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) 09:34:12 executing program 0: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) 09:34:12 executing program 1: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) 09:34:13 executing program 5: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) 09:34:13 executing program 0: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) 09:34:13 executing program 3: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) 09:34:13 executing program 4: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) 09:34:13 executing program 1: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) [ 931.345587][ C1] net_ratelimit: 20 callbacks suppressed [ 931.345596][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 931.357211][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x400000a77, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134) readv(r2, &(0x7f0000002880)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x1) close(r1) [ 931.585482][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 931.591388][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:34:13 executing program 5: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) 09:34:13 executing program 3: socket$inet(0x2, 0x4000400000000001, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38"]) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x526, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xfffffffffffffffd}) 09:34:14 executing program 1: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) 09:34:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) 09:34:14 executing program 0: r0 = gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) kcmp(r0, 0x0, 0x0, r2, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x200000000000000, 0x0, 0x6]}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x5a, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'bcn\x01\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x3010}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x200000000000) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(r7, &(0x7f0000000580), 0x0) [ 932.410015][T32335] overlayfs: failed to resolve './file1': -2 09:34:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) 09:34:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) [ 932.544968][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 932.545546][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 932.550921][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 932.556918][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:34:14 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sync() r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) add_key(&(0x7f0000000200)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ptrace(0x10, r0) keyctl$assume_authority(0x10, 0x0) ptrace(0x11, r0) 09:34:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) 09:34:14 executing program 3: socket$inet(0x2, 0x4000400000000001, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38"]) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x526, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xfffffffffffffffd}) 09:34:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) [ 932.784847][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 932.790811][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:14 executing program 5: socket$inet(0x2, 0x4000400000000001, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38"]) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x526, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xfffffffffffffffd}) 09:34:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) 09:34:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) 09:34:15 executing program 0: timer_create(0xb, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f00000001c0)) 09:34:15 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@mark={0xc}]}, 0x34}, 0x8}, 0x0) 09:34:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) dup3(r1, r0, 0x0) [ 933.266555][T32385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 09:34:15 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0xfffffffffffffc38) lseek(r0, 0x0, 0x1) getdents64(r0, &(0x7f0000000080)=""/44, 0x2c) 09:34:15 executing program 2: r0 = eventfd(0xf3) write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munlockall() socket$inet_smc(0x2b, 0x1, 0x0) [ 933.357858][T32388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 09:34:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0)={0x0, r2/1000+30000}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x0, 0x5}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80, 0x4) sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffdf4, 0x0, 0x0, 0x0) 09:34:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) dup3(r1, r0, 0x0) 09:34:15 executing program 3: socket$inet(0x2, 0x4000400000000001, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38"]) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x526, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xfffffffffffffffd}) 09:34:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) dup3(r1, r0, 0x0) [ 936.702935][ C0] net_ratelimit: 18 callbacks suppressed [ 936.702945][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 936.705689][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 936.708742][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 936.714621][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 936.943169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 936.948968][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) dup3(r1, r0, 0x0) 09:34:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) dup3(r1, r0, 0x0) 09:34:19 executing program 3: socket$inet(0x2, 0x4000400000000001, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38"]) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x526, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xfffffffffffffffd}) 09:34:19 executing program 2: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r0) 09:34:19 executing program 1: timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth0_to_team\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x4, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0xfffffffffffff001}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x13) 09:34:19 executing program 5: socket$inet(0x2, 0x4000400000000001, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38"]) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x526, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xfffffffffffffffd}) 09:34:19 executing program 1: r0 = socket(0x11, 0x2, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000440)) accept4(r1, 0x0, &(0x7f00000004c0), 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480", 0xee) poll(&(0x7f0000000400)=[{}, {0xffffffffffffffff, 0x1000}], 0x2, 0x6) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) 09:34:19 executing program 2: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r0) [ 937.512547][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 937.518467][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 937.582924][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 937.588734][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:19 executing program 2: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r0) [ 937.905642][T32427] overlayfs: failed to resolve './file1': -2 [ 938.359122][T32434] IPVS: ftp: loaded support on port[0] = 21 09:34:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) dup3(r1, r0, 0x0) 09:34:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) dup3(r1, r0, 0x0) 09:34:20 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=0x1c00000, {[@rr={0x7, 0x3, 0x276c}, @rr={0x7, 0x3}]}}, @gre}}}}, 0x0) [ 939.746931][T32434] chnl_net:caif_netlink_parms(): no params data found [ 940.008107][T32434] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.015853][T32434] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.024247][T32434] device bridge_slave_0 entered promiscuous mode [ 940.250070][T32434] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.258024][T32434] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.268058][T32434] device bridge_slave_1 entered promiscuous mode [ 940.498326][T32434] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 940.509070][T32434] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 940.743855][T32434] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 940.752000][T32434] team0: Port device team_slave_0 added [ 940.758234][T32434] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 940.766591][T32434] team0: Port device team_slave_1 added [ 940.773000][T32434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 940.987667][T32434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 941.053192][T32434] device hsr_slave_0 entered promiscuous mode [ 941.090951][T32434] device hsr_slave_1 entered promiscuous mode [ 941.171336][T32434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 941.386133][T32434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 941.404050][T32434] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 941.433817][ T21] device bridge_slave_1 left promiscuous mode [ 941.440017][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.491589][ T21] device bridge_slave_0 left promiscuous mode [ 941.497812][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.740405][ C1] net_ratelimit: 18 callbacks suppressed [ 941.740414][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 941.751891][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 941.980287][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 941.986100][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 942.939767][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 942.939773][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 942.939869][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 942.945607][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 943.179653][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 943.185447][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 946.071781][ T21] device hsr_slave_1 left promiscuous mode [ 946.114452][ T21] device hsr_slave_0 left promiscuous mode [ 946.176027][ T21] team0 (unregistering): Port device team_slave_1 removed [ 946.188983][ T21] team0 (unregistering): Port device team_slave_0 removed [ 946.205560][ T21] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 946.316760][ T21] bond0 (unregistering): Released all slaves [ 946.423473][T32434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.434939][T32434] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 946.445116][T32434] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 946.452328][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 946.460824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 946.471215][T32434] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 946.478667][T32434] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.488279][T32434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 946.496001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 946.496448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 946.513716][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.520816][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.523969][T32434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 946.540407][T32434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 946.548285][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 946.556111][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 946.565216][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 946.573606][T21694] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.580704][T21694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.589506][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 946.602901][T32434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 946.612712][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 946.624411][T32434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 946.632360][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 946.633209][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 946.652816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 946.666452][T32434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 946.677538][T32434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 946.685425][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 946.695218][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 946.705136][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 946.713939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 946.725257][T32434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 946.735051][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 946.751171][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 946.761822][T32434] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 946.768995][T32434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 946.820195][T32434] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 946.834742][T32434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.877808][ C1] net_ratelimit: 13 callbacks suppressed [ 946.877818][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 946.889408][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:29 executing program 5: socket$inet(0x2, 0x4000400000000001, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38"]) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x526, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xfffffffffffffffd}) 09:34:29 executing program 2: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) close(r0) 09:34:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./file0\x00', 0x141042, 0x0) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x0, 0x7530}}) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="0000e0ffcfff0000000000ad030000000000000000925d000000005e226d5343c11fd57781394cc530ca6f7e8fbdc4f9991ae2af8588bfc1f50d4bc63da5f74d8bfac2f49dbcfd7864c38ce789ccd86934f3b156b7c2bb6264318e6d8db740c86460640d97f38310b35085de22aebd8bf6aa902dc276013064f9ebd6a23458125299cf1a0a0644719f1762d78daa3b0463f24880c663dad0f14490f52744645684d9d9964a393528503a45757b48cc27bbb715c0902c230443feff0ac977723acea6c9c1a7474998f555aed09ef8f78938fed99b5f0e4211bd8ccf8154c8f45b4014a45740feb7861aeb0e0e8d90d8c2aaaea6b32aa808caac1497dc9c3f7f101a6f05f70f4f518be1fb162d90c235b79dcc6b1c6558a1e9487986ba778c81fb5d4e3233ecb64c46adcb883e529f910f4fb941f8629475b4e1e331c38d2bdad048ad69df2cdb04cc363d9edf2c657e29e5dcfbca865e9f88ed09234a73dd3adf446254996d1b1f858f1c4a8f8d84af066a3562c0a4e328f212c4094f844d18d5c0d155d9edca4de6de493a0853b02fd2f79365339f156abf8ad92f8b297e983d85500d28"], 0x1a4) ftruncate(r2, 0x25) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 09:34:29 executing program 1: r0 = socket(0x11, 0x2, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000440)) accept4(r1, 0x0, &(0x7f00000004c0), 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480", 0xee) poll(&(0x7f0000000400)=[{}, {0xffffffffffffffff, 0x1000}], 0x2, 0x6) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) 09:34:29 executing program 4: r0 = socket(0x11, 0x2, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000440)) accept4(r1, 0x0, &(0x7f00000004c0), 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480", 0xee) poll(&(0x7f0000000400)=[{}, {0xffffffffffffffff, 0x1000}], 0x2, 0x6) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) 09:34:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x160, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) [ 946.997735][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 947.003584][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 947.097706][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 947.098363][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 947.103628][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 947.109862][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 947.127659][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 947.133567][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:29 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000002e0007041dfffd946fa2830020200a0009000000001d8568ff0f000000000000", 0x24}], 0x1}, 0x0) 09:34:29 executing program 1: r0 = socket(0x11, 0x2, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000440)) accept4(r1, 0x0, &(0x7f00000004c0), 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480", 0xee) poll(&(0x7f0000000400)=[{}, {0xffffffffffffffff, 0x1000}], 0x2, 0x6) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) 09:34:29 executing program 5: accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x8) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000200)) mkdir(0x0, 0x0) clone(0x13102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0x400, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}], [{@dont_measure='dont_measure'}]}) [ 947.895774][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 947.895790][ T26] audit: type=1804 audit(1548149669.890:189): pid=32477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir534218769/syzkaller.e0adKq/114/file0" dev="sda1" ino=17033 res=1 09:34:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x160, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) [ 948.324048][T32494] gfs2: fsid=_h: Trying to join cluster "lock_nolock", "_h" [ 948.341169][T32494] gfs2: fsid=_h: Now mounting FS... 09:34:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x160, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) [ 948.368575][T32494] gfs2: not a GFS2 filesystem [ 948.380793][T32494] gfs2: fsid=_h: can't read superblock [ 948.411789][T32494] gfs2: fsid=_h: can't read superblock: -22 09:34:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x160, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 09:34:31 executing program 2: clock_getres(0x3, 0x0) 09:34:31 executing program 1: r0 = socket(0x11, 0x2, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000440)) accept4(r1, 0x0, &(0x7f00000004c0), 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480", 0xee) poll(&(0x7f0000000400)=[{}, {0xffffffffffffffff, 0x1000}], 0x2, 0x6) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) 09:34:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) ioctl$int_in(r0, 0x8000000005421, &(0x7f0000000100)=0x807) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) 09:34:31 executing program 4: r0 = socket(0x11, 0x2, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000440)) accept4(r1, 0x0, &(0x7f00000004c0), 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480", 0xee) poll(&(0x7f0000000400)=[{}, {0xffffffffffffffff, 0x1000}], 0x2, 0x6) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) 09:34:31 executing program 5: accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x8) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000200)) mkdir(0x0, 0x0) clone(0x13102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0x400, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}], [{@dont_measure='dont_measure'}]}) 09:34:31 executing program 2: accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x8) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000200)) mkdir(0x0, 0x0) clone(0x13102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0x400, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}], [{@dont_measure='dont_measure'}]}) 09:34:31 executing program 2: accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x8) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000200)) mkdir(0x0, 0x0) clone(0x13102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0x400, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}], [{@dont_measure='dont_measure'}]}) 09:34:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) ioctl$int_in(r0, 0x8000000005421, &(0x7f0000000100)=0x807) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) 09:34:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) [ 949.682102][T32529] gfs2: fsid=_h: Trying to join cluster "lock_nolock", "_h" 09:34:31 executing program 2: accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x8) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000200)) mkdir(0x0, 0x0) clone(0x13102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0x400, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}], [{@dont_measure='dont_measure'}]}) 09:34:31 executing program 4: r0 = socket(0x11, 0x2, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000440)) accept4(r1, 0x0, &(0x7f00000004c0), 0x800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480", 0xee) poll(&(0x7f0000000400)=[{}, {0xffffffffffffffff, 0x1000}], 0x2, 0x6) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) [ 949.761016][T32529] gfs2: fsid=_h: Now mounting FS... [ 949.838416][T32529] gfs2: not a GFS2 filesystem [ 949.872477][T32529] gfs2: fsid=_h: can't read superblock 09:34:32 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0xffffff5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getxattr(0x0, &(0x7f00000001c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000200)=""/114, 0x72) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, &(0x7f0000001900)=ANY=[]) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000280)='bpf\x00', 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000380)) umount2(&(0x7f0000000800)='./file0\x00', 0x0) [ 949.936105][T32529] gfs2: fsid=_h: can't read superblock: -22 09:34:32 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000140)='\x00') 09:34:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) ioctl$int_in(r0, 0x8000000005421, &(0x7f0000000100)=0x807) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) 09:34:32 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000140)='\x00') 09:34:32 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa43039d70e6aaa8aa0086dd6050a01c000800009ce8f776e227"], &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff000000000089b423968e450400000000000060"]}) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 09:34:32 executing program 5: accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x8) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000200)) mkdir(0x0, 0x0) clone(0x13102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0x400, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}], [{@dont_measure='dont_measure'}]}) 09:34:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) ioctl$int_in(r0, 0x8000000005421, &(0x7f0000000100)=0x807) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, 0x0, 0x10000) 09:34:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x77, 0x0, [0x200, 0x81], [0xc1]}) 09:34:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x34, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0x18, 0xf00, [@typed={0x14, 0x1, @ipv6=@loopback={0xffffffff00000000}}]}]}, 0x2c}}, 0x0) [ 950.414416][T32577] netlink: 'syz-executor3': attribute type 1 has an invalid length. 09:34:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) 09:34:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/224) 09:34:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) 09:34:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x77, 0x0, [0x200, 0x81], [0xc1]}) 09:34:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/224) [ 950.780356][T32583] gfs2: fsid=_h: Trying to join cluster "lock_nolock", "_h" 09:34:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) [ 950.827963][T32583] gfs2: fsid=_h: Now mounting FS... [ 950.893350][T32583] gfs2: not a GFS2 filesystem [ 950.931651][T32583] gfs2: fsid=_h: can't read superblock [ 950.961813][T32583] gfs2: fsid=_h: can't read superblock: -22 09:34:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/224) 09:34:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x77, 0x0, [0x200, 0x81], [0xc1]}) 09:34:33 executing program 5: accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x8) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000200)) mkdir(0x0, 0x0) clone(0x13102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0x400, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/h\x00'}}], [{@dont_measure='dont_measure'}]}) 09:34:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) 09:34:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) 09:34:33 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000140)='\x00') 09:34:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) 09:34:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x77, 0x0, [0x200, 0x81], [0xc1]}) 09:34:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/224) 09:34:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/224) [ 952.134122][T32623] gfs2: fsid=_h: Trying to join cluster "lock_nolock", "_h" [ 952.145195][ C1] net_ratelimit: 28 callbacks suppressed [ 952.145206][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 952.156777][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 952.163900][T32623] gfs2: fsid=_h: Now mounting FS... [ 952.229569][T32623] gfs2: not a GFS2 filesystem [ 952.256567][T32623] gfs2: fsid=_h: can't read superblock [ 952.287618][T32623] gfs2: fsid=_h: can't read superblock: -22 [ 952.297578][T32636] IPVS: ftp: loaded support on port[0] = 21 [ 952.375073][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 952.381416][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:34:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) 09:34:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/224) [ 952.852651][T32636] chnl_net:caif_netlink_parms(): no params data found [ 953.077501][T32636] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.095937][T32636] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.106067][T32636] device bridge_slave_0 entered promiscuous mode [ 953.114741][T32636] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.122024][T32636] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.130472][T32636] device bridge_slave_1 entered promiscuous mode [ 953.158545][T32636] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 953.170517][T32636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 953.203174][T32636] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 953.212186][T32636] team0: Port device team_slave_0 added [ 953.219563][T32636] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 953.228706][T32636] team0: Port device team_slave_1 added [ 953.235609][T32636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 953.243878][T32636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 953.308069][T32636] device hsr_slave_0 entered promiscuous mode [ 953.334607][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 953.334636][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 953.340469][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 953.346263][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 953.376290][T32636] device hsr_slave_1 entered promiscuous mode [ 953.414532][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 953.415561][T32636] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 953.420375][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 953.428439][T32636] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 953.453192][T32636] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.460373][T32636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.467808][T32636] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.474937][T32636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.523141][T32636] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 953.530139][T32636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.540767][T32636] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 953.551224][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 953.559251][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.567179][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.576406][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 953.589503][T32636] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 953.596763][T32636] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.014160][T32636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 954.022335][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 954.031592][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 954.040676][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.047806][ T8026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.283372][T32636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 954.291382][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 954.300569][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 954.309061][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.316167][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.326125][T32636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 954.337377][T32636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 954.346269][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 954.355016][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 954.366250][T32636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 954.555465][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 954.564294][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 954.574032][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 954.583335][T32636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 954.592018][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 954.601132][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 954.785799][T32636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 954.794602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 954.802932][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 954.814865][T32636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 954.822340][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 954.830706][T21694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 954.841927][T32636] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 954.849342][T32636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 955.029375][T32636] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 955.046669][T32636] 8021q: adding VLAN 0 to HW filter on device batadv0 09:34:37 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000140)='\x00') 09:34:37 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000007c0)={0xa0, 0xfffffffffffffffe, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xe52}}}}, 0xa0) keyctl$describe(0x6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x40) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:34:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/224) 09:34:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='#}\x00\xd3\xfc\x1e\xe4g\x1f\xba\xa0\xa4U\xe7>g\x8b\x8e\x96\xf7\xfd\x82\x9dM9\xf1\x82\x8e\xbfv^\"\t\x13\xb7=\xb9OmIPw\xa6\xdfZ\xb8+LO\x8d', 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x1) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r0, r1, 0x0, 0xffe4) 09:34:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) 09:34:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000003800815fe45ae087185082cf0224b0eba06ec4000941000000000018000061c8307ac906da9128647357", 0x2e}], 0x1}, 0x0) 09:34:37 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") bind$can_raw(r2, &(0x7f0000010ff0), 0x10) recvmmsg(r2, &(0x7f0000000080), 0xffffffff00000013, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0xfcd8}}, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) 09:34:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000003800815fe45ae087185082cf0224b0eba06ec4000941000000000018000061c8307ac906da9128647357", 0x2e}], 0x1}, 0x0) 09:34:37 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0xcd55) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x1000000}]) 09:34:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r2 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0xda, &(0x7f0000000180)='GPL\x00'}, 0x30) process_vm_writev(r3, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000019000000000002800000850000000000000095"], 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="aba13a24affa65cb9a5b49a77182", 0x0, 0x164}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x20100) bind$tipc(r5, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) 09:34:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capget(&(0x7f00000005c0), 0x0) 09:34:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000003800815fe45ae087185082cf0224b0eba06ec4000941000000000018000061c8307ac906da9128647357", 0x2e}], 0x1}, 0x0) 09:34:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) 09:34:38 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0xcd55) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x1000000}]) 09:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) mount(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='cgroup\x00', 0x0, &(0x7f0000000440)='no\x02\x00s\x00') 09:34:38 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x4000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000003800815fe45ae087185082cf0224b0eba06ec4000941000000000018000061c8307ac906da9128647357", 0x2e}], 0x1}, 0x0) 09:34:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1}}], 0x2, 0x0, 0x0) [ 956.249200][T32714] e cgroup1: Unknown subsys name 'no' 09:34:38 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)) [ 957.114150][ T21] device bridge_slave_1 left promiscuous mode [ 957.120357][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.174075][ T21] device bridge_slave_0 left promiscuous mode [ 957.180351][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.332613][ C0] net_ratelimit: 26 callbacks suppressed [ 957.332622][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 957.344317][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 957.492609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 957.498498][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 957.572423][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 957.578205][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 957.732363][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 957.738200][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 958.382049][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 958.387945][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 961.812223][ T21] device hsr_slave_1 left promiscuous mode [ 961.865959][ T21] device hsr_slave_0 left promiscuous mode [ 961.926468][ T21] team0 (unregistering): Port device team_slave_1 removed [ 961.940773][ T21] team0 (unregistering): Port device team_slave_0 removed [ 961.953281][ T21] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 961.998546][ T21] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 962.098751][ T21] bond0 (unregistering): Released all slaves [ 962.530162][ C1] net_ratelimit: 22 callbacks suppressed [ 962.530171][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 962.541690][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 962.769876][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 962.775685][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 963.579501][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 963.585315][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 963.729428][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 963.735260][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 963.809380][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 963.815204][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000003080501ff0280fffdfffe2e0a0000000c0003002f006a007d0a00010c000200170022ff02f1d271"], 0x2c}}, 0x0) 09:34:45 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0xcd55) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x1000000}]) 09:34:45 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)) 09:34:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:34:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x30, 0x119, 0x0, 0x0, {0x4}, [@nested={0x4}]}, 0x18}}, 0x0) 09:34:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) mount(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='cgroup\x00', 0x0, &(0x7f0000000440)='no\x02\x00s\x00') 09:34:46 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3) syz_open_dev$amidi(0x0, 0x3, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0xffffffffffffff82, 0x2f8) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x7fff, 0xaaf) io_setup(0x40000100000003, &(0x7f00000001c0)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000057, 0x300a7, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, 0x0) pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6}, &(0x7f00000004c0), 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1) ioctl$KDSKBLED(r2, 0x4b65, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) unshare(0x0) semget$private(0x0, 0x403, 0x0) [ 964.075968][T32736] e cgroup1: Unknown subsys name 'no' 09:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) mount(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='cgroup\x00', 0x0, &(0x7f0000000440)='no\x02\x00s\x00') 09:34:46 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)) [ 964.201191][T32741] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 964.229238][T32741] netlink: 'syz-executor4': attribute type 2 has an invalid length. [ 964.307255][T32747] e cgroup1: Unknown subsys name 'no' 09:34:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000003080501ff0280fffdfffe2e0a0000000c0003002f006a007d0a00010c000200170022ff02f1d271"], 0x2c}}, 0x0) 09:34:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) mount(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='cgroup\x00', 0x0, &(0x7f0000000440)='no\x02\x00s\x00') 09:34:46 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0xcd55) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x1000000}]) 09:34:46 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)) [ 964.536429][T32758] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 964.610282][T32765] e cgroup1: Unknown subsys name 'no' [ 964.635754][T32758] netlink: 'syz-executor4': attribute type 2 has an invalid length. 09:34:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:34:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000003080501ff0280fffdfffe2e0a0000000c0003002f006a007d0a00010c000200170022ff02f1d271"], 0x2c}}, 0x0) 09:34:46 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x2000000000081}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) [ 964.939087][ T306] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 965.006508][ T306] netlink: 'syz-executor4': attribute type 2 has an invalid length. 09:34:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:34:47 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, &(0x7f0000ea3000)) 09:34:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) sysinfo(&(0x7f00000007c0)=""/154) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc}) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000b00)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) gettid() write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000000)={0x5, 0x18, [0x0, 0x10000, 0xffffffffffffff00, 0x101, 0xfe, 0x0]}) socket$inet6(0xa, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000000180)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_persistent(0x16, 0x0, r4) 09:34:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000003080501ff0280fffdfffe2e0a0000000c0003002f006a007d0a00010c000200170022ff02f1d271"], 0x2c}}, 0x0) 09:34:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f0000002c40)="29000000150005b7ff01ff00040860eb0101ff01ffa4f80c3df00fd57f25ffffff0100002a00f3ff09", 0x29) 09:34:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 965.322194][ T320] netlink: 'syz-executor4': attribute type 3 has an invalid length. 09:34:47 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="24000000040a07031dfffd946fa2837f00200a0009000380001d85687f0000000400ff7e", 0x24}], 0x1}, 0x0) [ 965.377775][ T320] netlink: 'syz-executor4': attribute type 2 has an invalid length. 09:34:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77f7fb, 0x0, 0x0, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x2000000000000000]}, 0x2c) 09:34:47 executing program 5: request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0xfffffffffffffffb) 09:34:47 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="24000000040a07031dfffd946fa2837f00200a0009000380001d85687f0000000400ff7e", 0x24}], 0x1}, 0x0) 09:34:47 executing program 4: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x2afe607254f35b1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000600)="eb3c906d6b66732e666174000204010002000270f7f84d0edbf241e9b7bd51d45648", 0x22}], 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 09:34:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:34:47 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x90c) symlinkat(&(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') open(&(0x7f00000003c0)='./file0/file0\x00', 0xf0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) 09:34:47 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@commit={'commit'}}]}) 09:34:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 965.914009][ T344] FAT-fs (loop4): Directory bread(block 7323) failed [ 965.952144][ T344] FAT-fs (loop4): Directory bread(block 7324) failed 09:34:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="24000000040a07031dfffd946fa2837f00200a0009000380001d85687f0000000400ff7e", 0x24}], 0x1}, 0x0) 09:34:48 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x90c) symlinkat(&(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') open(&(0x7f00000003c0)='./file0/file0\x00', 0xf0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) [ 965.968901][ T344] FAT-fs (loop4): Directory bread(block 7325) failed [ 966.029015][ T344] FAT-fs (loop4): Directory bread(block 7326) failed [ 966.072540][ T363] gfs2: commit mount option requires a positive numeric argument [ 966.084883][ T344] FAT-fs (loop4): Directory bread(block 7327) failed [ 966.121542][ T344] FAT-fs (loop4): Directory bread(block 7328) failed [ 966.130948][ T363] gfs2: can't parse mount arguments [ 966.167502][ T344] FAT-fs (loop4): Directory bread(block 7329) failed [ 966.211785][ T344] FAT-fs (loop4): Directory bread(block 7330) failed 09:34:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="24000000040a07031dfffd946fa2837f00200a0009000380001d85687f0000000400ff7e", 0x24}], 0x1}, 0x0) [ 966.254105][ T371] gfs2: commit mount option requires a positive numeric argument [ 966.266129][ T344] FAT-fs (loop4): Directory bread(block 7331) failed [ 966.308256][ T371] gfs2: can't parse mount arguments [ 966.321196][ T344] FAT-fs (loop4): Directory bread(block 7332) failed 09:34:48 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@commit={'commit'}}]}) 09:34:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x80000000cf, 0x0, 0x0) 09:34:48 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x90c) symlinkat(&(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') open(&(0x7f00000003c0)='./file0/file0\x00', 0xf0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) 09:34:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") r1 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0xff600000}, 0x200000}) 09:34:48 executing program 4: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x2afe607254f35b1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000600)="eb3c906d6b66732e666174000204010002000270f7f84d0edbf241e9b7bd51d45648", 0x22}], 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 09:34:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x80000000cf, 0x0, 0x0) 09:34:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001700)={0x1, 0x9c, 0x100000001, 0x8000000001}, 0x2c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740000, 0x0, 0x20820000, r1}, 0x2c) [ 966.657443][ T393] gfs2: commit mount option requires a positive numeric argument 09:34:48 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="810000001600816c63cc940b72eb1a240a0befced76ac40069000200004633777f759181fbf02872b902c085b0aaa6b5c0a4ea93c092a743f458bdf3be9af7dc32f013a4c4e26193c3af87089fac0a6c1afb7a9375e4cb7828e762460e8c88d4f12ba175865809c5d7f3a200d3629da45e50c2d3e6796e05e84d27b50ac75f3d47", 0x81}], 0x1}, 0x0) [ 966.709211][ T393] gfs2: can't parse mount arguments 09:34:48 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x90c) symlinkat(&(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00') open(&(0x7f00000003c0)='./file0/file0\x00', 0xf0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) 09:34:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x80000000cf, 0x0, 0x0) 09:34:48 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='session=0x0100']) 09:34:48 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@commit={'commit'}}]}) [ 966.877159][ T404] FAT-fs (loop4): Directory bread(block 7323) failed 09:34:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001200192340834b80040d8c160a067fffffe181004e22000075a9bdee93631c6b1c81debc9e08244f61c40717a261c25f64009400050028925aa8000000000000ff7f00f0fffeffe809000000fff5dd001b2f0f00", 0x58}], 0x1) [ 966.923423][ T404] FAT-fs (loop4): Directory bread(block 7324) failed [ 966.954865][ T404] FAT-fs (loop4): Directory bread(block 7325) failed 09:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x80000000cf, 0x0, 0x0) [ 966.983023][ T404] FAT-fs (loop4): Directory bread(block 7326) failed [ 967.009790][ T422] gfs2: commit mount option requires a positive numeric argument 09:34:49 executing program 3: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 967.033856][ T404] FAT-fs (loop4): Directory bread(block 7327) failed [ 967.063269][ T404] FAT-fs (loop4): Directory bread(block 7328) failed [ 967.078252][ T404] FAT-fs (loop4): Directory bread(block 7329) failed [ 967.085337][ T422] gfs2: can't parse mount arguments [ 967.123804][ T404] FAT-fs (loop4): Directory bread(block 7330) failed 09:34:49 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x5, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) close(r0) io_setup(0x80, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) getsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x800000018) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="44000700000000000000198d81f4c36caedd07da101044793caf5ba1b3b1bf332c0761b32e7d93e33096742eeaae50a44cf4d5b87c8ba51212569a84abfa4aafe3e35c737ac3"], 0x0) write(r1, &(0x7f0000000400)="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", 0x200) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xcff, 0x1, 0x6}, &(0x7f0000000380)=0x10) sendfile(r1, r2, 0x0, 0x1000f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) [ 967.207026][ T404] FAT-fs (loop4): Directory bread(block 7331) failed [ 967.228193][ T404] FAT-fs (loop4): Directory bread(block 7332) failed [ 967.320081][ T26] audit: type=1800 audit(1548149689.330:190): pid=436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16536 res=0 [ 967.423581][ T26] audit: type=1804 audit(1548149689.330:191): pid=436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir030418389/syzkaller.6PK9uN/14/file0" dev="sda1" ino=16536 res=1 09:34:49 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044df9, &(0x7f0000000000)) 09:34:49 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@commit={'commit'}}]}) 09:34:49 executing program 4: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x2afe607254f35b1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000600)="eb3c906d6b66732e666174000204010002000270f7f84d0edbf241e9b7bd51d45648", 0x22}], 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 09:34:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xa) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\xd4\x00\x04*\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00\x00\x00E\xccaX\xf01R\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;') sendfile(r0, r1, &(0x7f0000000040), 0xfffffffe) [ 967.651646][ T447] gfs2: commit mount option requires a positive numeric argument [ 967.728736][ C0] net_ratelimit: 18 callbacks suppressed [ 967.728783][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 967.741002][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 967.749481][ T447] gfs2: can't parse mount arguments 09:34:49 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044df9, &(0x7f0000000000)) [ 967.888249][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 967.894546][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:34:50 executing program 4: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x2afe607254f35b1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000600)="eb3c906d6b66732e666174000204010002000270f7f84d0edbf241e9b7bd51d45648", 0x22}], 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) umount2(&(0x7f0000000280)='./file0\x00', 0x0) [ 967.967248][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 967.973080][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:50 executing program 3: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:34:50 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044df9, &(0x7f0000000000)) [ 968.127189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 968.133060][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:50 executing program 5: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:34:50 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044df9, &(0x7f0000000000)) [ 968.487393][ T467] FAT-fs (loop4): Directory bread(block 7323) failed [ 968.593228][ T467] FAT-fs (loop4): Directory bread(block 7324) failed [ 968.651180][ T467] FAT-fs (loop4): Directory bread(block 7325) failed [ 968.670767][ T467] FAT-fs (loop4): Directory bread(block 7326) failed 09:34:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xa) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\xd4\x00\x04*\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00\x00\x00E\xccaX\xf01R\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;') sendfile(r0, r1, &(0x7f0000000040), 0xfffffffe) [ 968.712632][ T467] FAT-fs (loop4): Directory bread(block 7327) failed [ 968.767030][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 968.772988][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 968.778737][ T467] FAT-fs (loop4): Directory bread(block 7328) failed [ 968.779455][ T467] FAT-fs (loop4): Directory bread(block 7329) failed [ 968.837213][ T467] FAT-fs (loop4): Directory bread(block 7330) failed [ 968.868177][ T467] FAT-fs (loop4): Directory bread(block 7331) failed [ 968.911929][ T467] FAT-fs (loop4): Directory bread(block 7332) failed [ 969.297311][ T26] audit: type=1804 audit(1548149691.301:192): pid=482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir030418389/syzkaller.6PK9uN/14/file0" dev="sda1" ino=16536 res=1 09:34:51 executing program 3: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:34:51 executing program 1: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:34:51 executing program 5: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:34:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x400000a77, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134) fcntl$setpipe(r3, 0x407, 0xc452) close(r1) 09:34:51 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x5, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) close(r0) io_setup(0x80, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) getsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x800000018) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="44000700000000000000198d81f4c36caedd07da101044793caf5ba1b3b1bf332c0761b32e7d93e33096742eeaae50a44cf4d5b87c8ba51212569a84abfa4aafe3e35c737ac3"], 0x0) write(r1, &(0x7f0000000400)="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", 0x200) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xcff, 0x1, 0x6}, &(0x7f0000000380)=0x10) sendfile(r1, r2, 0x0, 0x1000f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) [ 969.648453][ T26] audit: type=1800 audit(1548149691.661:193): pid=496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16913 res=0 09:34:51 executing program 5: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 969.763027][ T26] audit: type=1804 audit(1548149691.671:194): pid=496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir030418389/syzkaller.6PK9uN/15/file0" dev="sda1" ino=16913 res=1 09:34:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xa) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\xd4\x00\x04*\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00\x00\x00E\xccaX\xf01R\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;') sendfile(r0, r1, &(0x7f0000000040), 0xfffffffe) 09:34:52 executing program 3: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:34:52 executing program 1: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:34:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x400000a77, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134) fcntl$setpipe(r3, 0x407, 0xc452) close(r1) 09:34:52 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x5, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) close(r0) io_setup(0x80, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) getsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x800000018) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="44000700000000000000198d81f4c36caedd07da101044793caf5ba1b3b1bf332c0761b32e7d93e33096742eeaae50a44cf4d5b87c8ba51212569a84abfa4aafe3e35c737ac3"], 0x0) write(r1, &(0x7f0000000400)="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", 0x200) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xcff, 0x1, 0x6}, &(0x7f0000000380)=0x10) sendfile(r1, r2, 0x0, 0x1000f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) [ 971.154085][ T26] audit: type=1800 audit(1548149693.162:195): pid=523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16914 res=0 09:34:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000000000000000000900000102000000000000000040000000000027bf4ff0a8612ba40000000000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) [ 971.290306][ T26] audit: type=1804 audit(1548149693.192:196): pid=523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/24/file0" dev="sda1" ino=16914 res=1 09:34:53 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x5, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) close(r0) io_setup(0x80, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) getsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x800000018) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="44000700000000000000198d81f4c36caedd07da101044793caf5ba1b3b1bf332c0761b32e7d93e33096742eeaae50a44cf4d5b87c8ba51212569a84abfa4aafe3e35c737ac3"], 0x0) write(r1, &(0x7f0000000400)="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", 0x200) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xcff, 0x1, 0x6}, &(0x7f0000000380)=0x10) sendfile(r1, r2, 0x0, 0x1000f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) 09:34:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xa) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\xd4\x00\x04*\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00\x00\x00E\xccaX\xf01R\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;') sendfile(r0, r1, &(0x7f0000000040), 0xfffffffe) 09:34:53 executing program 1: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000a80)={@void, @void, @ipx={0xffff, 0x1e, 0x0, 0x1, {@current, @current, 0x80}, {@current, @random="bd62a0a63d68"}}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r2, 0x80000000, 0xfffffffffffffff7) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000100000000000000000000000003000000ffff00000000d68600000000200000000000000000400000000000000000000000e40000000000000000080000000000000000000000000000"], 0x4f) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'bbr\x00'}}, 0x25) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0xa6, [], 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/166}, &(0x7f0000000140)=0x78) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:34:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x400000a77, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134) fcntl$setpipe(r3, 0x407, 0xc452) close(r1) 09:34:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000000000000000000900000102000000000000000040000000000027bf4ff0a8612ba40000000000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) [ 972.010637][ T26] audit: type=1800 audit(1548149694.022:197): pid=539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16945 res=0 [ 972.115818][ T26] audit: type=1804 audit(1548149694.072:198): pid=539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir030418389/syzkaller.6PK9uN/16/file0" dev="sda1" ino=16945 res=1 09:34:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0xa}]}]}, 0x16c}}, 0x0) 09:34:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x400000a77, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134) fcntl$setpipe(r3, 0x407, 0xc452) close(r1) [ 972.924800][ C1] net_ratelimit: 22 callbacks suppressed [ 972.924810][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 972.936441][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:34:55 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, 0x0) 09:34:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000000000000000000900000102000000000000000040000000000027bf4ff0a8612ba40000000000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) 09:34:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) [ 973.165087][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 973.171960][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:34:55 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x5, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) close(r0) io_setup(0x80, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) getsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x800000018) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="44000700000000000000198d81f4c36caedd07da101044793caf5ba1b3b1bf332c0761b32e7d93e33096742eeaae50a44cf4d5b87c8ba51212569a84abfa4aafe3e35c737ac3"], 0x0) write(r1, &(0x7f0000000400)="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", 0x200) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xcff, 0x1, 0x6}, &(0x7f0000000380)=0x10) sendfile(r1, r2, 0x0, 0x1000f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) 09:34:55 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, 0x0) [ 973.544559][ T26] audit: type=1800 audit(1548149695.553:199): pid=575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16914 res=0 [ 973.630032][ T26] audit: type=1804 audit(1548149695.603:200): pid=575 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/25/file0" dev="sda1" ino=16914 res=1 09:34:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000000000000000000900000102000000000000000040000000000027bf4ff0a8612ba40000000000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) 09:34:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) 09:34:55 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, 0x0) 09:34:55 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x5, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) close(r0) io_setup(0x80, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) getsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x800000018) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="44000700000000000000198d81f4c36caedd07da101044793caf5ba1b3b1bf332c0761b32e7d93e33096742eeaae50a44cf4d5b87c8ba51212569a84abfa4aafe3e35c737ac3"], 0x0) write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xcff, 0x1, 0x6}, &(0x7f0000000380)=0x10) sendfile(r1, r2, 0x0, 0x1000f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) 09:34:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) 09:34:56 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, 0x0) [ 973.975021][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 973.982126][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 974.095120][ T26] audit: type=1800 audit(1548149696.103:201): pid=592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16535 res=0 [ 974.124682][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 974.132206][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:34:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) 09:34:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) [ 974.204482][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 974.211233][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 974.238258][ T26] audit: type=1804 audit(1548149696.153:202): pid=592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir030418389/syzkaller.6PK9uN/17/file0" dev="sda1" ino=16535 res=1 09:34:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) 09:34:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) 09:34:57 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x5, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) close(r0) io_setup(0x80, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) getsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x800000018) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="44000700000000000000198d81f4c36caedd07da101044793caf5ba1b3b1bf332c0761b32e7d93e33096742eeaae50a44cf4d5b87c8ba51212569a84abfa4aafe3e35c737ac3"], 0x0) write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xcff, 0x1, 0x6}, &(0x7f0000000380)=0x10) sendfile(r1, r2, 0x0, 0x1000f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) 09:34:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) 09:34:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) 09:34:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) 09:34:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x803, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) [ 975.325150][ T26] audit: type=1800 audit(1548149697.344:203): pid=630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16543 res=0 [ 975.420301][ T26] audit: type=1804 audit(1548149697.344:204): pid=630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/26/file0" dev="sda1" ino=16543 res=1 09:34:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}]}) 09:34:58 executing program 1: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) 09:34:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) 09:34:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) [ 976.090098][ T644] overlayfs: empty lowerdir 09:34:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 09:34:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}]}) 09:34:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@dev, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000021c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002200)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000002300)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004c80)={'vcan0\x00'}) tkill(r0, 0x1004000000016) [ 976.308358][ T656] overlayfs: empty lowerdir 09:34:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) 09:34:58 executing program 0: setreuid(0xee00, 0x0) r0 = getuid() setuid(r0) 09:34:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}]}) [ 976.645114][ T665] overlayfs: empty lowerdir 09:34:58 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) read(r1, 0x0, 0x1ec) 09:34:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, 0x0) r3 = getpgrp(0x0) prlimit64(r3, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 09:34:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000240), r1, 0x0, 0x53, 0x0) 09:34:59 executing program 1: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) 09:34:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}]}) 09:34:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000300)={0x90, 0x0, 0x5, {0x0, 0x2, 0x81, 0x1f, 0x0, 0x80000000, {0x3, 0x0, 0x0, 0x9, 0x8, 0x6, 0x8892, 0x0, 0x6, 0xffffffffffffffff, 0x8, r2, 0x0, 0x0, 0x3}}}, 0x90) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in=@local, 0x0, 0x3, 0x4e21, 0x3, 0x0, 0x80, 0x0, 0x67, r1, r2}, {0x8, 0x2, 0x10001, 0x0, 0x100000000, 0x3, 0x9d20}, {0x4}, 0x220, 0x80, 0x2, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d2, 0x33}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3503, 0x0, 0x2, 0x81, 0x0, 0x3e93, 0x9}}, 0xe8) setuid(0x0) [ 977.091625][ T691] overlayfs: empty lowerdir 09:34:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 09:34:59 executing program 5: r0 = socket$kcm(0x10, 0x4000000002, 0x10) socketpair$unix(0x1, 0x800000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002b00812de45ae087185082cf0124b0eba06ec4000941000000040018000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 09:34:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, 0x0) r3 = getpgrp(0x0) prlimit64(r3, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 09:34:59 executing program 4: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) 09:34:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000300)={0x90, 0x0, 0x5, {0x0, 0x2, 0x81, 0x1f, 0x0, 0x80000000, {0x3, 0x0, 0x0, 0x9, 0x8, 0x6, 0x8892, 0x0, 0x6, 0xffffffffffffffff, 0x8, r2, 0x0, 0x0, 0x3}}}, 0x90) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in=@local, 0x0, 0x3, 0x4e21, 0x3, 0x0, 0x80, 0x0, 0x67, r1, r2}, {0x8, 0x2, 0x10001, 0x0, 0x100000000, 0x3, 0x9d20}, {0x4}, 0x220, 0x80, 0x2, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d2, 0x33}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3503, 0x0, 0x2, 0x81, 0x0, 0x3e93, 0x9}}, 0xe8) setuid(0x0) 09:34:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 09:34:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, 0x0) r3 = getpgrp(0x0) prlimit64(r3, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 09:35:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, 0x0) r3 = getpgrp(0x0) prlimit64(r3, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 09:35:00 executing program 1: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) [ 978.133284][ C0] net_ratelimit: 18 callbacks suppressed [ 978.133344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 978.145218][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000300)={0x90, 0x0, 0x5, {0x0, 0x2, 0x81, 0x1f, 0x0, 0x80000000, {0x3, 0x0, 0x0, 0x9, 0x8, 0x6, 0x8892, 0x0, 0x6, 0xffffffffffffffff, 0x8, r2, 0x0, 0x0, 0x3}}}, 0x90) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in=@local, 0x0, 0x3, 0x4e21, 0x3, 0x0, 0x80, 0x0, 0x67, r1, r2}, {0x8, 0x2, 0x10001, 0x0, 0x100000000, 0x3, 0x9d20}, {0x4}, 0x220, 0x80, 0x2, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d2, 0x33}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3503, 0x0, 0x2, 0x81, 0x0, 0x3e93, 0x9}}, 0xe8) setuid(0x0) [ 978.282553][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 978.289079][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 978.362566][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 978.368930][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:35:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000300)={0x90, 0x0, 0x5, {0x0, 0x2, 0x81, 0x1f, 0x0, 0x80000000, {0x3, 0x0, 0x0, 0x9, 0x8, 0x6, 0x8892, 0x0, 0x6, 0xffffffffffffffff, 0x8, r2, 0x0, 0x0, 0x3}}}, 0x90) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in=@local, 0x0, 0x3, 0x4e21, 0x3, 0x0, 0x80, 0x0, 0x67, r1, r2}, {0x8, 0x2, 0x10001, 0x0, 0x100000000, 0x3, 0x9d20}, {0x4}, 0x220, 0x80, 0x2, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d2, 0x33}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3503, 0x0, 0x2, 0x81, 0x0, 0x3e93, 0x9}}, 0xe8) setuid(0x0) 09:35:00 executing program 4: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) [ 978.527427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 978.533495][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:35:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 09:35:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000300)={0x90, 0x0, 0x5, {0x0, 0x2, 0x81, 0x1f, 0x0, 0x80000000, {0x3, 0x0, 0x0, 0x9, 0x8, 0x6, 0x8892, 0x0, 0x6, 0xffffffffffffffff, 0x8, r2, 0x0, 0x0, 0x3}}}, 0x90) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in=@local, 0x0, 0x3, 0x4e21, 0x3, 0x0, 0x80, 0x0, 0x67, r1, r2}, {0x8, 0x2, 0x10001, 0x0, 0x100000000, 0x3, 0x9d20}, {0x4}, 0x220, 0x80, 0x2, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d2, 0x33}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3503, 0x0, 0x2, 0x81, 0x0, 0x3e93, 0x9}}, 0xe8) setuid(0x0) 09:35:01 executing program 1: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) 09:35:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) [ 979.161723][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 979.167541][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:35:01 executing program 4: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) 09:35:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000300)={0x90, 0x0, 0x5, {0x0, 0x2, 0x81, 0x1f, 0x0, 0x80000000, {0x3, 0x0, 0x0, 0x9, 0x8, 0x6, 0x8892, 0x0, 0x6, 0xffffffffffffffff, 0x8, r2, 0x0, 0x0, 0x3}}}, 0x90) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in=@local, 0x0, 0x3, 0x4e21, 0x3, 0x0, 0x80, 0x0, 0x67, r1, r2}, {0x8, 0x2, 0x10001, 0x0, 0x100000000, 0x3, 0x9d20}, {0x4}, 0x220, 0x80, 0x2, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d2, 0x33}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3503, 0x0, 0x2, 0x81, 0x0, 0x3e93, 0x9}}, 0xe8) setuid(0x0) 09:35:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000300)={0x90, 0x0, 0x5, {0x0, 0x2, 0x81, 0x1f, 0x0, 0x80000000, {0x3, 0x0, 0x0, 0x9, 0x8, 0x6, 0x8892, 0x0, 0x6, 0xffffffffffffffff, 0x8, r2, 0x0, 0x0, 0x3}}}, 0x90) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x25}, @in=@local, 0x0, 0x3, 0x4e21, 0x3, 0x0, 0x80, 0x0, 0x67, r1, r2}, {0x8, 0x2, 0x10001, 0x0, 0x100000000, 0x3, 0x9d20}, {0x4}, 0x220, 0x80, 0x2, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x2a}, 0x4d2, 0x33}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3503, 0x0, 0x2, 0x81, 0x0, 0x3e93, 0x9}}, 0xe8) setuid(0x0) 09:35:02 executing program 1: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) 09:35:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x3, 0x2) unshare(0x20020600) getsockopt(r1, 0x0, 0xce, &(0x7f0000000140)=""/203, &(0x7f0000000000)=0xcb) 09:35:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 09:35:02 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x0, 0x5, 0x0, 0x8001, 0x1c00000000000, 0x0, 0x1, 0x80000001, 0x0, 0x5}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) open(&(0x7f0000000500)='./file0\x00', 0x2, 0x16) ptrace(0x19, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000000004, 0x1012, r6, 0x0) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="6490dcf034db6574e08a2d2c2b6becb8d61a6db4"], 0x1) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) close(r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r8, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x22}}]}]}, 0x58}}, 0x4000004) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r9, 0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'team0\x00', @dev={[], 0x19}}) 09:35:02 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) 09:35:03 executing program 1: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) 09:35:03 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 09:35:03 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:03 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="ad419a8a6685d12312954daad74c48d4d65fd9a4b3821efe58c72e653386ccd83b6530b351f906bdc275b2046440fe685ef25f0dd198b38656e83c2490ef892a5b6ed38cbb897a89a759db8fa53bcf76c1c2d663f05a0a402fdfa33d8d247f8bf443f3ada23764b66eb4b1054f8982ee8ed466d2fb2e81489cd961482d6b349875ebd35b4b32466890bfe40940ae8d8661e1ddadcd79522a9e6de6c36b681ff040ae838e6b5ab05a42d7eb063e581426acfeb5c517ca7fdce33496638af856efdfefcdcebef4551ee111f76984dda8a49c7b873ff693c59974943af64b765326abdb7d735671e7ab0924d92024e98aa6443fabb02ed58ab1e61e3de7c55270e1441efc657382e47782ea71f765bbecb4b7de8c9281f394ac5b740e97a7886b77a8aca92dbc6c7502616a0ff0f78183463015df94943eba85c2dbf046b000f57e7127ef5a5c990c740dad8dec6f66a49ec450e3dcd8c0d59892218025a63dec88e8bb1e63a879bbc9b2bc55a892f009022bdba16d95cfc78a8fadeccdacb9cdcafb03f0c5fbb87e204cc320cdcf32bfd091a73127843e4b794fa77f52c92334bbc498f3320d973019bbbdb17c87ad1f80492fe2c3d180641b07f7b3864ac8d15d68479dce2c8cf07ccb3b1aa0e2dad715c3c5ce5146002cc93e7324b04f34419a542eb07a647f21d613a84df596dc163be8dc51ca80eed4af71ab19d0637ddc10d15d7854947c4696219d327d923dc012a2e3ac460528386f24a89312c1351212ba6f97e52c82caa2fc8fcba3b277c7095ece965ee59ea294f40abdcc737c54fee35247edb44ac6fa55262a0e855dd9320dd77c70adef264ade4669484faa3951df5edb4a61aae3e72edfcb5772ef11c2e7c25fd2e6c7781391e122882f5ec944675c8ff2679c8d8a0041b2500dab212cbd5b11c15eaf3fd50888e7b0bc585c1a3e6534edb0ffc8f3d32b37258d9899f67e9afce48d18d85ff85efb3ea0073913c33ddc84fa3536d3cfb9fc0310cdb75f32ce1a98fcaed48c562c83470b17724d00972019838c69bc89227c645fddbaa37c32dc7ef3b7a9c044f96bb85db6cc56ea6c6abc25314817875db2572878a4880f8723901f14582acbb700bd75e92da00270b16a3b5a4719811c1117f06adaae8d42ae8d79f21b3f3637851619059e72e5dc42ecd0cc4aabb9ce2ae1b5fe22983d8e0275c23efcad19920df060f63f1d50093df0f39267a934503dce033c5ef12f6cf15c3df5573f5c3d7773e0dd67ba6e91ef1c3f5bc9d97da1d2190ab2a5f95a46f0233122215065f088625103299353acb56d5b6a234c839674561660f6206b21410cae86975a145351de62792082b19cfea55e48e28a1c4e078e2faa0965ef64aa7254c2bfc580bc86a8bcde98b263229415517bce205076fa537acbe704f432bea558ce05b8640874468894997e3b7065e91524d1657df576f3667d361586cc303c3c894c500e3ae4fd20f9d50dcfad55501c10912465e658e3984dfff165d0c1f86b6723858da5cd604c31042edd3dbc130c9ac82ee7842c1bf33041864f37a7c2dba47cbc57d29e8e5f920ff4f6b6e397f109d51d4a4b0fa02d2108e201fd5042182b018b51c762ff03154e1960c6511dde089853ce28e029eaa7e7c58805efd5bae1f0bee43a6d45965eb0894ba133a46df81c767690fe0ec02a35376acf1d625d81b40192ecdec40050b2d57f466ba3b6926ec63ae0abc3ce733c0845116ee46cd65b736c3fd636edf8ef70c17e57120fe24cc007330d9453de0a560d74e4f3c59050d6a93727b6abd6e5266a28206ea421c2d9e49c2d02de228a17193754f201ee84cac4793417faa090f95362512a71735d1c090a3df4cad75908dbe94551fef19de751e92e64fb0a9b008886ea4484d424aca80a0a2c3e06d48061babcb0cab65a0d28523d8ad2bf862bf3baf4ccf423bc0319092ac606041a1e7b1a4602ac4a33a0d44b0885895ac10a52b3688b9c604582a763df5269ddc4db5b0f54ca10fa47cf8b543ffa2e881acca2caf2c0a2048ca98c0e1c2344b9f7ee174e17f6e26aa5360983805e0400488641a7bf10f4c42be951d0bae1015f42e24270a3a8990dd1ca03b2538ba1352dab99352dae4036afd9153e59e0e992f249b6b1a189343032b2b090955e977d715d02c2e2405de8ddd36c1d8d3e17a1f75047ac35cff53c7cd62c367b8f7bffa43cb317ddb23be378a118cb0764c10305805efed5a6ec3139ded990b3fad3638abc2b70ff97cccd12ed5d4b3da82fe30f9033462b43138a8d88b41d5092c0d7850ff1c6a3d2d59b1cd7039f46a40808d50df823f631564174ca3efe064bc0dc11eacbd06a62123d6e99872c2ea0d2894b27db14abd3f3c0e6d32875c32c836e0ca21918226164d9292f53b770322a700f6904498dcd641ec0e37c2b9d7cb553adeda4fbe609ffb887f0811823ae800de34a8391ead83cf6507db1b3cfbef74f78a3a9938e82b03161a0f2e4db3d3388fbb6b0890ae78f30f593138384ef3f9a1b3eebea560f8151a7a842ae9e5689ccb4dc2c1f253fc212ea70bf4ae28e8ec9777797b250eb616302b7b6d7fa4903b707ea4d22fb49899757e5e0ee01f45db074c6feb510e48839f14111e62406d9ddb997301063c4281da3bb248401e87f14097ab854b5cf64d5637124e21f2fb44bee9e4745b9a5c05965e05137b640449801286f4a4e68a4b35e7ed57cf3d12319e4edd411226954af24bf83b5902aab6e89d3adc55830a7176c8ede32a1023257ef6d5cd6c8ed18bee65182914242f1b19c0223f81582f12122daeda7f2a380d0712807eafd935433585c3b8a9dad09421835fdec1d86388279f8e09106399cbc2bd3b2fd5e9e7cf801ecf431de0ac64d559d81a249adec1cda82a230a6c8a83688338d03e139792787b02bc20da356d152f684ec301a03edfc3b407a2ce3edd1abb9e73a5be9f9332e066909639b7f3163a11f7ad03b8039706d2339cfeb8750fa2b78a03e4415baeba1d1a644bb844b3abc5a1350c1ad05f010d9b2c3188a77645026ee23aa0be1ab90a89f729a2e5987a2b624f8f48939fb7eac589c784449185f2645f03b99de91370e8977c634add60f5ed3a8ef36669c820bc05dc00dbbfebc1ad8096cbb359f21ab2ec561d9b867e03400a89d893496e9f1c8354a4ac6be95261a296cc365eb60d9f4f2b27f92ba3cf9724d10d0c3cde0896a2b70365569f349a9bf11471f55a16da4bd89a7a95e45ecd55fc377a52855a46463087ad6b659e70f70aecbad0056ad3fac5c1b56242d2e730ce1f1011708c94f718eb1391cd5886ec56c10536aadef103923336574544d76bc0c1b5ad321ea444796237be8132b2962606c76cc83f0a8290f85a28fe516cfafc095bc622d5070fccd88392867db805212d39776b05bbb4052e202eefc0376d9840e0e986268a2e976523643d4c5b16e828be11edb6cae4df929b9101715362a78748b1fa21d338f50a3ed45071fc198d00cda22c1070ca9ddd41635b710cfa76e411ea6c404ca5e79adc857af26eda668f7ef15e821a8097ae34cef2edf7482ce1f21e3c1ddccc615cb637f8e4e1bdba1bff58350951994d7dec02916b9a2da6728b4ad33d40ea6f0e19616ba1bb4c277825df7abe6e6a655ba17d8da51fc9161cfee88edfd9fe32c2c8d7e2c182c0661144a5d539367fc7ad0c96f1ac2a5f5feee8a4b4b3ff649d5df5f392652ab1439051c46c752c94f0ee379196ab675d64f7d46f86fb49770d2460ed61ce8f70829e81c6d8ef05e14539fda2fac530c9a55ffd0d3b72b879f2e238ebcd5365f60d3b83c15016ccb3e69a8b5d8624f96edefbbfb4e42153c99d44a23e489b7547b3f32602df14962ef149cdea99f1a708246d6fdebfb73ca25335439665ca5347ab34fedaf4f6476658cd3346a0dd41fe12fa1f26dc140bd204dc3fcac1574cfaf1bacb158f24a5492fbc2a273de62f60b12085c788e11f3d9a192dc7d43eec20e959cc8d5596299707fa849764abbc3524bac1846e9741c31f01b78acfff47a6955c7bb4f61e2f05262bfe7ca789e653cd724e12ae6bdbed733cf39bdb9c381b63c1d432cb9effc7ff07e3ea425fbb26f8cdf2d71ea2bb6d1cae49ad200792624a2fc7d9da6af60f38c286a3b0590f5d9fa2a002536dd61ecc58cbcb0b71b1878aba96a7ec3c764abd39397e3094cf36b7b2d8b5dff46b46161e490c9048cb1f65965887f3eea3e4b1e77d908fb58671410fc958e7e624630784dc445851f6c8256dd4dad46b7b41c083642356ad37fb988c2e84f17f14eecb8c216092fbe42a16d11c0ceda6f8eb74906d413c14c9e4724a6cb547626daa436e808a9939ffbc717ed2a1e7f9bbad0aeb7c8948e12963050b3438dda23c0131d47fff89c38612c4a3ac10167917d96153d0ba68b7376488876ab7d2c2da8051ec63f7618947a07fccda832bf005295b6f3f850775b9de9dff1ca7700c795ed618695f9bfdabe2af1ead7d858d1d10c8be1bd7424fc0b88f491856b9b45928d201aa79753319756ed448853b89ddadcbd8efbd6725d11166635f5b5bdb9103a8b32cdbd36b5612d70987452b0c995c245dafdfb7f7a630173a05ef733d55a10912c4df5f1f36190fc2d69247fdc7699d0527d719991bac28126b104d9ce57e23f96f2186bc9345271c5d7e9bce22fb7946d9b7958c5ac325c685f02e3160862016ceb5dcb15c7dd7a84d4bd9dd916ef401492a8c30322429e14d825914ac0ee25e81e2539c28d4a803d6392f150894de752b20cccbb1990cd3da7834125b1cb5a11e9201a5a2291f53acf9dc880c0a3c8c0391dd90f9f8d0f59453643b3daf42893703b3e396a3286a7c623da9a381595aafce0b4832d0ad60a31c04d7402c228048dbc689f66604fb0e0e64d8b98f54c07e41f36b96e6e7bcf6f6e1177750dabf64cb599f4144d34aa61aea4ba3901b8c9d6f2b9e824ed0c9e0a5e7d679a5fa7dfadfd74a69e06fdf13e04a794c9e739fc675385e6cc5bbbfc52a001e1c93b268c03358cb20a656beca574cb3d7a2a76d67afc655f35af80fc22d7307044919b25379f060abc0698e4e89eec226227d9da75e6b6322ad8da0f12521fe4098e3c055918c72f857820ebc21edd4667c824671d89f9b87b150c688d7a84403d4110fe5be2cb0f5c86a18e0b82f3d0dcfbd22e25ab6db9a14638c18e46c4a225f68cd069ccbcd4d7b77a3977c5d1fe8388acf127fe4ed56abae6c934a0479bae555d95a3991815af7744980b9951ca0a180033ab1930dee8efd7fa2d0c13f690b6bb8b7dfdb3b1c06b3c23022f6e630c2b01a446c31037ddf33efe2261763aa79b884ec396cd781216d8e37762304f7326406453d1fa7f2e9397825cd94a3a21e901e093bb851d3dbaa043500b3edcbd86ca226276929dc9709a61a1622edc77055c4494b0b1c68ca648f44ed2a0c5328a6c9920b7196a0b30a7f6dc1c744733f35327d067da17c326054433912e957edae0ba76f3aa82f1079fd1ef9bed3429a75f168089522d0beddae352495db4f7d2afab77b4a77841b9ef0190ef98fb32dd68bd8cf0c134971ccb0d7e2b1fda91660a1f782cd0de1775cb525f090f92eca870ca1660c0db1feaf8495c26f1d0e895a70fa26f5532a67cb5ec1c4dbe0395642ae954c6735370dd29a798f58dd49a5976f5a8570c533ecfc5815946e2495835be71e085fd7b6a639b0522fcfcae4f3d45842e7719fa82e92009a4c4d633129b2ace21bc7060e07e437869aa64e22f6df0e6ffc974", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:04 executing program 1: accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x0) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/19, 0x13}], 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="020306091000000000dd004c9e0000000200aa0802000020000000000000000105000600240000000a0000000000dfffff0400e50000070000001f00000000000025000000001f00020001004000000000000005000500020000000a00000000"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) lstat(0x0, &(0x7f0000000340)) open$dir(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500), 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001540)=""/23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x0, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000080), 0x0, 0x3}, 0x20) 09:35:04 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="ad419a8a6685d12312954daad74c48d4d65fd9a4b3821efe58c72e653386ccd83b6530b351f906bdc275b2046440fe685ef25f0dd198b38656e83c2490ef892a5b6ed38cbb897a89a759db8fa53bcf76c1c2d663f05a0a402fdfa33d8d247f8bf443f3ada23764b66eb4b1054f8982ee8ed466d2fb2e81489cd961482d6b349875ebd35b4b32466890bfe40940ae8d8661e1ddadcd79522a9e6de6c36b681ff040ae838e6b5ab05a42d7eb063e581426acfeb5c517ca7fdce33496638af856efdfefcdcebef4551ee111f76984dda8a49c7b873ff693c59974943af64b765326abdb7d735671e7ab0924d92024e98aa6443fabb02ed58ab1e61e3de7c55270e1441efc657382e47782ea71f765bbecb4b7de8c9281f394ac5b740e97a7886b77a8aca92dbc6c7502616a0ff0f78183463015df94943eba85c2dbf046b000f57e7127ef5a5c990c740dad8dec6f66a49ec450e3dcd8c0d59892218025a63dec88e8bb1e63a879bbc9b2bc55a892f009022bdba16d95cfc78a8fadeccdacb9cdcafb03f0c5fbb87e204cc320cdcf32bfd091a73127843e4b794fa77f52c92334bbc498f3320d973019bbbdb17c87ad1f80492fe2c3d180641b07f7b3864ac8d15d68479dce2c8cf07ccb3b1aa0e2dad715c3c5ce5146002cc93e7324b04f34419a542eb07a647f21d613a84df596dc163be8dc51ca80eed4af71ab19d0637ddc10d15d7854947c4696219d327d923dc012a2e3ac460528386f24a89312c1351212ba6f97e52c82caa2fc8fcba3b277c7095ece965ee59ea294f40abdcc737c54fee35247edb44ac6fa55262a0e855dd9320dd77c70adef264ade4669484faa3951df5edb4a61aae3e72edfcb5772ef11c2e7c25fd2e6c7781391e122882f5ec944675c8ff2679c8d8a0041b2500dab212cbd5b11c15eaf3fd50888e7b0bc585c1a3e6534edb0ffc8f3d32b37258d9899f67e9afce48d18d85ff85efb3ea0073913c33ddc84fa3536d3cfb9fc0310cdb75f32ce1a98fcaed48c562c83470b17724d00972019838c69bc89227c645fddbaa37c32dc7ef3b7a9c044f96bb85db6cc56ea6c6abc25314817875db2572878a4880f8723901f14582acbb700bd75e92da00270b16a3b5a4719811c1117f06adaae8d42ae8d79f21b3f3637851619059e72e5dc42ecd0cc4aabb9ce2ae1b5fe22983d8e0275c23efcad19920df060f63f1d50093df0f39267a934503dce033c5ef12f6cf15c3df5573f5c3d7773e0dd67ba6e91ef1c3f5bc9d97da1d2190ab2a5f95a46f0233122215065f088625103299353acb56d5b6a234c839674561660f6206b21410cae86975a145351de62792082b19cfea55e48e28a1c4e078e2faa0965ef64aa7254c2bfc580bc86a8bcde98b263229415517bce205076fa537acbe704f432bea558ce05b8640874468894997e3b7065e91524d1657df576f3667d361586cc303c3c894c500e3ae4fd20f9d50dcfad55501c10912465e658e3984dfff165d0c1f86b6723858da5cd604c31042edd3dbc130c9ac82ee7842c1bf33041864f37a7c2dba47cbc57d29e8e5f920ff4f6b6e397f109d51d4a4b0fa02d2108e201fd5042182b018b51c762ff03154e1960c6511dde089853ce28e029eaa7e7c58805efd5bae1f0bee43a6d45965eb0894ba133a46df81c767690fe0ec02a35376acf1d625d81b40192ecdec40050b2d57f466ba3b6926ec63ae0abc3ce733c0845116ee46cd65b736c3fd636edf8ef70c17e57120fe24cc007330d9453de0a560d74e4f3c59050d6a93727b6abd6e5266a28206ea421c2d9e49c2d02de228a17193754f201ee84cac4793417faa090f95362512a71735d1c090a3df4cad75908dbe94551fef19de751e92e64fb0a9b008886ea4484d424aca80a0a2c3e06d48061babcb0cab65a0d28523d8ad2bf862bf3baf4ccf423bc0319092ac606041a1e7b1a4602ac4a33a0d44b0885895ac10a52b3688b9c604582a763df5269ddc4db5b0f54ca10fa47cf8b543ffa2e881acca2caf2c0a2048ca98c0e1c2344b9f7ee174e17f6e26aa5360983805e0400488641a7bf10f4c42be951d0bae1015f42e24270a3a8990dd1ca03b2538ba1352dab99352dae4036afd9153e59e0e992f249b6b1a189343032b2b090955e977d715d02c2e2405de8ddd36c1d8d3e17a1f75047ac35cff53c7cd62c367b8f7bffa43cb317ddb23be378a118cb0764c10305805efed5a6ec3139ded990b3fad3638abc2b70ff97cccd12ed5d4b3da82fe30f9033462b43138a8d88b41d5092c0d7850ff1c6a3d2d59b1cd7039f46a40808d50df823f631564174ca3efe064bc0dc11eacbd06a62123d6e99872c2ea0d2894b27db14abd3f3c0e6d32875c32c836e0ca21918226164d9292f53b770322a700f6904498dcd641ec0e37c2b9d7cb553adeda4fbe609ffb887f0811823ae800de34a8391ead83cf6507db1b3cfbef74f78a3a9938e82b03161a0f2e4db3d3388fbb6b0890ae78f30f593138384ef3f9a1b3eebea560f8151a7a842ae9e5689ccb4dc2c1f253fc212ea70bf4ae28e8ec9777797b250eb616302b7b6d7fa4903b707ea4d22fb49899757e5e0ee01f45db074c6feb510e48839f14111e62406d9ddb997301063c4281da3bb248401e87f14097ab854b5cf64d5637124e21f2fb44bee9e4745b9a5c05965e05137b640449801286f4a4e68a4b35e7ed57cf3d12319e4edd411226954af24bf83b5902aab6e89d3adc55830a7176c8ede32a1023257ef6d5cd6c8ed18bee65182914242f1b19c0223f81582f12122daeda7f2a380d0712807eafd935433585c3b8a9dad09421835fdec1d86388279f8e09106399cbc2bd3b2fd5e9e7cf801ecf431de0ac64d559d81a249adec1cda82a230a6c8a83688338d03e139792787b02bc20da356d152f684ec301a03edfc3b407a2ce3edd1abb9e73a5be9f9332e066909639b7f3163a11f7ad03b8039706d2339cfeb8750fa2b78a03e4415baeba1d1a644bb844b3abc5a1350c1ad05f010d9b2c3188a77645026ee23aa0be1ab90a89f729a2e5987a2b624f8f48939fb7eac589c784449185f2645f03b99de91370e8977c634add60f5ed3a8ef36669c820bc05dc00dbbfebc1ad8096cbb359f21ab2ec561d9b867e03400a89d893496e9f1c8354a4ac6be95261a296cc365eb60d9f4f2b27f92ba3cf9724d10d0c3cde0896a2b70365569f349a9bf11471f55a16da4bd89a7a95e45ecd55fc377a52855a46463087ad6b659e70f70aecbad0056ad3fac5c1b56242d2e730ce1f1011708c94f718eb1391cd5886ec56c10536aadef103923336574544d76bc0c1b5ad321ea444796237be8132b2962606c76cc83f0a8290f85a28fe516cfafc095bc622d5070fccd88392867db805212d39776b05bbb4052e202eefc0376d9840e0e986268a2e976523643d4c5b16e828be11edb6cae4df929b9101715362a78748b1fa21d338f50a3ed45071fc198d00cda22c1070ca9ddd41635b710cfa76e411ea6c404ca5e79adc857af26eda668f7ef15e821a8097ae34cef2edf7482ce1f21e3c1ddccc615cb637f8e4e1bdba1bff58350951994d7dec02916b9a2da6728b4ad33d40ea6f0e19616ba1bb4c277825df7abe6e6a655ba17d8da51fc9161cfee88edfd9fe32c2c8d7e2c182c0661144a5d539367fc7ad0c96f1ac2a5f5feee8a4b4b3ff649d5df5f392652ab1439051c46c752c94f0ee379196ab675d64f7d46f86fb49770d2460ed61ce8f70829e81c6d8ef05e14539fda2fac530c9a55ffd0d3b72b879f2e238ebcd5365f60d3b83c15016ccb3e69a8b5d8624f96edefbbfb4e42153c99d44a23e489b7547b3f32602df14962ef149cdea99f1a708246d6fdebfb73ca25335439665ca5347ab34fedaf4f6476658cd3346a0dd41fe12fa1f26dc140bd204dc3fcac1574cfaf1bacb158f24a5492fbc2a273de62f60b12085c788e11f3d9a192dc7d43eec20e959cc8d5596299707fa849764abbc3524bac1846e9741c31f01b78acfff47a6955c7bb4f61e2f05262bfe7ca789e653cd724e12ae6bdbed733cf39bdb9c381b63c1d432cb9effc7ff07e3ea425fbb26f8cdf2d71ea2bb6d1cae49ad200792624a2fc7d9da6af60f38c286a3b0590f5d9fa2a002536dd61ecc58cbcb0b71b1878aba96a7ec3c764abd39397e3094cf36b7b2d8b5dff46b46161e490c9048cb1f65965887f3eea3e4b1e77d908fb58671410fc958e7e624630784dc445851f6c8256dd4dad46b7b41c083642356ad37fb988c2e84f17f14eecb8c216092fbe42a16d11c0ceda6f8eb74906d413c14c9e4724a6cb547626daa436e808a9939ffbc717ed2a1e7f9bbad0aeb7c8948e12963050b3438dda23c0131d47fff89c38612c4a3ac10167917d96153d0ba68b7376488876ab7d2c2da8051ec63f7618947a07fccda832bf005295b6f3f850775b9de9dff1ca7700c795ed618695f9bfdabe2af1ead7d858d1d10c8be1bd7424fc0b88f491856b9b45928d201aa79753319756ed448853b89ddadcbd8efbd6725d11166635f5b5bdb9103a8b32cdbd36b5612d70987452b0c995c245dafdfb7f7a630173a05ef733d55a10912c4df5f1f36190fc2d69247fdc7699d0527d719991bac28126b104d9ce57e23f96f2186bc9345271c5d7e9bce22fb7946d9b7958c5ac325c685f02e3160862016ceb5dcb15c7dd7a84d4bd9dd916ef401492a8c30322429e14d825914ac0ee25e81e2539c28d4a803d6392f150894de752b20cccbb1990cd3da7834125b1cb5a11e9201a5a2291f53acf9dc880c0a3c8c0391dd90f9f8d0f59453643b3daf42893703b3e396a3286a7c623da9a381595aafce0b4832d0ad60a31c04d7402c228048dbc689f66604fb0e0e64d8b98f54c07e41f36b96e6e7bcf6f6e1177750dabf64cb599f4144d34aa61aea4ba3901b8c9d6f2b9e824ed0c9e0a5e7d679a5fa7dfadfd74a69e06fdf13e04a794c9e739fc675385e6cc5bbbfc52a001e1c93b268c03358cb20a656beca574cb3d7a2a76d67afc655f35af80fc22d7307044919b25379f060abc0698e4e89eec226227d9da75e6b6322ad8da0f12521fe4098e3c055918c72f857820ebc21edd4667c824671d89f9b87b150c688d7a84403d4110fe5be2cb0f5c86a18e0b82f3d0dcfbd22e25ab6db9a14638c18e46c4a225f68cd069ccbcd4d7b77a3977c5d1fe8388acf127fe4ed56abae6c934a0479bae555d95a3991815af7744980b9951ca0a180033ab1930dee8efd7fa2d0c13f690b6bb8b7dfdb3b1c06b3c23022f6e630c2b01a446c31037ddf33efe2261763aa79b884ec396cd781216d8e37762304f7326406453d1fa7f2e9397825cd94a3a21e901e093bb851d3dbaa043500b3edcbd86ca226276929dc9709a61a1622edc77055c4494b0b1c68ca648f44ed2a0c5328a6c9920b7196a0b30a7f6dc1c744733f35327d067da17c326054433912e957edae0ba76f3aa82f1079fd1ef9bed3429a75f168089522d0beddae352495db4f7d2afab77b4a77841b9ef0190ef98fb32dd68bd8cf0c134971ccb0d7e2b1fda91660a1f782cd0de1775cb525f090f92eca870ca1660c0db1feaf8495c26f1d0e895a70fa26f5532a67cb5ec1c4dbe0395642ae954c6735370dd29a798f58dd49a5976f5a8570c533ecfc5815946e2495835be71e085fd7b6a639b0522fcfcae4f3d45842e7719fa82e92009a4c4d633129b2ace21bc7060e07e437869aa64e22f6df0e6ffc974", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) [ 983.320315][ C1] net_ratelimit: 22 callbacks suppressed [ 983.320400][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 983.332294][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:35:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x0, 0x5, 0x0, 0x8001, 0x1c00000000000, 0x0, 0x1, 0x80000001, 0x0, 0x5}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) open(&(0x7f0000000500)='./file0\x00', 0x2, 0x16) ptrace(0x19, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000000004, 0x1012, r6, 0x0) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="6490dcf034db6574e08a2d2c2b6becb8d61a6db4"], 0x1) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) close(r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r8, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x22}}]}]}, 0x58}}, 0x4000004) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r9, 0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'team0\x00', @dev={[], 0x19}}) 09:35:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="ad419a8a6685d12312954daad74c48d4d65fd9a4b3821efe58c72e653386ccd83b6530b351f906bdc275b2046440fe685ef25f0dd198b38656e83c2490ef892a5b6ed38cbb897a89a759db8fa53bcf76c1c2d663f05a0a402fdfa33d8d247f8bf443f3ada23764b66eb4b1054f8982ee8ed466d2fb2e81489cd961482d6b349875ebd35b4b32466890bfe40940ae8d8661e1ddadcd79522a9e6de6c36b681ff040ae838e6b5ab05a42d7eb063e581426acfeb5c517ca7fdce33496638af856efdfefcdcebef4551ee111f76984dda8a49c7b873ff693c59974943af64b765326abdb7d735671e7ab0924d92024e98aa6443fabb02ed58ab1e61e3de7c55270e1441efc657382e47782ea71f765bbecb4b7de8c9281f394ac5b740e97a7886b77a8aca92dbc6c7502616a0ff0f78183463015df94943eba85c2dbf046b000f57e7127ef5a5c990c740dad8dec6f66a49ec450e3dcd8c0d59892218025a63dec88e8bb1e63a879bbc9b2bc55a892f009022bdba16d95cfc78a8fadeccdacb9cdcafb03f0c5fbb87e204cc320cdcf32bfd091a73127843e4b794fa77f52c92334bbc498f3320d973019bbbdb17c87ad1f80492fe2c3d180641b07f7b3864ac8d15d68479dce2c8cf07ccb3b1aa0e2dad715c3c5ce5146002cc93e7324b04f34419a542eb07a647f21d613a84df596dc163be8dc51ca80eed4af71ab19d0637ddc10d15d7854947c4696219d327d923dc012a2e3ac460528386f24a89312c1351212ba6f97e52c82caa2fc8fcba3b277c7095ece965ee59ea294f40abdcc737c54fee35247edb44ac6fa55262a0e855dd9320dd77c70adef264ade4669484faa3951df5edb4a61aae3e72edfcb5772ef11c2e7c25fd2e6c7781391e122882f5ec944675c8ff2679c8d8a0041b2500dab212cbd5b11c15eaf3fd50888e7b0bc585c1a3e6534edb0ffc8f3d32b37258d9899f67e9afce48d18d85ff85efb3ea0073913c33ddc84fa3536d3cfb9fc0310cdb75f32ce1a98fcaed48c562c83470b17724d00972019838c69bc89227c645fddbaa37c32dc7ef3b7a9c044f96bb85db6cc56ea6c6abc25314817875db2572878a4880f8723901f14582acbb700bd75e92da00270b16a3b5a4719811c1117f06adaae8d42ae8d79f21b3f3637851619059e72e5dc42ecd0cc4aabb9ce2ae1b5fe22983d8e0275c23efcad19920df060f63f1d50093df0f39267a934503dce033c5ef12f6cf15c3df5573f5c3d7773e0dd67ba6e91ef1c3f5bc9d97da1d2190ab2a5f95a46f0233122215065f088625103299353acb56d5b6a234c839674561660f6206b21410cae86975a145351de62792082b19cfea55e48e28a1c4e078e2faa0965ef64aa7254c2bfc580bc86a8bcde98b263229415517bce205076fa537acbe704f432bea558ce05b8640874468894997e3b7065e91524d1657df576f3667d361586cc303c3c894c500e3ae4fd20f9d50dcfad55501c10912465e658e3984dfff165d0c1f86b6723858da5cd604c31042edd3dbc130c9ac82ee7842c1bf33041864f37a7c2dba47cbc57d29e8e5f920ff4f6b6e397f109d51d4a4b0fa02d2108e201fd5042182b018b51c762ff03154e1960c6511dde089853ce28e029eaa7e7c58805efd5bae1f0bee43a6d45965eb0894ba133a46df81c767690fe0ec02a35376acf1d625d81b40192ecdec40050b2d57f466ba3b6926ec63ae0abc3ce733c0845116ee46cd65b736c3fd636edf8ef70c17e57120fe24cc007330d9453de0a560d74e4f3c59050d6a93727b6abd6e5266a28206ea421c2d9e49c2d02de228a17193754f201ee84cac4793417faa090f95362512a71735d1c090a3df4cad75908dbe94551fef19de751e92e64fb0a9b008886ea4484d424aca80a0a2c3e06d48061babcb0cab65a0d28523d8ad2bf862bf3baf4ccf423bc0319092ac606041a1e7b1a4602ac4a33a0d44b0885895ac10a52b3688b9c604582a763df5269ddc4db5b0f54ca10fa47cf8b543ffa2e881acca2caf2c0a2048ca98c0e1c2344b9f7ee174e17f6e26aa5360983805e0400488641a7bf10f4c42be951d0bae1015f42e24270a3a8990dd1ca03b2538ba1352dab99352dae4036afd9153e59e0e992f249b6b1a189343032b2b090955e977d715d02c2e2405de8ddd36c1d8d3e17a1f75047ac35cff53c7cd62c367b8f7bffa43cb317ddb23be378a118cb0764c10305805efed5a6ec3139ded990b3fad3638abc2b70ff97cccd12ed5d4b3da82fe30f9033462b43138a8d88b41d5092c0d7850ff1c6a3d2d59b1cd7039f46a40808d50df823f631564174ca3efe064bc0dc11eacbd06a62123d6e99872c2ea0d2894b27db14abd3f3c0e6d32875c32c836e0ca21918226164d9292f53b770322a700f6904498dcd641ec0e37c2b9d7cb553adeda4fbe609ffb887f0811823ae800de34a8391ead83cf6507db1b3cfbef74f78a3a9938e82b03161a0f2e4db3d3388fbb6b0890ae78f30f593138384ef3f9a1b3eebea560f8151a7a842ae9e5689ccb4dc2c1f253fc212ea70bf4ae28e8ec9777797b250eb616302b7b6d7fa4903b707ea4d22fb49899757e5e0ee01f45db074c6feb510e48839f14111e62406d9ddb997301063c4281da3bb248401e87f14097ab854b5cf64d5637124e21f2fb44bee9e4745b9a5c05965e05137b640449801286f4a4e68a4b35e7ed57cf3d12319e4edd411226954af24bf83b5902aab6e89d3adc55830a7176c8ede32a1023257ef6d5cd6c8ed18bee65182914242f1b19c0223f81582f12122daeda7f2a380d0712807eafd935433585c3b8a9dad09421835fdec1d86388279f8e09106399cbc2bd3b2fd5e9e7cf801ecf431de0ac64d559d81a249adec1cda82a230a6c8a83688338d03e139792787b02bc20da356d152f684ec301a03edfc3b407a2ce3edd1abb9e73a5be9f9332e066909639b7f3163a11f7ad03b8039706d2339cfeb8750fa2b78a03e4415baeba1d1a644bb844b3abc5a1350c1ad05f010d9b2c3188a77645026ee23aa0be1ab90a89f729a2e5987a2b624f8f48939fb7eac589c784449185f2645f03b99de91370e8977c634add60f5ed3a8ef36669c820bc05dc00dbbfebc1ad8096cbb359f21ab2ec561d9b867e03400a89d893496e9f1c8354a4ac6be95261a296cc365eb60d9f4f2b27f92ba3cf9724d10d0c3cde0896a2b70365569f349a9bf11471f55a16da4bd89a7a95e45ecd55fc377a52855a46463087ad6b659e70f70aecbad0056ad3fac5c1b56242d2e730ce1f1011708c94f718eb1391cd5886ec56c10536aadef103923336574544d76bc0c1b5ad321ea444796237be8132b2962606c76cc83f0a8290f85a28fe516cfafc095bc622d5070fccd88392867db805212d39776b05bbb4052e202eefc0376d9840e0e986268a2e976523643d4c5b16e828be11edb6cae4df929b9101715362a78748b1fa21d338f50a3ed45071fc198d00cda22c1070ca9ddd41635b710cfa76e411ea6c404ca5e79adc857af26eda668f7ef15e821a8097ae34cef2edf7482ce1f21e3c1ddccc615cb637f8e4e1bdba1bff58350951994d7dec02916b9a2da6728b4ad33d40ea6f0e19616ba1bb4c277825df7abe6e6a655ba17d8da51fc9161cfee88edfd9fe32c2c8d7e2c182c0661144a5d539367fc7ad0c96f1ac2a5f5feee8a4b4b3ff649d5df5f392652ab1439051c46c752c94f0ee379196ab675d64f7d46f86fb49770d2460ed61ce8f70829e81c6d8ef05e14539fda2fac530c9a55ffd0d3b72b879f2e238ebcd5365f60d3b83c15016ccb3e69a8b5d8624f96edefbbfb4e42153c99d44a23e489b7547b3f32602df14962ef149cdea99f1a708246d6fdebfb73ca25335439665ca5347ab34fedaf4f6476658cd3346a0dd41fe12fa1f26dc140bd204dc3fcac1574cfaf1bacb158f24a5492fbc2a273de62f60b12085c788e11f3d9a192dc7d43eec20e959cc8d5596299707fa849764abbc3524bac1846e9741c31f01b78acfff47a6955c7bb4f61e2f05262bfe7ca789e653cd724e12ae6bdbed733cf39bdb9c381b63c1d432cb9effc7ff07e3ea425fbb26f8cdf2d71ea2bb6d1cae49ad200792624a2fc7d9da6af60f38c286a3b0590f5d9fa2a002536dd61ecc58cbcb0b71b1878aba96a7ec3c764abd39397e3094cf36b7b2d8b5dff46b46161e490c9048cb1f65965887f3eea3e4b1e77d908fb58671410fc958e7e624630784dc445851f6c8256dd4dad46b7b41c083642356ad37fb988c2e84f17f14eecb8c216092fbe42a16d11c0ceda6f8eb74906d413c14c9e4724a6cb547626daa436e808a9939ffbc717ed2a1e7f9bbad0aeb7c8948e12963050b3438dda23c0131d47fff89c38612c4a3ac10167917d96153d0ba68b7376488876ab7d2c2da8051ec63f7618947a07fccda832bf005295b6f3f850775b9de9dff1ca7700c795ed618695f9bfdabe2af1ead7d858d1d10c8be1bd7424fc0b88f491856b9b45928d201aa79753319756ed448853b89ddadcbd8efbd6725d11166635f5b5bdb9103a8b32cdbd36b5612d70987452b0c995c245dafdfb7f7a630173a05ef733d55a10912c4df5f1f36190fc2d69247fdc7699d0527d719991bac28126b104d9ce57e23f96f2186bc9345271c5d7e9bce22fb7946d9b7958c5ac325c685f02e3160862016ceb5dcb15c7dd7a84d4bd9dd916ef401492a8c30322429e14d825914ac0ee25e81e2539c28d4a803d6392f150894de752b20cccbb1990cd3da7834125b1cb5a11e9201a5a2291f53acf9dc880c0a3c8c0391dd90f9f8d0f59453643b3daf42893703b3e396a3286a7c623da9a381595aafce0b4832d0ad60a31c04d7402c228048dbc689f66604fb0e0e64d8b98f54c07e41f36b96e6e7bcf6f6e1177750dabf64cb599f4144d34aa61aea4ba3901b8c9d6f2b9e824ed0c9e0a5e7d679a5fa7dfadfd74a69e06fdf13e04a794c9e739fc675385e6cc5bbbfc52a001e1c93b268c03358cb20a656beca574cb3d7a2a76d67afc655f35af80fc22d7307044919b25379f060abc0698e4e89eec226227d9da75e6b6322ad8da0f12521fe4098e3c055918c72f857820ebc21edd4667c824671d89f9b87b150c688d7a84403d4110fe5be2cb0f5c86a18e0b82f3d0dcfbd22e25ab6db9a14638c18e46c4a225f68cd069ccbcd4d7b77a3977c5d1fe8388acf127fe4ed56abae6c934a0479bae555d95a3991815af7744980b9951ca0a180033ab1930dee8efd7fa2d0c13f690b6bb8b7dfdb3b1c06b3c23022f6e630c2b01a446c31037ddf33efe2261763aa79b884ec396cd781216d8e37762304f7326406453d1fa7f2e9397825cd94a3a21e901e093bb851d3dbaa043500b3edcbd86ca226276929dc9709a61a1622edc77055c4494b0b1c68ca648f44ed2a0c5328a6c9920b7196a0b30a7f6dc1c744733f35327d067da17c326054433912e957edae0ba76f3aa82f1079fd1ef9bed3429a75f168089522d0beddae352495db4f7d2afab77b4a77841b9ef0190ef98fb32dd68bd8cf0c134971ccb0d7e2b1fda91660a1f782cd0de1775cb525f090f92eca870ca1660c0db1feaf8495c26f1d0e895a70fa26f5532a67cb5ec1c4dbe0395642ae954c6735370dd29a798f58dd49a5976f5a8570c533ecfc5815946e2495835be71e085fd7b6a639b0522fcfcae4f3d45842e7719fa82e92009a4c4d633129b2ace21bc7060e07e437869aa64e22f6df0e6ffc974", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) [ 983.560402][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 983.568935][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x0, 0x5, 0x0, 0x8001, 0x1c00000000000, 0x0, 0x1, 0x80000001, 0x0, 0x5}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) open(&(0x7f0000000500)='./file0\x00', 0x2, 0x16) ptrace(0x19, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000000004, 0x1012, r6, 0x0) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="6490dcf034db6574e08a2d2c2b6becb8d61a6db4"], 0x1) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) close(r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r8, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x22}}]}]}, 0x58}}, 0x4000004) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r9, 0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'team0\x00', @dev={[], 0x19}}) 09:35:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, 0x0) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) 09:35:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, 0x0) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) [ 984.359036][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 984.364889][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 984.519008][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 984.524834][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 984.599530][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 984.606155][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:35:08 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x0, 0x5, 0x0, 0x8001, 0x1c00000000000, 0x0, 0x1, 0x80000001, 0x0, 0x5}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) open(&(0x7f0000000500)='./file0\x00', 0x2, 0x16) ptrace(0x19, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000000004, 0x1012, r6, 0x0) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="6490dcf034db6574e08a2d2c2b6becb8d61a6db4"], 0x1) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) close(r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r8, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x22}}]}]}, 0x58}}, 0x4000004) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r9, 0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'team0\x00', @dev={[], 0x19}}) 09:35:08 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x10000080100) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x241, 0x2, 0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0x275, 0x0, 0x81}, {0x887, 0x0, 0x6b4}, {0xff7, 0x0, 0x9}, {0x875, 0x0, 0x95}, {0x28, 0x0, 0x56b4}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x6, @link_local, 'bond0\x00'}}, 0x1e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = semget(0x3, 0x2, 0x6f0a5b1ab95126ff) semctl$GETNCNT(r4, 0x3, 0xe, &(0x7f0000000600)=""/183) sendto$llc(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x800) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380), 0xfffffffffffffe1d) getsockopt$inet_opts(r5, 0x0, 0x100004, &(0x7f0000000000)=""/88, &(0x7f0000000080)=0x58) sendmsg(r3, &(0x7f0000001ac0)={&(0x7f0000000580)=@sco={0x1f, {0x800, 0x7, 0x517, 0x10000, 0x5, 0x1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, 0x0, 0x0, 0x8040}, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockname$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0x400000500000001) ioctl(r8, 0x8952, &(0x7f0000000700)="3298ff28b41b2dd33115ffdd53f3a0c89470767e815d90aaba1b752a02d679f16d0d13496c0abdbb4f740f09c9974176bc4b7a19f5df751b818fbf3501d7341e1a97ccbd21") r9 = socket$inet(0x2, 0x5, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={0x0, 0x8}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f00000003c0)={r10, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0xacf3}}, [0xc0, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0x0, 0x2, 0xfffffffffffff21e, 0x9, 0x81, 0x400, 0x80, 0x0, 0xcd]}, &(0x7f0000000180)=0x100) 09:35:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000740)="a8") 09:35:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) 09:35:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, 0x0) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) 09:35:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x0, 0x5, 0x0, 0x8001, 0x1c00000000000, 0x0, 0x1, 0x80000001, 0x0, 0x5}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) open(&(0x7f0000000500)='./file0\x00', 0x2, 0x16) ptrace(0x19, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000000004, 0x1012, r6, 0x0) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="6490dcf034db6574e08a2d2c2b6becb8d61a6db4"], 0x1) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) close(r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r8, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x22}}]}]}, 0x58}}, 0x4000004) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r9, 0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'team0\x00', @dev={[], 0x19}}) 09:35:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000740)="a8") 09:35:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, 0x0) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) 09:35:08 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000240)=&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x18) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmdt(r0) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:35:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000740)="a8") 09:35:08 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0305615, &(0x7f0000000080)={0x0, 0x0, "8fe9254a4d590949078b91bd87f20aa0319b8a939921cc9288beb0024b0add58"}) 09:35:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) 09:35:08 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x0, 0x5, 0x0, 0x8001, 0x1c00000000000, 0x0, 0x1, 0x80000001, 0x0, 0x5}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) open(&(0x7f0000000500)='./file0\x00', 0x2, 0x16) ptrace(0x19, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000000004, 0x1012, r6, 0x0) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="6490dcf034db6574e08a2d2c2b6becb8d61a6db4"], 0x1) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) close(r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r8, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x22}}]}]}, 0x58}}, 0x4000004) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r9, 0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'team0\x00', @dev={[], 0x19}}) 09:35:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000740)="a8") 09:35:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) 09:35:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) 09:35:09 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000240)=&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x18) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmdt(r0) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:35:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x1, 0x0, 0x5, 0x0, 0x8001, 0x1c00000000000, 0x0, 0x1, 0x80000001, 0x0, 0x5}) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) open(&(0x7f0000000500)='./file0\x00', 0x2, 0x16) ptrace(0x19, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000000004, 0x1012, r6, 0x0) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="6490dcf034db6574e08a2d2c2b6becb8d61a6db4"], 0x1) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) close(r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r8, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x22}}]}]}, 0x58}}, 0x4000004) r9 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x7fff, 0x200000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) dup3(r0, r9, 0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'team0\x00', @dev={[], 0x19}}) 09:35:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) 09:35:09 executing program 0: syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000240)=&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x18) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmdt(r0) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:35:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) 09:35:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) [ 987.954054][ T972] FS-Cache: Duplicate cookie detected [ 987.959730][ T972] FS-Cache: O-cookie c=00000000fae07112 [p=000000007ce610bf fl=222 nc=0 na=1] [ 987.968665][ T972] FS-Cache: O-cookie d=000000005412106e n=00000000ff8d3bc7 [ 987.975887][ T972] FS-Cache: O-key=[10] '0200020000a07f000008' [ 987.982062][ T972] FS-Cache: N-cookie c=00000000efa298ec [p=000000007ce610bf fl=2 nc=0 na=1] [ 987.990773][ T972] FS-Cache: N-cookie d=000000005412106e n=00000000dd0b3f0b [ 987.998003][ T972] FS-Cache: N-key=[10] '0200020000a07f000008' 09:35:10 executing program 0: syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000240)=&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x18) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmdt(r0) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:35:10 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000240)=&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x18) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmdt(r0) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:35:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) 09:35:10 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x4040) fgetxattr(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf93ce2b24cc24bf57543a8a8ed060000000000000056ea4b14d7ec723a5b2291ef617f1f688bf7a4ba36aeffe766b30267061e0cb46f8da6b7db8297150963b5b5ab5c98c8624eb82c91fb54c2b1b2d36139ff4cfac99ef865558a76"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x77db}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x4}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0xcc, r5, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1d100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008855}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x1c, 0x5, 0x20, 0x7fffffff, 0x5, 0x1f84, 0x3}}, 0x50) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000280)={0x11d, 0x0, &(0x7f00000001c0)}) 09:35:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) [ 988.384100][ C1] net_ratelimit: 23 callbacks suppressed [ 988.384112][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 988.408619][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 988.528072][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 988.534293][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:10 executing program 0: syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000240)=&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x18) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmdt(r0) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 988.677227][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 988.684053][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:10 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x4040) fgetxattr(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf93ce2b24cc24bf57543a8a8ed060000000000000056ea4b14d7ec723a5b2291ef617f1f688bf7a4ba36aeffe766b30267061e0cb46f8da6b7db8297150963b5b5ab5c98c8624eb82c91fb54c2b1b2d36139ff4cfac99ef865558a76"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x77db}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x4}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0xcc, r5, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1d100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008855}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x1c, 0x5, 0x20, 0x7fffffff, 0x5, 0x1f84, 0x3}}, 0x50) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000280)={0x11d, 0x0, &(0x7f00000001c0)}) 09:35:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffef1) [ 988.756962][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 988.762830][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:35:10 executing program 1: syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000240)=&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x18) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmdt(r0) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:35:10 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x4040) fgetxattr(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf93ce2b24cc24bf57543a8a8ed060000000000000056ea4b14d7ec723a5b2291ef617f1f688bf7a4ba36aeffe766b30267061e0cb46f8da6b7db8297150963b5b5ab5c98c8624eb82c91fb54c2b1b2d36139ff4cfac99ef865558a76"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x77db}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x4}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0xcc, r5, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1d100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008855}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x1c, 0x5, 0x20, 0x7fffffff, 0x5, 0x1f84, 0x3}}, 0x50) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000280)={0x11d, 0x0, &(0x7f00000001c0)}) [ 988.916747][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 988.922549][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:35:11 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000007ffff"], 0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7}, 0x7) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14}, 0x14) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) [ 989.209654][ T1050] 9pnet: p9_errstr2errno: server reported unknown error 09:35:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x100000000000002, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xe6\xd6\xaa\x00\xc7\xf4\\.\xf3\xd3\xa6\xb0(I\xc4\x85\xcb\xe7\x84\x00\xf2\xc8\xd4\x99\x8bP`-iU\x83\r\x94\xe6l\x87\f\xea1\xc2', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000103) 09:35:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 09:35:11 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x4040) fgetxattr(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf93ce2b24cc24bf57543a8a8ed060000000000000056ea4b14d7ec723a5b2291ef617f1f688bf7a4ba36aeffe766b30267061e0cb46f8da6b7db8297150963b5b5ab5c98c8624eb82c91fb54c2b1b2d36139ff4cfac99ef865558a76"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x77db}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x4}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0xcc, r5, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1d100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008855}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x1c, 0x5, 0x20, 0x7fffffff, 0x5, 0x1f84, 0x3}}, 0x50) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000280)={0x11d, 0x0, &(0x7f00000001c0)}) 09:35:11 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x4040) fgetxattr(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf93ce2b24cc24bf57543a8a8ed060000000000000056ea4b14d7ec723a5b2291ef617f1f688bf7a4ba36aeffe766b30267061e0cb46f8da6b7db8297150963b5b5ab5c98c8624eb82c91fb54c2b1b2d36139ff4cfac99ef865558a76"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x77db}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x4}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0xcc, r5, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1d100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008855}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x1c, 0x5, 0x20, 0x7fffffff, 0x5, 0x1f84, 0x3}}, 0x50) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000280)={0x11d, 0x0, &(0x7f00000001c0)}) [ 989.583819][ T1066] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 989.605291][ T1066] CPU: 0 PID: 1066 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 989.614236][ T1066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.624296][ T1066] Call Trace: [ 989.627613][ T1066] dump_stack+0x1db/0x2d0 [ 989.631971][ T1066] ? dump_stack_print_info.cold+0x20/0x20 [ 989.637706][ T1066] ? check_preemption_disabled+0x48/0x290 [ 989.643447][ T1066] dump_header+0x1e6/0x11a6 [ 989.647995][ T1066] ? add_lock_to_list.isra.0+0x450/0x450 [ 989.653635][ T1066] ? perf_trace_lock+0x750/0x750 [ 989.658587][ T1066] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 989.664233][ T1066] ? ___ratelimit+0x37c/0x686 [ 989.668922][ T1066] ? find_held_lock+0x35/0x120 [ 989.673689][ T1066] ? mark_held_locks+0xa4/0xf0 [ 989.678529][ T1066] ? lock_acquire+0x1db/0x570 [ 989.683218][ T1066] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 989.689022][ T1066] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 989.694839][ T1066] ? lockdep_hardirqs_on+0x418/0x5d0 [ 989.700165][ T1066] ? trace_hardirqs_on+0xbd/0x310 [ 989.705191][ T1066] ? kasan_check_read+0x11/0x20 [ 989.710038][ T1066] ? ___ratelimit+0x37c/0x686 [ 989.714711][ T1066] ? trace_hardirqs_off_caller+0x300/0x300 [ 989.720515][ T1066] ? do_raw_spin_trylock+0x270/0x270 [ 989.725793][ T1066] ? trace_hardirqs_on_caller+0x310/0x310 [ 989.731506][ T1066] ? lock_acquire+0x1db/0x570 [ 989.736211][ T1066] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 989.742019][ T1066] ? ___ratelimit+0xac/0x686 [ 989.746609][ T1066] ? idr_get_free+0xee0/0xee0 [ 989.751278][ T1066] ? lockdep_hardirqs_on+0x418/0x5d0 [ 989.756571][ T1066] oom_kill_process.cold+0x10/0x9ca [ 989.761768][ T1066] ? cgroup_procs_next+0x70/0x70 [ 989.766735][ T1066] ? _raw_spin_unlock_irq+0x5e/0x90 [ 989.771933][ T1066] ? oom_badness+0xa50/0xa50 [ 989.776532][ T1066] ? oom_evaluate_task+0x540/0x540 [ 989.781640][ T1066] ? mem_cgroup_iter_break+0x30/0x30 [ 989.786933][ T1066] ? mutex_trylock+0x2d0/0x2d0 [ 989.791709][ T1066] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 989.797870][ T1066] ? cgroup_file_notify+0x217/0x2e0 [ 989.803086][ T1066] out_of_memory+0x885/0x1420 [ 989.807770][ T1066] ? oom_killer_disable+0x340/0x340 [ 989.812965][ T1066] ? preempt_schedule+0x4b/0x60 [ 989.817815][ T1066] ? ___preempt_schedule+0x16/0x18 [ 989.822946][ T1066] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 989.828491][ T1066] ? memory_oom_group_write+0x160/0x160 [ 989.834053][ T1066] memory_max_write+0x1b0/0x3e0 [ 989.838946][ T1066] ? lock_acquire+0x1db/0x570 [ 989.843626][ T1066] ? mem_cgroup_write+0x440/0x440 [ 989.848645][ T1066] ? lock_release+0xc40/0xc40 [ 989.853326][ T1066] ? add_lock_to_list.isra.0+0x450/0x450 [ 989.858955][ T1066] ? lock_downgrade+0xc40/0xc40 [ 989.863812][ T1066] cgroup_file_write+0x252/0x830 [ 989.868777][ T1066] ? mem_cgroup_write+0x440/0x440 [ 989.873797][ T1066] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 989.879446][ T1066] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 989.885075][ T1066] kernfs_fop_write+0x2ba/0x480 [ 989.889937][ T1066] do_iter_write+0x4a5/0x610 [ 989.894540][ T1066] vfs_writev+0x1ee/0x370 [ 989.898887][ T1066] ? vfs_iter_write+0xb0/0xb0 [ 989.903592][ T1066] ? mutex_lock_nested+0x16/0x20 [ 989.908545][ T1066] ? mutex_lock_nested+0x16/0x20 [ 989.913480][ T1066] ? __fdget_pos+0xdc/0x1f0 [ 989.918005][ T1066] ? __fdget_raw+0x20/0x20 [ 989.922422][ T1066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 989.928661][ T1066] ? put_timespec64+0x115/0x1b0 [ 989.933519][ T1066] do_writev+0x11a/0x300 [ 989.937767][ T1066] ? vfs_writev+0x370/0x370 [ 989.942271][ T1066] ? trace_hardirqs_off_caller+0x300/0x300 [ 989.948090][ T1066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 989.954326][ T1066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 989.959793][ T1066] __x64_sys_writev+0x75/0xb0 [ 989.964471][ T1066] do_syscall_64+0x1a3/0x800 [ 989.969069][ T1066] ? syscall_return_slowpath+0x5f0/0x5f0 [ 989.974705][ T1066] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 989.980425][ T1066] ? __switch_to_asm+0x34/0x70 [ 989.985239][ T1066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 989.990829][ T1066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.996740][ T1066] RIP: 0033:0x458099 [ 990.000635][ T1066] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.020232][ T1066] RSP: 002b:00007f2cc3fa1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 990.028637][ T1066] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 990.036604][ T1066] RDX: 1000000000000103 RSI: 0000000020000700 RDI: 0000000000000005 [ 990.044572][ T1066] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 990.052538][ T1066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cc3fa26d4 [ 990.060506][ T1066] R13: 00000000004c4b1c R14: 00000000004dcf58 R15: 00000000ffffffff 09:35:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x2000000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 09:35:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 09:35:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b5000000000800000000080000000000000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x6}, &(0x7f0000000180)=0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:35:12 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x4040) fgetxattr(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf93ce2b24cc24bf57543a8a8ed060000000000000056ea4b14d7ec723a5b2291ef617f1f688bf7a4ba36aeffe766b30267061e0cb46f8da6b7db8297150963b5b5ab5c98c8624eb82c91fb54c2b1b2d36139ff4cfac99ef865558a76"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x77db}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x4}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0xcc, r5, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1d100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008855}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x1c, 0x5, 0x20, 0x7fffffff, 0x5, 0x1f84, 0x3}}, 0x50) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000280)={0x11d, 0x0, &(0x7f00000001c0)}) [ 990.166209][ T1066] memory: usage 46096kB, limit 0kB, failcnt 0 [ 990.197800][ T1066] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 990.242292][ T1066] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 990.263799][ T1066] Memory cgroup stats for /syz0: cache:36KB rss:38216KB rss_huge:36864KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:38276KB inactive_file:16KB active_file:36KB unevictable:0KB 09:35:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000a40)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x800) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f0000000000)="b7", 0x1, 0x20000008000, 0x0, 0x0) close(r0) 09:35:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) [ 990.449491][ T1066] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=1051,uid=0 09:35:12 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x4040) fgetxattr(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="d0a44c8a5bdad77dbfb3ce112fddda0a10d3ac9f5deb75127bbe62cd38011be60d31e9e229a4e9537caa2d28ae41920d81ccf93ce2b24cc24bf57543a8a8ed060000000000000056ea4b14d7ec723a5b2291ef617f1f688bf7a4ba36aeffe766b30267061e0cb46f8da6b7db8297150963b5b5ab5c98c8624eb82c91fb54c2b1b2d36139ff4cfac99ef865558a76"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x77db}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x4}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(0x0, 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bond0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)={0xcc, r5, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1d100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008855}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x1c, 0x5, 0x20, 0x7fffffff, 0x5, 0x1f84, 0x3}}, 0x50) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000280)={0x11d, 0x0, &(0x7f00000001c0)}) 09:35:12 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 990.558593][ T1066] Memory cgroup out of memory: Kill process 1051 (syz-executor0) score 10572000 or sacrifice child [ 990.617997][ T1096] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 990.677086][ T1066] Killed process 1051 (syz-executor0) total-vm:72580kB, anon-rss:6304kB, file-rss:35844kB, shmem-rss:0kB [ 990.695964][ T1096] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 990.736642][ T1066] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 990.767840][ T1066] CPU: 1 PID: 1066 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 990.776807][ T1066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.786915][ T1066] Call Trace: [ 990.790218][ T1066] dump_stack+0x1db/0x2d0 [ 990.794578][ T1066] ? dump_stack_print_info.cold+0x20/0x20 [ 990.800310][ T1066] ? check_preemption_disabled+0x48/0x290 [ 990.806048][ T1066] dump_header+0x1e6/0x11a6 [ 990.810566][ T1066] ? add_lock_to_list.isra.0+0x450/0x450 [ 990.816201][ T1066] ? perf_trace_lock+0x750/0x750 [ 990.821145][ T1066] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 990.826779][ T1066] ? ___ratelimit+0x37c/0x686 [ 990.831460][ T1066] ? find_held_lock+0x35/0x120 [ 990.836235][ T1066] ? mark_held_locks+0xa4/0xf0 [ 990.841007][ T1066] ? lock_acquire+0x1db/0x570 [ 990.845680][ T1066] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 990.851485][ T1066] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 990.857290][ T1066] ? lockdep_hardirqs_on+0x418/0x5d0 [ 990.862577][ T1066] ? trace_hardirqs_on+0xbd/0x310 [ 990.867596][ T1066] ? kasan_check_read+0x11/0x20 [ 990.872447][ T1066] ? ___ratelimit+0x37c/0x686 [ 990.877116][ T1066] ? trace_hardirqs_off_caller+0x300/0x300 [ 990.882913][ T1066] ? do_raw_spin_trylock+0x270/0x270 [ 990.888189][ T1066] ? trace_hardirqs_on_caller+0x310/0x310 [ 990.893914][ T1066] ? lock_acquire+0x1db/0x570 [ 990.898594][ T1066] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 990.904390][ T1066] ? ___ratelimit+0xac/0x686 [ 990.908982][ T1066] ? idr_get_free+0xee0/0xee0 [ 990.913655][ T1066] ? lockdep_hardirqs_on+0x418/0x5d0 [ 990.918973][ T1066] oom_kill_process.cold+0x10/0x9ca [ 990.924172][ T1066] ? cgroup_procs_next+0x70/0x70 [ 990.929124][ T1066] ? _raw_spin_unlock_irq+0x5e/0x90 [ 990.934312][ T1066] ? oom_badness+0xa50/0xa50 [ 990.938932][ T1066] ? oom_evaluate_task+0x540/0x540 [ 990.944048][ T1066] ? mem_cgroup_iter_break+0x30/0x30 [ 990.949333][ T1066] ? mutex_trylock+0x2d0/0x2d0 [ 990.954107][ T1066] ? mark_held_locks+0xa4/0xf0 [ 990.958904][ T1066] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 990.965058][ T1066] ? cgroup_file_notify+0x217/0x2e0 [ 990.970264][ T1066] out_of_memory+0x885/0x1420 [ 990.974961][ T1066] ? oom_killer_disable+0x340/0x340 [ 990.980157][ T1066] ? retint_kernel+0x2d/0x2d [ 990.984789][ T1066] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 990.990351][ T1066] ? memory_oom_group_write+0x160/0x160 [ 990.995919][ T1066] memory_max_write+0x1b0/0x3e0 [ 991.000759][ T1066] ? lock_acquire+0x1db/0x570 [ 991.005443][ T1066] ? mem_cgroup_write+0x440/0x440 [ 991.010463][ T1066] ? lock_release+0xc40/0xc40 [ 991.015161][ T1066] ? add_lock_to_list.isra.0+0x450/0x450 [ 991.020791][ T1066] ? lock_downgrade+0xc40/0xc40 [ 991.025650][ T1066] cgroup_file_write+0x252/0x830 [ 991.030602][ T1066] ? mem_cgroup_write+0x440/0x440 [ 991.035628][ T1066] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 991.041271][ T1066] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 991.046903][ T1066] kernfs_fop_write+0x2ba/0x480 [ 991.051776][ T1066] do_iter_write+0x4a5/0x610 [ 991.056394][ T1066] vfs_writev+0x1ee/0x370 [ 991.060725][ T1066] ? vfs_iter_write+0xb0/0xb0 [ 991.065420][ T1066] ? mutex_lock_nested+0x16/0x20 [ 991.070350][ T1066] ? mutex_lock_nested+0x16/0x20 [ 991.075292][ T1066] ? __fdget_pos+0xdc/0x1f0 [ 991.079794][ T1066] ? __fdget_raw+0x20/0x20 [ 991.084213][ T1066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 991.090454][ T1066] ? put_timespec64+0x115/0x1b0 [ 991.095307][ T1066] do_writev+0x11a/0x300 [ 991.099560][ T1066] ? vfs_writev+0x370/0x370 [ 991.104069][ T1066] ? trace_hardirqs_off_caller+0x300/0x300 [ 991.109878][ T1066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 991.116133][ T1066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 991.121591][ T1066] __x64_sys_writev+0x75/0xb0 [ 991.126267][ T1066] do_syscall_64+0x1a3/0x800 [ 991.130871][ T1066] ? syscall_return_slowpath+0x5f0/0x5f0 [ 991.136503][ T1066] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 991.142242][ T1066] ? __switch_to_asm+0x34/0x70 [ 991.147011][ T1066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 991.152563][ T1066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.158452][ T1066] RIP: 0033:0x458099 [ 991.162345][ T1066] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 991.181974][ T1066] RSP: 002b:00007f2cc3fa1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 991.190387][ T1066] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 991.198348][ T1066] RDX: 1000000000000103 RSI: 0000000020000700 RDI: 0000000000000005 [ 991.206320][ T1066] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 991.214282][ T1066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cc3fa26d4 [ 991.222248][ T1066] R13: 00000000004c4b1c R14: 00000000004dcf58 R15: 00000000ffffffff [ 991.286044][ T1066] memory: usage 39604kB, limit 0kB, failcnt 10 [ 991.292636][ T1066] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 991.300478][ T1066] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 991.307581][ T1066] Memory cgroup stats for /syz0: cache:36KB rss:31980KB rss_huge:30720KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32008KB inactive_file:0KB active_file:0KB unevictable:0KB [ 991.329301][ T1066] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=989,uid=0 [ 991.344465][ T1066] Memory cgroup out of memory: Kill process 989 (syz-executor0) score 10571000 or sacrifice child [ 991.356242][ T1066] Killed process 989 (syz-executor0) total-vm:72580kB, anon-rss:6304kB, file-rss:35840kB, shmem-rss:0kB [ 991.387024][ T1056] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 991.412091][ T1056] CPU: 1 PID: 1056 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 991.421032][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.431097][ T1056] Call Trace: [ 991.434391][ T1056] dump_stack+0x1db/0x2d0 [ 991.438741][ T1056] ? dump_stack_print_info.cold+0x20/0x20 [ 991.444473][ T1056] ? check_preemption_disabled+0x48/0x290 [ 991.450219][ T1056] dump_header+0x1e6/0x11a6 [ 991.454728][ T1056] ? add_lock_to_list.isra.0+0x450/0x450 [ 991.460370][ T1056] ? perf_trace_lock+0x750/0x750 [ 991.465327][ T1056] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 991.470973][ T1056] ? ___ratelimit+0x37c/0x686 [ 991.475656][ T1056] ? find_held_lock+0x35/0x120 [ 991.480437][ T1056] ? mark_held_locks+0xa4/0xf0 [ 991.485205][ T1056] ? lock_acquire+0x1db/0x570 [ 991.489896][ T1056] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 991.495711][ T1056] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 991.501550][ T1056] ? lockdep_hardirqs_on+0x418/0x5d0 [ 991.506843][ T1056] ? trace_hardirqs_on+0xbd/0x310 [ 991.512392][ T1056] ? kasan_check_read+0x11/0x20 [ 991.517241][ T1056] ? ___ratelimit+0x37c/0x686 [ 991.521920][ T1056] ? trace_hardirqs_off_caller+0x300/0x300 [ 991.527731][ T1056] ? do_raw_spin_trylock+0x270/0x270 [ 991.533026][ T1056] ? trace_hardirqs_on_caller+0x310/0x310 [ 991.538781][ T1056] ? lock_acquire+0x1db/0x570 [ 991.543485][ T1056] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 991.549302][ T1056] ? ___ratelimit+0xac/0x686 [ 991.553965][ T1056] ? idr_get_free+0xee0/0xee0 [ 991.558648][ T1056] ? lockdep_hardirqs_on+0x418/0x5d0 [ 991.563943][ T1056] oom_kill_process.cold+0x10/0x9ca [ 991.569151][ T1056] ? cgroup_procs_next+0x70/0x70 [ 991.574115][ T1056] ? _raw_spin_unlock_irq+0x5e/0x90 [ 991.579308][ T1056] ? oom_badness+0xa50/0xa50 [ 991.583915][ T1056] ? oom_evaluate_task+0x540/0x540 [ 991.589029][ T1056] ? mem_cgroup_iter_break+0x30/0x30 [ 991.594313][ T1056] ? mutex_trylock+0x2d0/0x2d0 [ 991.599086][ T1056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.605350][ T1056] ? rcu_read_unlock_special+0x380/0x380 [ 991.610993][ T1056] out_of_memory+0x885/0x1420 [ 991.615677][ T1056] ? oom_killer_disable+0x340/0x340 [ 991.620920][ T1056] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 991.626733][ T1056] ? lock_acquire+0x1db/0x570 [ 991.631481][ T1056] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 991.637047][ T1056] ? do_raw_spin_unlock+0xa0/0x330 [ 991.642192][ T1056] ? memory_oom_group_write+0x160/0x160 [ 991.647755][ T1056] ? do_raw_spin_trylock+0x270/0x270 [ 991.653061][ T1056] ? _raw_spin_unlock+0x2d/0x50 [ 991.657917][ T1056] try_charge+0x1407/0x1d30 [ 991.662420][ T1056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.668688][ T1056] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 991.674246][ T1056] ? rcu_read_unlock_special+0x380/0x380 [ 991.679925][ T1056] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 991.685513][ T1056] ? get_mem_cgroup_from_page+0x190/0x190 [ 991.691243][ T1056] ? rcu_read_lock_sched_held+0x110/0x130 [ 991.696964][ T1056] mem_cgroup_try_charge+0x43a/0xdb0 [ 991.702248][ T1056] ? mem_cgroup_protected+0xa10/0xa10 [ 991.707644][ T1056] ? __anon_vma_prepare+0x36d/0x760 [ 991.712841][ T1056] ? anon_vma_fork+0x880/0x880 [ 991.717619][ T1056] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 991.723866][ T1056] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 991.730109][ T1056] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 991.735774][ T1056] __handle_mm_fault+0x25ed/0x5610 [ 991.740891][ T1056] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 991.746434][ T1056] ? check_preemption_disabled+0x48/0x290 [ 991.752151][ T1056] ? handle_mm_fault+0x3cc/0xc80 [ 991.757105][ T1056] ? lock_downgrade+0xc40/0xc40 [ 991.761965][ T1056] ? kasan_check_read+0x11/0x20 [ 991.766812][ T1056] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 991.772796][ T1056] ? rcu_read_unlock_special+0x380/0x380 [ 991.778437][ T1056] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 991.784673][ T1056] ? check_preemption_disabled+0x48/0x290 [ 991.790400][ T1056] handle_mm_fault+0x4ec/0xc80 [ 991.795184][ T1056] ? __handle_mm_fault+0x5610/0x5610 [ 991.800464][ T1056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.806699][ T1056] ? vmacache_update+0x114/0x140 [ 991.811650][ T1056] __do_page_fault+0x5ef/0xda0 [ 991.816417][ T1056] ? do_futex+0x2910/0x2910 [ 991.820936][ T1056] do_page_fault+0xe6/0x7d8 [ 991.825436][ T1056] ? trace_hardirqs_on_caller+0xc0/0x310 [ 991.831070][ T1056] ? vmalloc_sync_all+0x30/0x30 [ 991.835917][ T1056] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 991.842085][ T1056] ? syscall_return_slowpath+0x5f0/0x5f0 [ 991.847716][ T1056] ? prepare_exit_to_usermode+0x232/0x3b0 [ 991.853432][ T1056] ? page_fault+0x8/0x30 [ 991.857677][ T1056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 991.863221][ T1056] ? page_fault+0x8/0x30 [ 991.867460][ T1056] page_fault+0x1e/0x30 [ 991.871610][ T1056] RIP: 0033:0x40fabf [ 991.875539][ T1056] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 991.895135][ T1056] RSP: 002b:00007ffdcc805210 EFLAGS: 00010206 [ 991.901201][ T1056] RAX: 00007f2cc3f61000 RBX: 0000000000020000 RCX: 00000000004580ea [ 991.909181][ T1056] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 991.917145][ T1056] RBP: 00007ffdcc8052f0 R08: ffffffffffffffff R09: 0000000000000000 [ 991.925110][ T1056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdcc8053d0 [ 991.933077][ T1056] R13: 00007f2cc3f81700 R14: 0000000000000005 R15: 0000000000000002 [ 991.977783][ T1056] memory: usage 33156kB, limit 0kB, failcnt 10 [ 991.984010][ T1056] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 991.993183][ T1056] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 992.000313][ T1056] Memory cgroup stats for /syz0: cache:36KB rss:25712KB rss_huge:24576KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:25740KB inactive_file:0KB active_file:0KB unevictable:0KB [ 992.023838][ T1056] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=1015,uid=0 [ 992.040314][ T1056] Memory cgroup out of memory: Kill process 1015 (syz-executor0) score 10571000 or sacrifice child [ 992.055490][ T1056] Killed process 1015 (syz-executor0) total-vm:72580kB, anon-rss:6304kB, file-rss:35840kB, shmem-rss:0kB [ 992.072596][ T1040] oom_reaper: reaped process 1015 (syz-executor0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 992.095464][ T1066] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 992.114628][ T1066] CPU: 1 PID: 1066 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 992.123565][ T1066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.133609][ T1066] Call Trace: [ 992.136884][ T1066] dump_stack+0x1db/0x2d0 [ 992.141234][ T1066] ? dump_stack_print_info.cold+0x20/0x20 [ 992.146935][ T1066] ? check_preemption_disabled+0x48/0x290 [ 992.152638][ T1066] dump_header+0x1e6/0x11a6 [ 992.157149][ T1066] ? add_lock_to_list.isra.0+0x450/0x450 [ 992.162755][ T1066] ? perf_trace_lock+0x750/0x750 [ 992.167688][ T1066] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 992.173299][ T1066] ? ___ratelimit+0x37c/0x686 [ 992.177953][ T1066] ? find_held_lock+0x35/0x120 [ 992.182694][ T1066] ? mark_held_locks+0xa4/0xf0 [ 992.187431][ T1066] ? lock_acquire+0x1db/0x570 [ 992.192084][ T1066] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 992.197870][ T1066] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 992.203668][ T1066] ? lockdep_hardirqs_on+0x418/0x5d0 [ 992.208930][ T1066] ? trace_hardirqs_on+0xbd/0x310 [ 992.213964][ T1066] ? kasan_check_read+0x11/0x20 [ 992.218788][ T1066] ? ___ratelimit+0x37c/0x686 [ 992.223441][ T1066] ? trace_hardirqs_off_caller+0x300/0x300 [ 992.229227][ T1066] ? do_raw_spin_trylock+0x270/0x270 [ 992.234487][ T1066] ? trace_hardirqs_on_caller+0x310/0x310 [ 992.240184][ T1066] ? lock_acquire+0x1db/0x570 [ 992.244843][ T1066] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 992.250632][ T1066] ? ___ratelimit+0xac/0x686 [ 992.255199][ T1066] ? idr_get_free+0xee0/0xee0 [ 992.259855][ T1066] ? lockdep_hardirqs_on+0x418/0x5d0 [ 992.265125][ T1066] oom_kill_process.cold+0x10/0x9ca [ 992.270302][ T1066] ? cgroup_procs_next+0x70/0x70 [ 992.275235][ T1066] ? _raw_spin_unlock_irq+0x5e/0x90 [ 992.280405][ T1066] ? oom_badness+0xa50/0xa50 [ 992.284978][ T1066] ? oom_evaluate_task+0x540/0x540 [ 992.290078][ T1066] ? mem_cgroup_iter_break+0x30/0x30 [ 992.295372][ T1066] ? mutex_trylock+0x2d0/0x2d0 [ 992.300124][ T1066] ? cgroup_file_notify+0x217/0x2e0 [ 992.305308][ T1066] out_of_memory+0x885/0x1420 [ 992.309964][ T1066] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 992.315751][ T1066] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 992.321535][ T1066] ? oom_killer_disable+0x340/0x340 [ 992.326726][ T1066] ? kasan_check_read+0x11/0x20 [ 992.331553][ T1066] ? cgroup_file_notify+0x217/0x2e0 [ 992.336729][ T1066] ? trace_hardirqs_off_caller+0x300/0x300 [ 992.342528][ T1066] ? do_raw_spin_trylock+0x270/0x270 [ 992.347796][ T1066] ? ___preempt_schedule+0x16/0x18 [ 992.352897][ T1066] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 992.358425][ T1066] ? memory_oom_group_write+0x160/0x160 [ 992.363964][ T1066] memory_max_write+0x1b0/0x3e0 [ 992.368793][ T1066] ? lock_acquire+0x1db/0x570 [ 992.373450][ T1066] ? mem_cgroup_write+0x440/0x440 [ 992.378632][ T1066] ? lock_release+0xc40/0xc40 [ 992.383302][ T1066] ? add_lock_to_list.isra.0+0x450/0x450 [ 992.388925][ T1066] ? lock_downgrade+0xc40/0xc40 [ 992.393769][ T1066] cgroup_file_write+0x252/0x830 [ 992.398701][ T1066] ? mem_cgroup_write+0x440/0x440 [ 992.403731][ T1066] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 992.409352][ T1066] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 992.414972][ T1066] kernfs_fop_write+0x2ba/0x480 [ 992.419809][ T1066] do_iter_write+0x4a5/0x610 [ 992.424385][ T1066] vfs_writev+0x1ee/0x370 [ 992.428697][ T1066] ? vfs_iter_write+0xb0/0xb0 [ 992.433368][ T1066] ? mutex_lock_nested+0x16/0x20 [ 992.438286][ T1066] ? mutex_lock_nested+0x16/0x20 [ 992.443218][ T1066] ? __fdget_pos+0xdc/0x1f0 [ 992.447798][ T1066] ? __fdget_raw+0x20/0x20 [ 992.452197][ T1066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.458447][ T1066] ? put_timespec64+0x115/0x1b0 [ 992.463279][ T1066] do_writev+0x11a/0x300 [ 992.467505][ T1066] ? vfs_writev+0x370/0x370 [ 992.472001][ T1066] ? trace_hardirqs_off_caller+0x300/0x300 [ 992.477781][ T1066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.483998][ T1066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 992.489459][ T1066] __x64_sys_writev+0x75/0xb0 [ 992.494117][ T1066] do_syscall_64+0x1a3/0x800 [ 992.498689][ T1066] ? syscall_return_slowpath+0x5f0/0x5f0 [ 992.504302][ T1066] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 992.509997][ T1066] ? __switch_to_asm+0x34/0x70 [ 992.514864][ T1066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 992.520409][ T1066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.526279][ T1066] RIP: 0033:0x458099 [ 992.530152][ T1066] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.549732][ T1066] RSP: 002b:00007f2cc3fa1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 992.558122][ T1066] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 992.566083][ T1066] RDX: 1000000000000103 RSI: 0000000020000700 RDI: 0000000000000005 [ 992.574030][ T1066] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 992.581977][ T1066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2cc3fa26d4 [ 992.589930][ T1066] R13: 00000000004c4b1c R14: 00000000004dcf58 R15: 00000000ffffffff [ 992.608022][ T1066] memory: usage 26712kB, limit 0kB, failcnt 58 [ 992.614189][ T1066] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 992.634419][ T1066] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 992.641589][ T1066] Memory cgroup stats for /syz0: cache:36KB rss:17452KB rss_huge:16384KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17344KB inactive_file:0KB active_file:0KB unevictable:0KB [ 992.663220][ T1066] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=31501,uid=0 [ 992.678636][ T1066] Memory cgroup out of memory: Kill process 31501 (syz-executor0) score 9540000 or sacrifice child [ 992.689594][ T1066] Killed process 31501 (syz-executor0) total-vm:72580kB, anon-rss:2196kB, file-rss:35832kB, shmem-rss:0kB [ 992.702817][ T1040] oom_reaper: reaped process 31501 (syz-executor0), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB 09:35:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 09:35:14 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 09:35:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x20, 0xaff, 0x0, 0x0, {0x105}}, 0x14}}, 0x0) 09:35:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 09:35:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x100000000000002, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xe6\xd6\xaa\x00\xc7\xf4\\.\xf3\xd3\xa6\xb0(I\xc4\x85\xcb\xe7\x84\x00\xf2\xc8\xd4\x99\x8bP`-iU\x83\r\x94\xe6l\x87\f\xea1\xc2', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000103) 09:35:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b5000000000800000000080000000000000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x6}, &(0x7f0000000180)=0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:35:14 executing program 1: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x10}]}, &(0x7f0000000000)='GPL\x00'}, 0x48) 09:35:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 992.891201][T30336] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 992.971222][T30336] CPU: 0 PID: 30336 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 992.980277][T30336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.990329][T30336] Call Trace: [ 992.993630][T30336] dump_stack+0x1db/0x2d0 [ 992.997973][T30336] ? dump_stack_print_info.cold+0x20/0x20 [ 993.003710][T30336] ? perf_trace_lock+0x12f/0x750 [ 993.008661][T30336] dump_header+0x1e6/0x11a6 [ 993.013175][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 993.018821][T30336] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 993.024470][T30336] ? ___ratelimit+0x37c/0x686 [ 993.029156][T30336] ? find_held_lock+0x35/0x120 [ 993.033942][T30336] ? mark_held_locks+0xa4/0xf0 [ 993.038704][T30336] ? lock_acquire+0x1db/0x570 [ 993.043382][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 993.049190][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 993.055013][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 993.060314][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 993.065350][T30336] ? kasan_check_read+0x11/0x20 [ 993.070218][T30336] ? ___ratelimit+0x37c/0x686 [ 993.074896][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 993.080696][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 993.085993][T30336] ? trace_hardirqs_on_caller+0x310/0x310 [ 993.091705][T30336] ? lock_acquire+0x1db/0x570 [ 993.096384][T30336] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 993.102186][T30336] ? ___ratelimit+0xac/0x686 [ 993.106818][T30336] ? idr_get_free+0xee0/0xee0 [ 993.111513][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 993.116801][T30336] oom_kill_process.cold+0x10/0x9ca [ 993.122001][T30336] ? cgroup_procs_next+0x70/0x70 [ 993.126955][T30336] ? _raw_spin_unlock_irq+0x5e/0x90 [ 993.132150][T30336] ? oom_badness+0xa50/0xa50 [ 993.136735][T30336] ? oom_evaluate_task+0x540/0x540 [ 993.141843][T30336] ? mem_cgroup_iter_break+0x30/0x30 [ 993.147138][T30336] ? mutex_trylock+0x2d0/0x2d0 [ 993.151894][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.158148][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 993.163782][T30336] out_of_memory+0x885/0x1420 [ 993.168477][T30336] ? oom_killer_disable+0x340/0x340 [ 993.173683][T30336] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 993.179483][T30336] ? lock_acquire+0x1db/0x570 [ 993.184163][T30336] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 993.189720][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 993.194821][T30336] ? memory_oom_group_write+0x160/0x160 [ 993.200369][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 993.205660][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 993.210513][T30336] try_charge+0x1407/0x1d30 [ 993.215008][T30336] ? lock_downgrade+0xc40/0xc40 [ 993.219863][T30336] ? kasan_check_read+0x11/0x20 [ 993.224723][T30336] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 993.230261][T30336] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 993.235801][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.242042][T30336] ? lock_downgrade+0xc40/0xc40 [ 993.246904][T30336] ? kasan_check_read+0x11/0x20 [ 993.251751][T30336] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 993.257729][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 993.263394][T30336] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 993.268937][T30336] __memcg_kmem_charge_memcg+0x7c/0x130 [ 993.274477][T30336] ? memcg_kmem_put_cache+0xb0/0xb0 [ 993.279687][T30336] ? lock_release+0xc40/0xc40 [ 993.284367][T30336] __memcg_kmem_charge+0x136/0x300 [ 993.289479][T30336] __alloc_pages_nodemask+0x7b8/0xdc0 [ 993.294881][T30336] ? __alloc_pages_slowpath+0x2c50/0x2c50 [ 993.300618][T30336] ? rcu_pm_notify+0xd0/0xd0 [ 993.305218][T30336] ? rcu_read_lock_sched_held+0x110/0x130 [ 993.310952][T30336] ? kmem_cache_alloc_node+0x347/0x710 [ 993.316411][T30336] ? check_preemption_disabled+0x48/0x290 [ 993.322142][T30336] copy_process+0x847/0x8890 [ 993.326726][T30336] ? mark_held_locks+0xf0/0xf0 [ 993.331491][T30336] ? _raw_spin_unlock_irq+0x28/0x90 [ 993.336684][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.342925][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.349163][T30336] ? check_preemption_disabled+0x48/0x290 [ 993.354915][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 993.360295][T30336] ? __cleanup_sighand+0x70/0x70 [ 993.365237][T30336] ? swp_swapcount+0x540/0x540 [ 993.369993][T30336] ? __lock_acquire+0x572/0x4a10 [ 993.374931][T30336] ? wp_page_reuse+0x159/0x1d0 [ 993.380153][T30336] ? find_held_lock+0x35/0x120 [ 993.384910][T30336] ? wp_page_reuse+0x159/0x1d0 [ 993.389697][T30336] ? kasan_check_read+0x11/0x20 [ 993.394538][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 993.399636][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 993.404912][T30336] ? print_usage_bug+0xd0/0xd0 [ 993.409669][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 993.414516][T30336] ? __lock_acquire+0x572/0x4a10 [ 993.419479][T30336] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 993.424854][T30336] ? mark_held_locks+0xf0/0xf0 [ 993.429650][T30336] ? __handle_mm_fault+0x1dac/0x5610 [ 993.434943][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.441179][T30336] ? check_preemption_disabled+0x48/0x290 [ 993.446891][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.453125][T30336] ? check_preemption_disabled+0x48/0x290 [ 993.458844][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 993.464226][T30336] ? perf_trace_lock+0x12f/0x750 [ 993.469158][T30336] ? add_mm_counter_fast.part.0+0x40/0x40 [ 993.474894][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 993.480529][T30336] ? __might_fault+0x12b/0x1e0 [ 993.485315][T30336] ? find_held_lock+0x35/0x120 [ 993.490091][T30336] ? __might_fault+0x12b/0x1e0 [ 993.494867][T30336] ? lock_acquire+0x1db/0x570 [ 993.499544][T30336] ? lock_downgrade+0xc40/0xc40 [ 993.504402][T30336] ? lock_release+0xc40/0xc40 [ 993.509087][T30336] _do_fork+0x1a9/0x1170 [ 993.513334][T30336] ? fork_idle+0x1d0/0x1d0 [ 993.517746][T30336] ? kasan_check_read+0x11/0x20 [ 993.522587][T30336] ? _copy_to_user+0xc9/0x120 [ 993.527260][T30336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 993.533511][T30336] ? put_timespec64+0x115/0x1b0 [ 993.538359][T30336] ? nsecs_to_jiffies+0x30/0x30 [ 993.543224][T30336] ? do_syscall_64+0x8c/0x800 [ 993.547927][T30336] ? do_syscall_64+0x8c/0x800 [ 993.552631][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 993.557911][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 993.562932][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.569184][T30336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.575247][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 993.581050][T30336] __x64_sys_clone+0xbf/0x150 [ 993.585725][T30336] do_syscall_64+0x1a3/0x800 [ 993.590313][T30336] ? syscall_return_slowpath+0x5f0/0x5f0 [ 993.595937][T30336] ? prepare_exit_to_usermode+0x232/0x3b0 [ 993.601650][T30336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 993.607198][T30336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.613097][T30336] RIP: 0033:0x45666a [ 993.616999][T30336] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 993.636592][T30336] RSP: 002b:00007ffdcc805450 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 993.644992][T30336] RAX: ffffffffffffffda RBX: 00007ffdcc805450 RCX: 000000000045666a [ 993.652970][T30336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 993.660946][T30336] RBP: 00007ffdcc805490 R08: 0000000000000001 R09: 00000000016e0940 09:35:15 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1f, 0x7}, 'port1\x00', 0x41, 0x400, 0x1000, 0x8, 0x3b, 0x130, 0xffffffff, 0x0, 0x2, 0x8}) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000900)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000800)=""/36, 0x24}], 0x6, &(0x7f00000008c0)=""/3, 0x3, 0x84}, 0x0) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240), 0x31b, 0x0, &(0x7f0000000280)={0x10001}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x3) rmdir(&(0x7f0000000340)='./file0//ile0\x00') [ 993.668910][T30336] R10: 00000000016e0c10 R11: 0000000000000246 R12: 0000000000000001 [ 993.676876][T30336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 993.686717][T30336] memory: usage 19724kB, limit 0kB, failcnt 83 [ 993.724485][T30336] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 993.740101][T30336] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 993.758971][T30336] Memory cgroup stats for /syz0: cache:36KB rss:13120KB rss_huge:12288KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13036KB inactive_file:4KB active_file:4KB unevictable:0KB [ 993.859316][T30336] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=31438,uid=0 09:35:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 09:35:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b5000000000800000000080000000000000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x6}, &(0x7f0000000180)=0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 993.924088][T30336] Memory cgroup out of memory: Kill process 31438 (syz-executor0) score 9539000 or sacrifice child [ 993.954802][ C1] net_ratelimit: 24 callbacks suppressed [ 993.954810][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 993.966273][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:35:16 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1f, 0x7}, 'port1\x00', 0x41, 0x400, 0x1000, 0x8, 0x3b, 0x130, 0xffffffff, 0x0, 0x2, 0x8}) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000900)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000800)=""/36, 0x24}], 0x6, &(0x7f00000008c0)=""/3, 0x3, 0x84}, 0x0) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240), 0x31b, 0x0, &(0x7f0000000280)={0x10001}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x3) rmdir(&(0x7f0000000340)='./file0//ile0\x00') [ 993.972327][T30336] Killed process 31438 (syz-executor0) total-vm:72976kB, anon-rss:2220kB, file-rss:35804kB, shmem-rss:0kB 09:35:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 994.147654][T30336] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 994.174975][T30336] CPU: 1 PID: 30336 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 994.184014][T30336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.194110][T30336] Call Trace: [ 994.197411][T30336] dump_stack+0x1db/0x2d0 [ 994.201749][T30336] ? dump_stack_print_info.cold+0x20/0x20 [ 994.207468][T30336] ? perf_trace_lock+0x12f/0x750 [ 994.212426][T30336] dump_header+0x1e6/0x11a6 [ 994.216954][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 994.222602][T30336] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 994.228248][T30336] ? ___ratelimit+0x37c/0x686 [ 994.232930][T30336] ? find_held_lock+0x35/0x120 [ 994.237735][T30336] ? mark_held_locks+0xa4/0xf0 [ 994.242500][T30336] ? lock_acquire+0x1db/0x570 [ 994.247185][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 994.253020][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 994.258832][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 994.264139][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 994.269178][T30336] ? kasan_check_read+0x11/0x20 [ 994.274060][T30336] ? ___ratelimit+0x37c/0x686 [ 994.278747][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 994.284558][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 994.289856][T30336] ? trace_hardirqs_on_caller+0x310/0x310 [ 994.295581][T30336] ? lock_acquire+0x1db/0x570 [ 994.300270][T30336] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 994.306082][T30336] ? ___ratelimit+0xac/0x686 [ 994.310675][T30336] ? idr_get_free+0xee0/0xee0 [ 994.315352][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 994.320674][T30336] oom_kill_process.cold+0x10/0x9ca [ 994.325929][T30336] ? cgroup_procs_next+0x70/0x70 [ 994.330886][T30336] ? _raw_spin_unlock_irq+0x5e/0x90 [ 994.336108][T30336] ? oom_badness+0xa50/0xa50 [ 994.340715][T30336] ? oom_evaluate_task+0x540/0x540 [ 994.345879][T30336] ? mem_cgroup_iter_break+0x30/0x30 [ 994.351168][T30336] ? mutex_trylock+0x2d0/0x2d0 [ 994.355945][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.362209][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 994.367863][T30336] out_of_memory+0x885/0x1420 [ 994.372557][T30336] ? oom_killer_disable+0x340/0x340 [ 994.377907][T30336] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 994.383722][T30336] ? lock_acquire+0x1db/0x570 [ 994.388422][T30336] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 994.393974][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 994.399130][T30336] ? memory_oom_group_write+0x160/0x160 [ 994.404674][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 994.409985][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 994.414840][T30336] try_charge+0x1407/0x1d30 [ 994.419378][T30336] ? lock_downgrade+0xc40/0xc40 [ 994.424232][T30336] ? kasan_check_read+0x11/0x20 [ 994.429112][T30336] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 994.434661][T30336] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 994.440217][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.446477][T30336] ? lock_downgrade+0xc40/0xc40 [ 994.451400][T30336] ? kasan_check_read+0x11/0x20 [ 994.456252][T30336] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 994.456270][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 994.456296][T30336] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 994.456315][T30336] __memcg_kmem_charge_memcg+0x7c/0x130 [ 994.456333][T30336] ? memcg_kmem_put_cache+0xb0/0xb0 [ 994.484145][T30336] ? lock_release+0xc40/0xc40 [ 994.488827][T30336] __memcg_kmem_charge+0x136/0x300 [ 994.493944][T30336] __alloc_pages_nodemask+0x7b8/0xdc0 [ 994.499336][T30336] ? __alloc_pages_slowpath+0x2c50/0x2c50 [ 994.505054][T30336] ? rcu_pm_notify+0xd0/0xd0 [ 994.510124][T30336] ? rcu_read_lock_sched_held+0x110/0x130 [ 994.515842][T30336] ? kmem_cache_alloc_node+0x347/0x710 [ 994.521318][T30336] ? check_preemption_disabled+0x48/0x290 [ 994.527052][T30336] copy_process+0x847/0x8890 [ 994.531634][T30336] ? mark_held_locks+0xf0/0xf0 [ 994.536417][T30336] ? _raw_spin_unlock_irq+0x28/0x90 [ 994.541628][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.547873][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.554109][T30336] ? check_preemption_disabled+0x48/0x290 [ 994.559829][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 994.565220][T30336] ? __cleanup_sighand+0x70/0x70 [ 994.570189][T30336] ? swp_swapcount+0x540/0x540 [ 994.574949][T30336] ? __lock_acquire+0x572/0x4a10 [ 994.579899][T30336] ? wp_page_reuse+0x159/0x1d0 [ 994.584664][T30336] ? find_held_lock+0x35/0x120 [ 994.589420][T30336] ? wp_page_reuse+0x159/0x1d0 [ 994.594195][T30336] ? kasan_check_read+0x11/0x20 [ 994.599040][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 994.604151][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 994.609432][T30336] ? print_usage_bug+0xd0/0xd0 [ 994.614198][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 994.619067][T30336] ? __lock_acquire+0x572/0x4a10 [ 994.624024][T30336] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 994.629414][T30336] ? mark_held_locks+0xf0/0xf0 [ 994.634174][T30336] ? __handle_mm_fault+0x1dac/0x5610 [ 994.639465][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.645704][T30336] ? check_preemption_disabled+0x48/0x290 [ 994.651415][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.657649][T30336] ? check_preemption_disabled+0x48/0x290 [ 994.663370][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 994.668734][T30336] ? perf_trace_lock+0x12f/0x750 [ 994.673663][T30336] ? add_mm_counter_fast.part.0+0x40/0x40 [ 994.679388][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 994.685034][T30336] ? __might_fault+0x12b/0x1e0 [ 994.689796][T30336] ? find_held_lock+0x35/0x120 [ 994.694554][T30336] ? __might_fault+0x12b/0x1e0 [ 994.699314][T30336] ? lock_acquire+0x1db/0x570 [ 994.703993][T30336] ? lock_downgrade+0xc40/0xc40 [ 994.708835][T30336] ? lock_release+0xc40/0xc40 [ 994.713544][T30336] _do_fork+0x1a9/0x1170 [ 994.717796][T30336] ? fork_idle+0x1d0/0x1d0 [ 994.722222][T30336] ? kasan_check_read+0x11/0x20 [ 994.727066][T30336] ? _copy_to_user+0xc9/0x120 [ 994.731740][T30336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 994.737974][T30336] ? put_timespec64+0x115/0x1b0 [ 994.742822][T30336] ? nsecs_to_jiffies+0x30/0x30 [ 994.747675][T30336] ? do_syscall_64+0x8c/0x800 [ 994.752345][T30336] ? do_syscall_64+0x8c/0x800 [ 994.757023][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 994.762321][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 994.767341][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 994.773580][T30336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.779639][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 994.785443][T30336] __x64_sys_clone+0xbf/0x150 [ 994.790135][T30336] do_syscall_64+0x1a3/0x800 [ 994.794724][T30336] ? syscall_return_slowpath+0x5f0/0x5f0 [ 994.800349][T30336] ? prepare_exit_to_usermode+0x232/0x3b0 [ 994.806077][T30336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 994.811629][T30336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.817512][T30336] RIP: 0033:0x45666a [ 994.821399][T30336] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 994.840996][T30336] RSP: 002b:00007ffdcc805450 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 994.849395][T30336] RAX: ffffffffffffffda RBX: 00007ffdcc805450 RCX: 000000000045666a [ 994.857363][T30336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 994.865342][T30336] RBP: 00007ffdcc805490 R08: 0000000000000001 R09: 00000000016e0940 [ 994.873310][T30336] R10: 00000000016e0c10 R11: 0000000000000246 R12: 0000000000000001 [ 994.881269][T30336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 994.893998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 994.899782][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 994.901674][T30336] memory: usage 17276kB, limit 0kB, failcnt 89 [ 994.905685][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 994.912472][T30336] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 994.917503][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 994.917696][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 994.925597][T30336] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 994.930787][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) 09:35:17 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1f, 0x7}, 'port1\x00', 0x41, 0x400, 0x1000, 0x8, 0x3b, 0x130, 0xffffffff, 0x0, 0x2, 0x8}) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000900)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000800)=""/36, 0x24}], 0x6, &(0x7f00000008c0)=""/3, 0x3, 0x84}, 0x0) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240), 0x31b, 0x0, &(0x7f0000000280)={0x10001}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x3) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 09:35:17 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1f, 0x7}, 'port1\x00', 0x41, 0x400, 0x1000, 0x8, 0x3b, 0x130, 0xffffffff, 0x0, 0x2, 0x8}) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000900)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000800)=""/36, 0x24}], 0x6, &(0x7f00000008c0)=""/3, 0x3, 0x84}, 0x0) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240), 0x31b, 0x0, &(0x7f0000000280)={0x10001}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x3) rmdir(&(0x7f0000000340)='./file0//ile0\x00') [ 994.938075][T30336] Memory cgroup stats for /syz0: cache:36KB rss:10960KB rss_huge:10240KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:10852KB inactive_file:4KB active_file:4KB unevictable:0KB [ 994.972160][T30336] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=31469,uid=0 [ 995.003949][T30336] Memory cgroup out of memory: Kill process 31469 (syz-executor0) score 9534000 or sacrifice child [ 995.031817][T30336] Killed process 31469 (syz-executor0) total-vm:72448kB, anon-rss:2188kB, file-rss:35816kB, shmem-rss:0kB [ 995.178430][T30336] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 995.236774][T30336] CPU: 0 PID: 30336 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 995.245801][T30336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.255855][T30336] Call Trace: [ 995.259159][T30336] dump_stack+0x1db/0x2d0 [ 995.263511][T30336] ? dump_stack_print_info.cold+0x20/0x20 [ 995.269233][T30336] ? perf_trace_lock+0x12f/0x750 [ 995.274195][T30336] dump_header+0x1e6/0x11a6 [ 995.278708][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 995.284348][T30336] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 995.289990][T30336] ? ___ratelimit+0x37c/0x686 [ 995.294669][T30336] ? find_held_lock+0x35/0x120 [ 995.299454][T30336] ? mark_held_locks+0xa4/0xf0 [ 995.304212][T30336] ? lock_acquire+0x1db/0x570 [ 995.308905][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 995.313574][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 995.314718][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 995.320474][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 995.326211][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 995.326229][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 995.326245][T30336] ? kasan_check_read+0x11/0x20 [ 995.326258][T30336] ? ___ratelimit+0x37c/0x686 [ 995.326277][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 995.357543][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 995.362839][T30336] ? trace_hardirqs_on_caller+0x310/0x310 [ 995.368564][T30336] ? lock_acquire+0x1db/0x570 [ 995.373257][T30336] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 995.379573][T30336] ? ___ratelimit+0xac/0x686 [ 995.384169][T30336] ? idr_get_free+0xee0/0xee0 [ 995.384185][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 995.384209][T30336] oom_kill_process.cold+0x10/0x9ca [ 995.384230][T30336] ? cgroup_procs_next+0x70/0x70 [ 995.384251][T30336] ? _raw_spin_unlock_irq+0x5e/0x90 [ 995.384269][T30336] ? oom_badness+0xa50/0xa50 [ 995.394224][T30336] ? oom_evaluate_task+0x540/0x540 [ 995.394244][T30336] ? mem_cgroup_iter_break+0x30/0x30 [ 995.394259][T30336] ? mutex_trylock+0x2d0/0x2d0 [ 995.394274][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.394307][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 995.394332][T30336] out_of_memory+0x885/0x1420 [ 995.445856][T30336] ? oom_killer_disable+0x340/0x340 [ 995.451064][T30336] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 995.456886][T30336] ? lock_acquire+0x1db/0x570 [ 995.461558][T30336] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 995.467087][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 995.472186][T30336] ? memory_oom_group_write+0x160/0x160 [ 995.477704][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 995.482968][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 995.487811][T30336] try_charge+0x1407/0x1d30 [ 995.492322][T30336] ? lock_downgrade+0xc40/0xc40 [ 995.497274][T30336] ? kasan_check_read+0x11/0x20 [ 995.502104][T30336] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 995.507635][T30336] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 995.513169][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.519406][T30336] ? lock_downgrade+0xc40/0xc40 [ 995.524240][T30336] ? kasan_check_read+0x11/0x20 [ 995.529079][T30336] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 995.535036][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 995.540667][T30336] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 995.546221][T30336] __memcg_kmem_charge_memcg+0x7c/0x130 [ 995.551753][T30336] ? memcg_kmem_put_cache+0xb0/0xb0 [ 995.556927][T30336] ? lock_release+0xc40/0xc40 [ 995.561586][T30336] __memcg_kmem_charge+0x136/0x300 [ 995.566687][T30336] __alloc_pages_nodemask+0x7b8/0xdc0 [ 995.572049][T30336] ? __alloc_pages_slowpath+0x2c50/0x2c50 [ 995.577744][T30336] ? rcu_pm_notify+0xd0/0xd0 [ 995.582317][T30336] ? rcu_read_lock_sched_held+0x110/0x130 [ 995.588021][T30336] ? kmem_cache_alloc_node+0x347/0x710 [ 995.593476][T30336] ? check_preemption_disabled+0x48/0x290 [ 995.599189][T30336] copy_process+0x847/0x8890 [ 995.603769][T30336] ? mark_held_locks+0xf0/0xf0 [ 995.608535][T30336] ? _raw_spin_unlock_irq+0x28/0x90 [ 995.613732][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.619961][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.626187][T30336] ? check_preemption_disabled+0x48/0x290 [ 995.631913][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 995.637297][T30336] ? __cleanup_sighand+0x70/0x70 [ 995.642210][T30336] ? swp_swapcount+0x540/0x540 [ 995.646961][T30336] ? __lock_acquire+0x572/0x4a10 [ 995.651888][T30336] ? wp_page_reuse+0x159/0x1d0 [ 995.656625][T30336] ? find_held_lock+0x35/0x120 [ 995.661363][T30336] ? wp_page_reuse+0x159/0x1d0 [ 995.666127][T30336] ? kasan_check_read+0x11/0x20 [ 995.670963][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 995.676065][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 995.681325][T30336] ? print_usage_bug+0xd0/0xd0 [ 995.686109][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 995.690952][T30336] ? __lock_acquire+0x572/0x4a10 [ 995.695879][T30336] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 995.701230][T30336] ? mark_held_locks+0xf0/0xf0 [ 995.705980][T30336] ? __handle_mm_fault+0x1dac/0x5610 [ 995.711264][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.717482][T30336] ? check_preemption_disabled+0x48/0x290 [ 995.723173][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.729389][T30336] ? check_preemption_disabled+0x48/0x290 [ 995.735102][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 995.740474][T30336] ? perf_trace_lock+0x12f/0x750 [ 995.745396][T30336] ? add_mm_counter_fast.part.0+0x40/0x40 [ 995.751103][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 995.756719][T30336] ? __might_fault+0x12b/0x1e0 [ 995.761457][T30336] ? find_held_lock+0x35/0x120 [ 995.766241][T30336] ? __might_fault+0x12b/0x1e0 [ 995.771021][T30336] ? lock_acquire+0x1db/0x570 [ 995.775680][T30336] ? lock_downgrade+0xc40/0xc40 [ 995.780505][T30336] ? lock_release+0xc40/0xc40 [ 995.785178][T30336] _do_fork+0x1a9/0x1170 [ 995.789423][T30336] ? fork_idle+0x1d0/0x1d0 [ 995.793827][T30336] ? kasan_check_read+0x11/0x20 [ 995.798675][T30336] ? _copy_to_user+0xc9/0x120 [ 995.803339][T30336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 995.809654][T30336] ? put_timespec64+0x115/0x1b0 [ 995.814482][T30336] ? nsecs_to_jiffies+0x30/0x30 [ 995.819309][T30336] ? do_syscall_64+0x8c/0x800 [ 995.823976][T30336] ? do_syscall_64+0x8c/0x800 [ 995.828647][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 995.833940][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 995.838949][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 995.845178][T30336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.851229][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 995.857013][T30336] __x64_sys_clone+0xbf/0x150 [ 995.861666][T30336] do_syscall_64+0x1a3/0x800 [ 995.866246][T30336] ? syscall_return_slowpath+0x5f0/0x5f0 [ 995.871895][T30336] ? prepare_exit_to_usermode+0x232/0x3b0 [ 995.877593][T30336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 995.883116][T30336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.889018][T30336] RIP: 0033:0x45666a [ 995.892903][T30336] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 995.912478][T30336] RSP: 002b:00007ffdcc805450 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 995.920936][T30336] RAX: ffffffffffffffda RBX: 00007ffdcc805450 RCX: 000000000045666a [ 995.928892][T30336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 995.936840][T30336] RBP: 00007ffdcc805490 R08: 0000000000000001 R09: 00000000016e0940 [ 995.944806][T30336] R10: 00000000016e0c10 R11: 0000000000000246 R12: 0000000000000001 [ 995.952759][T30336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 995.964185][T30336] memory: usage 14900kB, limit 0kB, failcnt 95 [ 995.970340][T30336] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 995.977918][T30336] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 995.984822][T30336] Memory cgroup stats for /syz0: cache:36KB rss:8764KB rss_huge:8192KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:8692KB inactive_file:4KB active_file:4KB unevictable:0KB [ 995.984940][T30336] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=31087,uid=0 [ 996.021486][T30336] Memory cgroup out of memory: Kill process 31087 (syz-executor0) score 9531000 or sacrifice child [ 996.032706][T30336] Killed process 31087 (syz-executor0) total-vm:72448kB, anon-rss:2188kB, file-rss:35804kB, shmem-rss:0kB [ 996.054817][ T1040] oom_reaper: reaped process 31087 (syz-executor0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 996.094877][T30336] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 996.106755][T30336] CPU: 0 PID: 30336 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 996.115769][T30336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.125820][T30336] Call Trace: [ 996.129120][T30336] dump_stack+0x1db/0x2d0 [ 996.133445][T30336] ? dump_stack_print_info.cold+0x20/0x20 [ 996.139167][T30336] ? perf_trace_lock+0x12f/0x750 [ 996.144122][T30336] dump_header+0x1e6/0x11a6 [ 996.148625][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 996.154258][T30336] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 996.159928][T30336] ? ___ratelimit+0x37c/0x686 [ 996.164610][T30336] ? find_held_lock+0x35/0x120 [ 996.169377][T30336] ? mark_held_locks+0xa4/0xf0 [ 996.174138][T30336] ? lock_acquire+0x1db/0x570 [ 996.178808][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 996.184603][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 996.190396][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 996.195670][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 996.200681][T30336] ? kasan_check_read+0x11/0x20 [ 996.205507][T30336] ? ___ratelimit+0x37c/0x686 [ 996.210162][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 996.215956][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 996.221240][T30336] ? trace_hardirqs_on_caller+0x310/0x310 [ 996.226947][T30336] ? lock_acquire+0x1db/0x570 [ 996.231603][T30336] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 996.237399][T30336] ? ___ratelimit+0xac/0x686 [ 996.241981][T30336] ? idr_get_free+0xee0/0xee0 [ 996.246649][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 996.251931][T30336] oom_kill_process.cold+0x10/0x9ca [ 996.257127][T30336] ? cgroup_procs_next+0x70/0x70 [ 996.262055][T30336] ? _raw_spin_unlock_irq+0x5e/0x90 [ 996.267231][T30336] ? oom_badness+0xa50/0xa50 [ 996.271801][T30336] ? oom_evaluate_task+0x540/0x540 [ 996.276902][T30336] ? mem_cgroup_iter_break+0x30/0x30 [ 996.282175][T30336] ? mutex_trylock+0x2d0/0x2d0 [ 996.286918][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.293162][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 996.298786][T30336] out_of_memory+0x885/0x1420 [ 996.303481][T30336] ? oom_killer_disable+0x340/0x340 [ 996.308671][T30336] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 996.314470][T30336] ? lock_acquire+0x1db/0x570 [ 996.319142][T30336] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 996.324714][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 996.329812][T30336] ? memory_oom_group_write+0x160/0x160 [ 996.335345][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 996.340625][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 996.345473][T30336] try_charge+0x1407/0x1d30 [ 996.349951][T30336] ? lock_downgrade+0xc40/0xc40 [ 996.354791][T30336] ? kasan_check_read+0x11/0x20 [ 996.359635][T30336] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 996.365169][T30336] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 996.370718][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.376950][T30336] ? lock_downgrade+0xc40/0xc40 [ 996.381801][T30336] ? kasan_check_read+0x11/0x20 [ 996.386632][T30336] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 996.392708][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 996.398324][T30336] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 996.403880][T30336] __memcg_kmem_charge_memcg+0x7c/0x130 [ 996.409413][T30336] ? memcg_kmem_put_cache+0xb0/0xb0 [ 996.414597][T30336] ? lock_release+0xc40/0xc40 [ 996.419278][T30336] __memcg_kmem_charge+0x136/0x300 [ 996.424398][T30336] __alloc_pages_nodemask+0x7b8/0xdc0 [ 996.429763][T30336] ? __alloc_pages_slowpath+0x2c50/0x2c50 [ 996.435462][T30336] ? rcu_pm_notify+0xd0/0xd0 [ 996.440045][T30336] ? rcu_read_lock_sched_held+0x110/0x130 [ 996.445757][T30336] ? kmem_cache_alloc_node+0x347/0x710 [ 996.451207][T30336] ? check_preemption_disabled+0x48/0x290 [ 996.456953][T30336] copy_process+0x847/0x8890 [ 996.461527][T30336] ? mark_held_locks+0xf0/0xf0 [ 996.466271][T30336] ? _raw_spin_unlock_irq+0x28/0x90 [ 996.471442][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.477668][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.483906][T30336] ? check_preemption_disabled+0x48/0x290 [ 996.489615][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 996.494986][T30336] ? __cleanup_sighand+0x70/0x70 [ 996.499914][T30336] ? swp_swapcount+0x540/0x540 [ 996.504669][T30336] ? __lock_acquire+0x572/0x4a10 [ 996.509610][T30336] ? wp_page_reuse+0x159/0x1d0 [ 996.514366][T30336] ? find_held_lock+0x35/0x120 [ 996.519117][T30336] ? wp_page_reuse+0x159/0x1d0 [ 996.523897][T30336] ? kasan_check_read+0x11/0x20 [ 996.528738][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 996.533839][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 996.539135][T30336] ? print_usage_bug+0xd0/0xd0 [ 996.543903][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 996.548746][T30336] ? __lock_acquire+0x572/0x4a10 [ 996.553680][T30336] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 996.559044][T30336] ? mark_held_locks+0xf0/0xf0 [ 996.563795][T30336] ? __handle_mm_fault+0x1dac/0x5610 [ 996.569068][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.575296][T30336] ? check_preemption_disabled+0x48/0x290 [ 996.580999][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.587217][T30336] ? check_preemption_disabled+0x48/0x290 [ 996.592935][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 996.598352][T30336] ? perf_trace_lock+0x12f/0x750 [ 996.603282][T30336] ? add_mm_counter_fast.part.0+0x40/0x40 [ 996.608993][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 996.614624][T30336] ? __might_fault+0x12b/0x1e0 [ 996.619376][T30336] ? find_held_lock+0x35/0x120 [ 996.624129][T30336] ? __might_fault+0x12b/0x1e0 [ 996.628886][T30336] ? lock_acquire+0x1db/0x570 [ 996.633557][T30336] ? lock_downgrade+0xc40/0xc40 [ 996.638393][T30336] ? lock_release+0xc40/0xc40 [ 996.643067][T30336] _do_fork+0x1a9/0x1170 [ 996.647302][T30336] ? fork_idle+0x1d0/0x1d0 [ 996.651696][T30336] ? kasan_check_read+0x11/0x20 [ 996.656536][T30336] ? _copy_to_user+0xc9/0x120 [ 996.661203][T30336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 996.667420][T30336] ? put_timespec64+0x115/0x1b0 [ 996.672248][T30336] ? nsecs_to_jiffies+0x30/0x30 [ 996.677087][T30336] ? do_syscall_64+0x8c/0x800 [ 996.681753][T30336] ? do_syscall_64+0x8c/0x800 [ 996.686404][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 996.691717][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 996.696759][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.702999][T30336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.709052][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 996.714864][T30336] __x64_sys_clone+0xbf/0x150 [ 996.719530][T30336] do_syscall_64+0x1a3/0x800 [ 996.724111][T30336] ? syscall_return_slowpath+0x5f0/0x5f0 [ 996.729746][T30336] ? prepare_exit_to_usermode+0x232/0x3b0 [ 996.735474][T30336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 996.741009][T30336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.746880][T30336] RIP: 0033:0x45666a [ 996.750753][T30336] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 996.770332][T30336] RSP: 002b:00007ffdcc805450 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 996.778720][T30336] RAX: ffffffffffffffda RBX: 00007ffdcc805450 RCX: 000000000045666a [ 996.786668][T30336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 996.794619][T30336] RBP: 00007ffdcc805490 R08: 0000000000000001 R09: 00000000016e0940 [ 996.802573][T30336] R10: 00000000016e0c10 R11: 0000000000000246 R12: 0000000000000001 [ 996.810514][T30336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 996.819776][T30336] memory: usage 12588kB, limit 0kB, failcnt 179 [ 996.826178][T30336] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 996.833710][T30336] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 996.840554][T30336] Memory cgroup stats for /syz0: cache:36KB rss:6584KB rss_huge:6144KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6544KB inactive_file:4KB active_file:4KB unevictable:0KB [ 996.861781][T30336] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=31099,uid=0 [ 996.877112][T30336] Memory cgroup out of memory: Kill process 31099 (syz-executor0) score 9531000 or sacrifice child [ 996.887925][T30336] Killed process 31099 (syz-executor0) total-vm:72448kB, anon-rss:2188kB, file-rss:35804kB, shmem-rss:0kB [ 996.901125][ T1040] oom_reaper: reaped process 31099 (syz-executor0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 996.914444][T30336] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 996.928944][T30336] CPU: 0 PID: 30336 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 996.937974][T30336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.948011][T30336] Call Trace: [ 996.951301][T30336] dump_stack+0x1db/0x2d0 [ 996.955627][T30336] ? dump_stack_print_info.cold+0x20/0x20 [ 996.961338][T30336] ? perf_trace_lock+0x12f/0x750 [ 996.966293][T30336] dump_header+0x1e6/0x11a6 [ 996.970789][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 996.976417][T30336] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 996.982042][T30336] ? ___ratelimit+0x37c/0x686 [ 996.986712][T30336] ? find_held_lock+0x35/0x120 [ 996.991470][T30336] ? mark_held_locks+0xa4/0xf0 [ 996.996227][T30336] ? lock_acquire+0x1db/0x570 [ 997.000907][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 997.006731][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 997.012543][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 997.017823][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 997.022868][T30336] ? kasan_check_read+0x11/0x20 [ 997.027729][T30336] ? ___ratelimit+0x37c/0x686 [ 997.032404][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 997.038189][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 997.043478][T30336] ? trace_hardirqs_on_caller+0x310/0x310 [ 997.049185][T30336] ? lock_acquire+0x1db/0x570 [ 997.053867][T30336] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 997.059674][T30336] ? ___ratelimit+0xac/0x686 [ 997.064294][T30336] ? idr_get_free+0xee0/0xee0 [ 997.068983][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 997.074280][T30336] oom_kill_process.cold+0x10/0x9ca [ 997.079481][T30336] ? cgroup_procs_next+0x70/0x70 [ 997.084410][T30336] ? _raw_spin_unlock_irq+0x5e/0x90 [ 997.089593][T30336] ? oom_badness+0xa50/0xa50 [ 997.094188][T30336] ? oom_evaluate_task+0x540/0x540 [ 997.099286][T30336] ? mem_cgroup_iter_break+0x30/0x30 [ 997.104559][T30336] ? mutex_trylock+0x2d0/0x2d0 [ 997.109308][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.115533][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 997.121149][T30336] out_of_memory+0x885/0x1420 [ 997.125838][T30336] ? oom_killer_disable+0x340/0x340 [ 997.131035][T30336] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 997.136816][T30336] ? lock_acquire+0x1db/0x570 [ 997.141475][T30336] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 997.147002][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 997.152098][T30336] ? memory_oom_group_write+0x160/0x160 [ 997.157629][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 997.162930][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 997.167773][T30336] try_charge+0x1407/0x1d30 [ 997.172250][T30336] ? lock_downgrade+0xc40/0xc40 [ 997.177076][T30336] ? kasan_check_read+0x11/0x20 [ 997.181905][T30336] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 997.187444][T30336] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 997.192983][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.199213][T30336] ? lock_downgrade+0xc40/0xc40 [ 997.204055][T30336] ? kasan_check_read+0x11/0x20 [ 997.208893][T30336] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 997.214864][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 997.220478][T30336] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 997.226014][T30336] __memcg_kmem_charge_memcg+0x7c/0x130 [ 997.231562][T30336] ? memcg_kmem_put_cache+0xb0/0xb0 [ 997.236753][T30336] ? lock_release+0xc40/0xc40 [ 997.241409][T30336] __memcg_kmem_charge+0x136/0x300 [ 997.246517][T30336] __alloc_pages_nodemask+0x7b8/0xdc0 [ 997.251883][T30336] ? __alloc_pages_slowpath+0x2c50/0x2c50 [ 997.257577][T30336] ? rcu_pm_notify+0xd0/0xd0 [ 997.262161][T30336] ? rcu_read_lock_sched_held+0x110/0x130 [ 997.267866][T30336] ? kmem_cache_alloc_node+0x347/0x710 [ 997.273342][T30336] ? check_preemption_disabled+0x48/0x290 [ 997.279053][T30336] copy_process+0x847/0x8890 [ 997.283629][T30336] ? mark_held_locks+0xf0/0xf0 [ 997.288384][T30336] ? _raw_spin_unlock_irq+0x28/0x90 [ 997.293568][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.299797][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.306026][T30336] ? check_preemption_disabled+0x48/0x290 [ 997.311752][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 997.317123][T30336] ? __cleanup_sighand+0x70/0x70 [ 997.322039][T30336] ? swp_swapcount+0x540/0x540 [ 997.326802][T30336] ? __lock_acquire+0x572/0x4a10 [ 997.331782][T30336] ? wp_page_reuse+0x159/0x1d0 [ 997.336552][T30336] ? find_held_lock+0x35/0x120 [ 997.341318][T30336] ? wp_page_reuse+0x159/0x1d0 [ 997.346085][T30336] ? kasan_check_read+0x11/0x20 [ 997.350927][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 997.356018][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 997.361279][T30336] ? print_usage_bug+0xd0/0xd0 [ 997.366037][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 997.370900][T30336] ? __lock_acquire+0x572/0x4a10 [ 997.375821][T30336] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 997.381178][T30336] ? mark_held_locks+0xf0/0xf0 [ 997.385932][T30336] ? __handle_mm_fault+0x1dac/0x5610 [ 997.391205][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.397422][T30336] ? check_preemption_disabled+0x48/0x290 [ 997.403127][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.409369][T30336] ? check_preemption_disabled+0x48/0x290 [ 997.415072][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 997.420420][T30336] ? perf_trace_lock+0x12f/0x750 [ 997.425366][T30336] ? add_mm_counter_fast.part.0+0x40/0x40 [ 997.431089][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 997.436708][T30336] ? __might_fault+0x12b/0x1e0 [ 997.441444][T30336] ? find_held_lock+0x35/0x120 [ 997.446197][T30336] ? __might_fault+0x12b/0x1e0 [ 997.450948][T30336] ? lock_acquire+0x1db/0x570 [ 997.455619][T30336] ? lock_downgrade+0xc40/0xc40 [ 997.460446][T30336] ? lock_release+0xc40/0xc40 [ 997.465120][T30336] _do_fork+0x1a9/0x1170 [ 997.469355][T30336] ? fork_idle+0x1d0/0x1d0 [ 997.473763][T30336] ? kasan_check_read+0x11/0x20 [ 997.478600][T30336] ? _copy_to_user+0xc9/0x120 [ 997.483282][T30336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 997.489509][T30336] ? put_timespec64+0x115/0x1b0 [ 997.494344][T30336] ? nsecs_to_jiffies+0x30/0x30 [ 997.499187][T30336] ? do_syscall_64+0x8c/0x800 [ 997.503867][T30336] ? do_syscall_64+0x8c/0x800 [ 997.508580][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 997.513856][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 997.518875][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.525126][T30336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 997.531192][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 997.537010][T30336] __x64_sys_clone+0xbf/0x150 [ 997.541665][T30336] do_syscall_64+0x1a3/0x800 [ 997.546252][T30336] ? syscall_return_slowpath+0x5f0/0x5f0 [ 997.551879][T30336] ? prepare_exit_to_usermode+0x232/0x3b0 [ 997.557580][T30336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 997.563120][T30336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 997.568999][T30336] RIP: 0033:0x45666a [ 997.572910][T30336] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 997.592504][T30336] RSP: 002b:00007ffdcc805450 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 997.600907][T30336] RAX: ffffffffffffffda RBX: 00007ffdcc805450 RCX: 000000000045666a [ 997.608857][T30336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 997.616816][T30336] RBP: 00007ffdcc805490 R08: 0000000000000001 R09: 00000000016e0940 [ 997.624792][T30336] R10: 00000000016e0c10 R11: 0000000000000246 R12: 0000000000000001 [ 997.632758][T30336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 997.643826][T30336] memory: usage 10256kB, limit 0kB, failcnt 185 [ 997.650175][T30336] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 997.659620][T30336] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 997.666536][T30336] Memory cgroup stats for /syz0: cache:36KB rss:4424KB rss_huge:4096KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4384KB inactive_file:4KB active_file:4KB unevictable:0KB [ 997.687713][T30336] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=31073,uid=0 [ 997.702992][T30336] Memory cgroup out of memory: Kill process 31073 (syz-executor0) score 9529000 or sacrifice child [ 997.714627][T30336] Killed process 31073 (syz-executor0) total-vm:72448kB, anon-rss:2188kB, file-rss:35796kB, shmem-rss:0kB [ 997.727929][ T1040] oom_reaper: reaped process 31073 (syz-executor0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 997.739322][T30336] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 997.754304][T30336] CPU: 0 PID: 30336 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 997.763323][T30336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.773376][T30336] Call Trace: [ 997.776668][T30336] dump_stack+0x1db/0x2d0 [ 997.781002][T30336] ? dump_stack_print_info.cold+0x20/0x20 [ 997.786714][T30336] ? perf_trace_lock+0x12f/0x750 [ 997.791636][T30336] dump_header+0x1e6/0x11a6 [ 997.796132][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 997.801762][T30336] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 997.807377][T30336] ? ___ratelimit+0x37c/0x686 [ 997.812036][T30336] ? find_held_lock+0x35/0x120 [ 997.816800][T30336] ? mark_held_locks+0xa4/0xf0 [ 997.821561][T30336] ? lock_acquire+0x1db/0x570 [ 997.826233][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 997.832019][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 997.837800][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 997.843072][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 997.848102][T30336] ? kasan_check_read+0x11/0x20 [ 997.852957][T30336] ? ___ratelimit+0x37c/0x686 [ 997.857632][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 997.863430][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 997.868699][T30336] ? trace_hardirqs_on_caller+0x310/0x310 [ 997.874416][T30336] ? lock_acquire+0x1db/0x570 [ 997.879111][T30336] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 997.884894][T30336] ? ___ratelimit+0xac/0x686 [ 997.889456][T30336] ? idr_get_free+0xee0/0xee0 [ 997.894114][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 997.899386][T30336] oom_kill_process.cold+0x10/0x9ca [ 997.904566][T30336] ? cgroup_procs_next+0x70/0x70 [ 997.909481][T30336] ? _raw_spin_unlock_irq+0x5e/0x90 [ 997.914661][T30336] ? oom_badness+0xa50/0xa50 [ 997.919236][T30336] ? oom_evaluate_task+0x540/0x540 [ 997.924325][T30336] ? mem_cgroup_iter_break+0x30/0x30 [ 997.929597][T30336] ? mutex_trylock+0x2d0/0x2d0 [ 997.934344][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.940580][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 997.946209][T30336] out_of_memory+0x885/0x1420 [ 997.950874][T30336] ? oom_killer_disable+0x340/0x340 [ 997.956061][T30336] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 997.961862][T30336] ? lock_acquire+0x1db/0x570 [ 997.966520][T30336] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 997.972054][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 997.977180][T30336] ? memory_oom_group_write+0x160/0x160 [ 997.982719][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 997.987994][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 997.992832][T30336] try_charge+0x1407/0x1d30 [ 997.997368][T30336] ? lock_downgrade+0xc40/0xc40 [ 998.002218][T30336] ? kasan_check_read+0x11/0x20 [ 998.007061][T30336] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 998.012590][T30336] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 998.018138][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.024400][T30336] ? lock_downgrade+0xc40/0xc40 [ 998.029225][T30336] ? kasan_check_read+0x11/0x20 [ 998.034074][T30336] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 998.040046][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 998.045660][T30336] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 998.051179][T30336] __memcg_kmem_charge_memcg+0x7c/0x130 [ 998.056740][T30336] ? memcg_kmem_put_cache+0xb0/0xb0 [ 998.061923][T30336] ? lock_release+0xc40/0xc40 [ 998.066600][T30336] __memcg_kmem_charge+0x136/0x300 [ 998.071693][T30336] __alloc_pages_nodemask+0x7b8/0xdc0 [ 998.077061][T30336] ? __alloc_pages_slowpath+0x2c50/0x2c50 [ 998.082778][T30336] ? rcu_pm_notify+0xd0/0xd0 [ 998.087361][T30336] ? rcu_read_lock_sched_held+0x110/0x130 [ 998.093068][T30336] ? kmem_cache_alloc_node+0x347/0x710 [ 998.098516][T30336] ? check_preemption_disabled+0x48/0x290 [ 998.104221][T30336] copy_process+0x847/0x8890 [ 998.108787][T30336] ? mark_held_locks+0xf0/0xf0 [ 998.113544][T30336] ? _raw_spin_unlock_irq+0x28/0x90 [ 998.118739][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.124966][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.131196][T30336] ? check_preemption_disabled+0x48/0x290 [ 998.136910][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 998.142292][T30336] ? __cleanup_sighand+0x70/0x70 [ 998.147217][T30336] ? swp_swapcount+0x540/0x540 [ 998.151998][T30336] ? __lock_acquire+0x572/0x4a10 [ 998.156927][T30336] ? wp_page_reuse+0x159/0x1d0 [ 998.161675][T30336] ? find_held_lock+0x35/0x120 [ 998.166415][T30336] ? wp_page_reuse+0x159/0x1d0 [ 998.171241][T30336] ? kasan_check_read+0x11/0x20 [ 998.176098][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 998.181200][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 998.186464][T30336] ? print_usage_bug+0xd0/0xd0 [ 998.191236][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 998.196095][T30336] ? __lock_acquire+0x572/0x4a10 [ 998.201040][T30336] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 998.206403][T30336] ? mark_held_locks+0xf0/0xf0 [ 998.211140][T30336] ? __handle_mm_fault+0x1dac/0x5610 [ 998.216400][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.222648][T30336] ? check_preemption_disabled+0x48/0x290 [ 998.228369][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.234608][T30336] ? check_preemption_disabled+0x48/0x290 [ 998.240316][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 998.245667][T30336] ? perf_trace_lock+0x12f/0x750 [ 998.250582][T30336] ? add_mm_counter_fast.part.0+0x40/0x40 [ 998.256291][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 998.261966][T30336] ? __might_fault+0x12b/0x1e0 [ 998.266743][T30336] ? find_held_lock+0x35/0x120 [ 998.271483][T30336] ? __might_fault+0x12b/0x1e0 [ 998.276223][T30336] ? lock_acquire+0x1db/0x570 [ 998.280884][T30336] ? lock_downgrade+0xc40/0xc40 [ 998.285710][T30336] ? lock_release+0xc40/0xc40 [ 998.290370][T30336] _do_fork+0x1a9/0x1170 [ 998.294611][T30336] ? fork_idle+0x1d0/0x1d0 [ 998.299016][T30336] ? kasan_check_read+0x11/0x20 [ 998.303880][T30336] ? _copy_to_user+0xc9/0x120 [ 998.308566][T30336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 998.314792][T30336] ? put_timespec64+0x115/0x1b0 [ 998.319646][T30336] ? nsecs_to_jiffies+0x30/0x30 [ 998.324486][T30336] ? do_syscall_64+0x8c/0x800 [ 998.329151][T30336] ? do_syscall_64+0x8c/0x800 [ 998.333816][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 998.339101][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 998.344111][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.350343][T30336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.356388][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 998.362189][T30336] __x64_sys_clone+0xbf/0x150 [ 998.366865][T30336] do_syscall_64+0x1a3/0x800 [ 998.371446][T30336] ? syscall_return_slowpath+0x5f0/0x5f0 [ 998.377075][T30336] ? prepare_exit_to_usermode+0x232/0x3b0 [ 998.382791][T30336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 998.388328][T30336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.394206][T30336] RIP: 0033:0x45666a [ 998.398113][T30336] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 998.417711][T30336] RSP: 002b:00007ffdcc805450 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 998.426099][T30336] RAX: ffffffffffffffda RBX: 00007ffdcc805450 RCX: 000000000045666a [ 998.434054][T30336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 998.442039][T30336] RBP: 00007ffdcc805490 R08: 0000000000000001 R09: 00000000016e0940 [ 998.450001][T30336] R10: 00000000016e0c10 R11: 0000000000000246 R12: 0000000000000001 [ 998.457963][T30336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 998.467401][T30336] memory: usage 7932kB, limit 0kB, failcnt 191 [ 998.473675][T30336] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 998.481121][T30336] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 998.488019][T30336] Memory cgroup stats for /syz0: cache:36KB rss:2264KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2224KB inactive_file:4KB active_file:4KB unevictable:0KB [ 998.509357][T30336] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=31050,uid=0 [ 998.524731][T30336] Memory cgroup out of memory: Kill process 31050 (syz-executor0) score 9527000 or sacrifice child [ 998.535616][T30336] Killed process 31050 (syz-executor0) total-vm:72448kB, anon-rss:2188kB, file-rss:35788kB, shmem-rss:0kB [ 998.548735][ T1040] oom_reaper: reaped process 31050 (syz-executor0), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 998.561204][T30336] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 998.574489][T30336] CPU: 0 PID: 30336 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 998.583511][T30336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.593560][T30336] Call Trace: [ 998.596839][T30336] dump_stack+0x1db/0x2d0 [ 998.601166][T30336] ? dump_stack_print_info.cold+0x20/0x20 [ 998.606919][T30336] ? perf_trace_lock+0x12f/0x750 [ 998.611917][T30336] dump_header+0x1e6/0x11a6 [ 998.616416][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 998.622091][T30336] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 998.627750][T30336] ? ___ratelimit+0x37c/0x686 [ 998.632445][T30336] ? find_held_lock+0x35/0x120 [ 998.637224][T30336] ? mark_held_locks+0xa4/0xf0 [ 998.641992][T30336] ? lock_acquire+0x1db/0x570 [ 998.646672][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 998.652478][T30336] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 998.658301][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 998.663591][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 998.668614][T30336] ? kasan_check_read+0x11/0x20 [ 998.673456][T30336] ? ___ratelimit+0x37c/0x686 [ 998.678135][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 998.683947][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 998.689218][T30336] ? trace_hardirqs_on_caller+0x310/0x310 [ 998.694922][T30336] ? lock_acquire+0x1db/0x570 [ 998.699606][T30336] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 998.705387][T30336] ? ___ratelimit+0xac/0x686 [ 998.709976][T30336] ? idr_get_free+0xee0/0xee0 [ 998.714636][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 998.719909][T30336] oom_kill_process.cold+0x10/0x9ca [ 998.725101][T30336] ? cgroup_procs_next+0x70/0x70 [ 998.730028][T30336] ? _raw_spin_unlock_irq+0x5e/0x90 [ 998.735211][T30336] ? oom_badness+0xa50/0xa50 [ 998.739789][T30336] ? oom_evaluate_task+0x540/0x540 [ 998.744899][T30336] ? mem_cgroup_iter_break+0x30/0x30 [ 998.750175][T30336] ? mutex_trylock+0x2d0/0x2d0 [ 998.754930][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.761166][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 998.766780][T30336] out_of_memory+0x885/0x1420 [ 998.771439][T30336] ? oom_killer_disable+0x340/0x340 [ 998.776613][T30336] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 998.782419][T30336] ? lock_acquire+0x1db/0x570 [ 998.787090][T30336] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 998.792622][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 998.797724][T30336] ? memory_oom_group_write+0x160/0x160 [ 998.803255][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 998.808533][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 998.813377][T30336] try_charge+0x1407/0x1d30 [ 998.817892][T30336] ? lock_downgrade+0xc40/0xc40 [ 998.822727][T30336] ? kasan_check_read+0x11/0x20 [ 998.827566][T30336] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 998.833109][T30336] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 998.838637][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.844874][T30336] ? lock_downgrade+0xc40/0xc40 [ 998.849708][T30336] ? kasan_check_read+0x11/0x20 [ 998.854543][T30336] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 998.860509][T30336] ? rcu_read_unlock_special+0x380/0x380 [ 998.866123][T30336] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 998.871643][T30336] __memcg_kmem_charge_memcg+0x7c/0x130 [ 998.877178][T30336] ? memcg_kmem_put_cache+0xb0/0xb0 [ 998.882388][T30336] ? lock_release+0xc40/0xc40 [ 998.887129][T30336] __memcg_kmem_charge+0x136/0x300 [ 998.892250][T30336] __alloc_pages_nodemask+0x7b8/0xdc0 [ 998.897607][T30336] ? __alloc_pages_slowpath+0x2c50/0x2c50 [ 998.903314][T30336] ? rcu_pm_notify+0xd0/0xd0 [ 998.907896][T30336] ? rcu_read_lock_sched_held+0x110/0x130 [ 998.913599][T30336] ? kmem_cache_alloc_node+0x347/0x710 [ 998.919041][T30336] ? check_preemption_disabled+0x48/0x290 [ 998.924756][T30336] copy_process+0x847/0x8890 [ 998.929330][T30336] ? mark_held_locks+0xf0/0xf0 [ 998.934081][T30336] ? _raw_spin_unlock_irq+0x28/0x90 [ 998.939259][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.945494][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 998.951722][T30336] ? check_preemption_disabled+0x48/0x290 [ 998.957431][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 998.962803][T30336] ? __cleanup_sighand+0x70/0x70 [ 998.967725][T30336] ? swp_swapcount+0x540/0x540 [ 998.972488][T30336] ? __lock_acquire+0x572/0x4a10 [ 998.977411][T30336] ? wp_page_reuse+0x159/0x1d0 [ 998.982164][T30336] ? find_held_lock+0x35/0x120 [ 998.986913][T30336] ? wp_page_reuse+0x159/0x1d0 [ 998.991671][T30336] ? kasan_check_read+0x11/0x20 [ 998.996514][T30336] ? do_raw_spin_unlock+0xa0/0x330 [ 999.001603][T30336] ? do_raw_spin_trylock+0x270/0x270 [ 999.006887][T30336] ? print_usage_bug+0xd0/0xd0 [ 999.011660][T30336] ? _raw_spin_unlock+0x2d/0x50 [ 999.016508][T30336] ? __lock_acquire+0x572/0x4a10 [ 999.021437][T30336] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 999.026803][T30336] ? mark_held_locks+0xf0/0xf0 [ 999.031541][T30336] ? __handle_mm_fault+0x1dac/0x5610 [ 999.036801][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 999.043028][T30336] ? check_preemption_disabled+0x48/0x290 [ 999.048732][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 999.054966][T30336] ? check_preemption_disabled+0x48/0x290 [ 999.060675][T30336] ? debug_smp_processor_id+0x1c/0x20 [ 999.066026][T30336] ? perf_trace_lock+0x12f/0x750 [ 999.070941][T30336] ? add_mm_counter_fast.part.0+0x40/0x40 [ 999.076655][T30336] ? add_lock_to_list.isra.0+0x450/0x450 [ 999.082284][T30336] ? __might_fault+0x12b/0x1e0 [ 999.087031][T30336] ? find_held_lock+0x35/0x120 [ 999.091778][T30336] ? __might_fault+0x12b/0x1e0 [ 999.096529][T30336] ? lock_acquire+0x1db/0x570 [ 999.101200][T30336] ? lock_downgrade+0xc40/0xc40 [ 999.106048][T30336] ? lock_release+0xc40/0xc40 [ 999.110718][T30336] _do_fork+0x1a9/0x1170 [ 999.114957][T30336] ? fork_idle+0x1d0/0x1d0 [ 999.119362][T30336] ? kasan_check_read+0x11/0x20 [ 999.124199][T30336] ? _copy_to_user+0xc9/0x120 [ 999.128872][T30336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 999.135116][T30336] ? put_timespec64+0x115/0x1b0 [ 999.139970][T30336] ? nsecs_to_jiffies+0x30/0x30 [ 999.144807][T30336] ? do_syscall_64+0x8c/0x800 [ 999.149480][T30336] ? do_syscall_64+0x8c/0x800 [ 999.154158][T30336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 999.159427][T30336] ? trace_hardirqs_on+0xbd/0x310 [ 999.164448][T30336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 999.170669][T30336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.176709][T30336] ? trace_hardirqs_off_caller+0x300/0x300 [ 999.182512][T30336] __x64_sys_clone+0xbf/0x150 [ 999.187178][T30336] do_syscall_64+0x1a3/0x800 [ 999.191756][T30336] ? syscall_return_slowpath+0x5f0/0x5f0 [ 999.197379][T30336] ? prepare_exit_to_usermode+0x232/0x3b0 [ 999.203095][T30336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 999.208628][T30336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.214506][T30336] RIP: 0033:0x45666a [ 999.218389][T30336] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 999.237978][T30336] RSP: 002b:00007ffdcc805450 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 999.246380][T30336] RAX: ffffffffffffffda RBX: 00007ffdcc805450 RCX: 000000000045666a [ 999.254334][T30336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 999.262301][T30336] RBP: 00007ffdcc805490 R08: 0000000000000001 R09: 00000000016e0940 [ 999.270259][T30336] R10: 00000000016e0c10 R11: 0000000000000246 R12: 0000000000000001 [ 999.278205][T30336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 999.286782][ C0] net_ratelimit: 16 callbacks suppressed [ 999.286794][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 999.298266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 999.305425][T30336] memory: usage 5604kB, limit 0kB, failcnt 197 [ 999.311676][T30336] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 999.319185][T30336] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 999.326732][T30336] Memory cgroup stats for /syz0: cache:36KB rss:100KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:60KB inactive_file:4KB active_file:4KB unevictable:0KB [ 999.347610][T30336] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=30336,uid=0 [ 999.363008][T30336] Memory cgroup out of memory: Kill process 30336 (syz-executor0) score 8986000 or sacrifice child [ 999.374063][T30336] Killed process 30336 (syz-executor0) total-vm:72316kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB [ 999.387237][ T1040] oom_reaper: reaped process 30336 (syz-executor0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 999.471518][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 999.477300][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 999.483170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 999.488915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 999.711387][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 999.717221][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 999.723102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 999.728890][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) fallocate(r0, 0x0, 0x0, 0x100000001) 09:35:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b5000000000800000000080000000000000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x6}, &(0x7f0000000180)=0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:35:21 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 09:35:21 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1f, 0x7}, 'port1\x00', 0x41, 0x400, 0x1000, 0x8, 0x3b, 0x130, 0xffffffff, 0x0, 0x2, 0x8}) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000900)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000800)=""/36, 0x24}], 0x6, &(0x7f00000008c0)=""/3, 0x3, 0x84}, 0x0) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240), 0x31b, 0x0, &(0x7f0000000280)={0x10001}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x3) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 09:35:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x100000000000002, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xe6\xd6\xaa\x00\xc7\xf4\\.\xf3\xd3\xa6\xb0(I\xc4\x85\xcb\xe7\x84\x00\xf2\xc8\xd4\x99\x8bP`-iU\x83\r\x94\xe6l\x87\f\xea1\xc2', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000103) 09:35:21 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1f, 0x7}, 'port1\x00', 0x41, 0x400, 0x1000, 0x8, 0x3b, 0x130, 0xffffffff, 0x0, 0x2, 0x8}) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000900)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000800)=""/36, 0x24}], 0x6, &(0x7f00000008c0)=""/3, 0x3, 0x84}, 0x0) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240), 0x31b, 0x0, &(0x7f0000000280)={0x10001}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x3) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 09:35:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000e8f000)=@proc, 0x4) 09:35:22 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x1f, 0x7}, 'port1\x00', 0x41, 0x400, 0x1000, 0x8, 0x3b, 0x130, 0xffffffff, 0x0, 0x2, 0x8}) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000900)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000800)=""/36, 0x24}], 0x6, &(0x7f00000008c0)=""/3, 0x3, 0x84}, 0x0) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240), 0x31b, 0x0, &(0x7f0000000280)={0x10001}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x3) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 09:35:22 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 09:35:22 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 09:35:22 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 09:35:22 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) [ 1000.783184][ T1188] IPVS: ftp: loaded support on port[0] = 21 [ 1001.062102][ T1188] chnl_net:caif_netlink_parms(): no params data found [ 1001.288134][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.295974][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.304525][ T1188] device bridge_slave_0 entered promiscuous mode [ 1001.521437][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.528494][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.537151][ T1188] device bridge_slave_1 entered promiscuous mode [ 1001.562416][ T1188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1001.768067][ T1188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1001.974672][ T1188] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1001.983196][ T1188] team0: Port device team_slave_0 added [ 1001.989375][ T1188] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1001.997744][ T1188] team0: Port device team_slave_1 added [ 1002.004048][ T1188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1002.013158][ T1188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1002.283672][ T1188] device hsr_slave_0 entered promiscuous mode [ 1002.340266][ T1188] device hsr_slave_1 entered promiscuous mode [ 1002.552650][ T1188] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1002.561498][ T1188] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1002.580114][ T1188] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1002.781965][ T1188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.791538][ T207] device bridge_slave_1 left promiscuous mode [ 1002.797736][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.851308][ T207] device bridge_slave_0 left promiscuous mode [ 1002.857484][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.349105][ C1] net_ratelimit: 22 callbacks suppressed [ 1004.349115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.360669][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.468623][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.474468][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.708357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.714168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.948258][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.954015][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.959953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.965713][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1007.390105][ T207] device hsr_slave_1 left promiscuous mode [ 1007.432095][ T207] device hsr_slave_0 left promiscuous mode [ 1007.475132][ T207] team0 (unregistering): Port device team_slave_1 removed [ 1007.491955][ T207] team0 (unregistering): Port device team_slave_0 removed [ 1007.506987][ T207] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1007.567120][ T207] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1007.659434][ T207] bond0 (unregistering): Released all slaves [ 1007.754277][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1007.766807][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1007.773878][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1007.782261][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1007.793334][ T1188] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1007.800756][ T1188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.811539][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1007.819412][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1007.829926][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1007.839137][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.846178][ T8011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.856339][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1007.865389][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1007.865923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1007.882371][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1007.891869][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.898999][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.902583][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1007.915950][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1007.929118][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1007.938535][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1007.959494][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1007.967365][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1007.975755][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1007.986982][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1007.997733][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1008.017905][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1008.025648][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1008.048541][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1008.085328][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1008.109457][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1008.186323][ T1188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1008.208174][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1008.223621][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1008.253457][ T1188] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1008.270522][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1008.321039][ T1188] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1008.354000][ T1188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.609478][ T1209] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1008.628440][ T1209] CPU: 0 PID: 1209 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 1008.637424][ T1209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.647475][ T1209] Call Trace: [ 1008.650781][ T1209] dump_stack+0x1db/0x2d0 [ 1008.655128][ T1209] ? dump_stack_print_info.cold+0x20/0x20 [ 1008.660873][ T1209] ? check_preemption_disabled+0x48/0x290 [ 1008.666614][ T1209] dump_header+0x1e6/0x11a6 [ 1008.671130][ T1209] ? add_lock_to_list.isra.0+0x450/0x450 [ 1008.676770][ T1209] ? perf_trace_lock+0x750/0x750 [ 1008.681723][ T1209] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1008.687365][ T1209] ? ___ratelimit+0x37c/0x686 [ 1008.692053][ T1209] ? find_held_lock+0x35/0x120 [ 1008.696828][ T1209] ? mark_held_locks+0xa4/0xf0 [ 1008.701638][ T1209] ? lock_acquire+0x1db/0x570 [ 1008.706355][ T1209] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1008.712168][ T1209] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1008.717980][ T1209] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1008.723280][ T1209] ? trace_hardirqs_on+0xbd/0x310 [ 1008.728314][ T1209] ? kasan_check_read+0x11/0x20 [ 1008.733175][ T1209] ? ___ratelimit+0x37c/0x686 [ 1008.737874][ T1209] ? trace_hardirqs_off_caller+0x300/0x300 [ 1008.743688][ T1209] ? do_raw_spin_trylock+0x270/0x270 [ 1008.748982][ T1209] ? trace_hardirqs_on_caller+0x310/0x310 [ 1008.754707][ T1209] ? lock_acquire+0x1db/0x570 [ 1008.759416][ T1209] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1008.765245][ T1209] ? ___ratelimit+0xac/0x686 [ 1008.769860][ T1209] ? idr_get_free+0xee0/0xee0 [ 1008.774555][ T1209] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1008.779879][ T1209] oom_kill_process.cold+0x10/0x9ca [ 1008.785099][ T1209] ? cgroup_procs_next+0x70/0x70 [ 1008.790056][ T1209] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1008.795264][ T1209] ? oom_badness+0xa50/0xa50 [ 1008.799900][ T1209] ? oom_evaluate_task+0x540/0x540 [ 1008.805023][ T1209] ? mem_cgroup_iter_break+0x30/0x30 [ 1008.810316][ T1209] ? mutex_trylock+0x2d0/0x2d0 [ 1008.815145][ T1209] ? cgroup_file_notify+0x217/0x2e0 [ 1008.820370][ T1209] out_of_memory+0x885/0x1420 [ 1008.825057][ T1209] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1008.830888][ T1209] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1008.836709][ T1209] ? oom_killer_disable+0x340/0x340 [ 1008.841926][ T1209] ? preempt_schedule+0x4b/0x60 [ 1008.846801][ T1209] ? ___preempt_schedule+0x16/0x18 [ 1008.851944][ T1209] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1008.857504][ T1209] ? memory_oom_group_write+0x160/0x160 [ 1008.863081][ T1209] memory_max_write+0x1b0/0x3e0 [ 1008.867961][ T1209] ? lock_acquire+0x1db/0x570 [ 1008.872649][ T1209] ? mem_cgroup_write+0x440/0x440 [ 1008.877683][ T1209] ? lock_release+0xc40/0xc40 [ 1008.882370][ T1209] ? add_lock_to_list.isra.0+0x450/0x450 [ 1008.888016][ T1209] ? lock_downgrade+0xc40/0xc40 [ 1008.892897][ T1209] cgroup_file_write+0x252/0x830 [ 1008.897897][ T1209] ? mem_cgroup_write+0x440/0x440 [ 1008.902931][ T1209] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1008.908586][ T1209] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1008.914233][ T1209] kernfs_fop_write+0x2ba/0x480 [ 1008.919101][ T1209] do_iter_write+0x4a5/0x610 [ 1008.923720][ T1209] vfs_writev+0x1ee/0x370 [ 1008.928062][ T1209] ? vfs_iter_write+0xb0/0xb0 [ 1008.932768][ T1209] ? mutex_lock_nested+0x16/0x20 [ 1008.937705][ T1209] ? mutex_lock_nested+0x16/0x20 [ 1008.942648][ T1209] ? __fdget_pos+0xdc/0x1f0 [ 1008.947162][ T1209] ? __fdget_raw+0x20/0x20 [ 1008.951585][ T1209] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1008.957826][ T1209] ? put_timespec64+0x115/0x1b0 [ 1008.962734][ T1209] do_writev+0x11a/0x300 [ 1008.966992][ T1209] ? vfs_writev+0x370/0x370 [ 1008.971506][ T1209] ? trace_hardirqs_off_caller+0x300/0x300 [ 1008.977320][ T1209] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1008.983571][ T1209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1008.989042][ T1209] __x64_sys_writev+0x75/0xb0 [ 1008.993742][ T1209] do_syscall_64+0x1a3/0x800 [ 1008.998344][ T1209] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1009.003989][ T1209] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1009.009737][ T1209] ? __switch_to_asm+0x34/0x70 [ 1009.014518][ T1209] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1009.020081][ T1209] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.025979][ T1209] RIP: 0033:0x458099 [ 1009.029895][ T1209] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.049506][ T1209] RSP: 002b:00007fb548d58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1009.057960][ T1209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 1009.065941][ T1209] RDX: 1000000000000103 RSI: 0000000020000700 RDI: 0000000000000005 [ 1009.073920][ T1209] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1009.081903][ T1209] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb548d596d4 [ 1009.089908][ T1209] R13: 00000000004c4b1c R14: 00000000004dcf58 R15: 00000000ffffffff [ 1009.116837][ T1209] memory: usage 9628kB, limit 0kB, failcnt 200 [ 1009.123115][ T1209] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1009.139611][ T1209] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1009.149092][ T1209] Memory cgroup stats for /syz0: cache:36KB rss:4276KB rss_huge:4096KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4300KB inactive_file:4KB active_file:4KB unevictable:0KB [ 1009.170562][ T1209] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=1206,uid=0 [ 1009.186156][ T1209] Memory cgroup out of memory: Kill process 1206 (syz-executor0) score 9493000 or sacrifice child [ 1009.198232][ T1209] Killed process 1208 (syz-executor0) total-vm:72452kB, anon-rss:2180kB, file-rss:34816kB, shmem-rss:0kB [ 1009.256373][ T1209] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1009.276010][ T1209] CPU: 0 PID: 1209 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 1009.284965][ T1209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.295014][ T1209] Call Trace: [ 1009.298320][ T1209] dump_stack+0x1db/0x2d0 [ 1009.302658][ T1209] ? dump_stack_print_info.cold+0x20/0x20 [ 1009.308395][ T1209] ? check_preemption_disabled+0x48/0x290 [ 1009.314139][ T1209] dump_header+0x1e6/0x11a6 [ 1009.318687][ T1209] ? add_lock_to_list.isra.0+0x450/0x450 [ 1009.324317][ T1209] ? perf_trace_lock+0x750/0x750 [ 1009.329279][ T1209] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1009.334914][ T1209] ? ___ratelimit+0x37c/0x686 [ 1009.339604][ T1209] ? find_held_lock+0x35/0x120 [ 1009.344419][ T1209] ? mark_held_locks+0xa4/0xf0 [ 1009.349189][ T1209] ? lock_acquire+0x1db/0x570 [ 1009.353893][ T1209] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1009.359699][ T1209] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1009.365500][ T1209] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1009.370799][ T1209] ? trace_hardirqs_on+0xbd/0x310 [ 1009.375876][ T1209] ? kasan_check_read+0x11/0x20 [ 1009.380721][ T1209] ? ___ratelimit+0x37c/0x686 [ 1009.385397][ T1209] ? trace_hardirqs_off_caller+0x300/0x300 [ 1009.391210][ T1209] ? do_raw_spin_trylock+0x270/0x270 [ 1009.396493][ T1209] ? trace_hardirqs_on_caller+0x310/0x310 [ 1009.402219][ T1209] ? lock_acquire+0x1db/0x570 [ 1009.406914][ T1209] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1009.412718][ T1209] ? ___ratelimit+0xac/0x686 [ 1009.417311][ T1209] ? idr_get_free+0xee0/0xee0 [ 1009.422002][ T1209] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1009.427314][ T1209] oom_kill_process.cold+0x10/0x9ca [ 1009.432514][ T1209] ? cgroup_procs_next+0x70/0x70 [ 1009.437455][ T1209] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1009.442651][ T1209] ? oom_badness+0xa50/0xa50 [ 1009.447251][ T1209] ? oom_evaluate_task+0x540/0x540 [ 1009.452381][ T1209] ? mem_cgroup_iter_break+0x30/0x30 [ 1009.457665][ T1209] ? mutex_trylock+0x2d0/0x2d0 [ 1009.462451][ T1209] ? cgroup_file_notify+0x217/0x2e0 [ 1009.467658][ T1209] out_of_memory+0x885/0x1420 [ 1009.472347][ T1209] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1009.478177][ T1209] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1009.483989][ T1209] ? oom_killer_disable+0x340/0x340 [ 1009.489204][ T1209] ? preempt_schedule+0x4b/0x60 [ 1009.494077][ T1209] ? ___preempt_schedule+0x16/0x18 [ 1009.499208][ T1209] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1009.504766][ T1209] ? memory_oom_group_write+0x160/0x160 [ 1009.510339][ T1209] memory_max_write+0x1b0/0x3e0 [ 1009.515190][ T1209] ? lock_acquire+0x1db/0x570 [ 1009.519887][ T1209] ? mem_cgroup_write+0x440/0x440 [ 1009.524912][ T1209] ? lock_release+0xc40/0xc40 [ 1009.529601][ T1209] ? add_lock_to_list.isra.0+0x450/0x450 [ 1009.535249][ T1209] ? lock_downgrade+0xc40/0xc40 [ 1009.540112][ T1209] cgroup_file_write+0x252/0x830 [ 1009.545064][ T1209] ? mem_cgroup_write+0x440/0x440 [ 1009.550110][ T1209] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1009.555759][ T1209] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 1009.561395][ T1209] kernfs_fop_write+0x2ba/0x480 [ 1009.566272][ T1209] do_iter_write+0x4a5/0x610 [ 1009.570896][ T1209] vfs_writev+0x1ee/0x370 [ 1009.575267][ T1209] ? vfs_iter_write+0xb0/0xb0 [ 1009.579993][ T1209] ? mutex_lock_nested+0x16/0x20 [ 1009.584935][ T1209] ? mutex_lock_nested+0x16/0x20 [ 1009.589890][ T1209] ? __fdget_pos+0xdc/0x1f0 [ 1009.594398][ T1209] ? __fdget_raw+0x20/0x20 [ 1009.598823][ T1209] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1009.605080][ T1209] ? put_timespec64+0x115/0x1b0 [ 1009.609942][ T1209] do_writev+0x11a/0x300 [ 1009.614208][ T1209] ? vfs_writev+0x370/0x370 [ 1009.618725][ T1209] ? trace_hardirqs_off_caller+0x300/0x300 [ 1009.624529][ T1209] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1009.630781][ T1209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1009.636254][ T1209] __x64_sys_writev+0x75/0xb0 [ 1009.640947][ T1209] do_syscall_64+0x1a3/0x800 [ 1009.645588][ T1209] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1009.651230][ T1209] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1009.656958][ T1209] ? __switch_to_asm+0x34/0x70 [ 1009.661732][ T1209] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1009.667297][ T1209] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.673202][ T1209] RIP: 0033:0x458099 [ 1009.677136][ T1209] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.696754][ T1209] RSP: 002b:00007fb548d58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1009.705173][ T1209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 1009.713172][ T1209] RDX: 1000000000000103 RSI: 0000000020000700 RDI: 0000000000000005 [ 1009.721162][ T1209] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1009.729140][ T1209] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb548d596d4 [ 1009.737123][ T1209] R13: 00000000004c4b1c R14: 00000000004dcf58 R15: 00000000ffffffff [ 1009.746972][ C0] net_ratelimit: 20 callbacks suppressed [ 1009.746982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.758480][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.813202][ T1209] memory: usage 7356kB, limit 0kB, failcnt 200 [ 1009.844226][ T1209] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1009.852270][ T1209] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1009.866338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.870527][ T1209] Memory cgroup stats for /syz0: cache:36KB rss:2188KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2180KB inactive_file:4KB active_file:4KB unevictable:0KB [ 1009.872142][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.900642][ T1209] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=1206,uid=0 [ 1009.925592][ T1209] Memory cgroup out of memory: Kill process 1206 (syz-executor0) score 9493000 or sacrifice child [ 1009.944626][ T1209] Killed process 1209 (syz-executor0) total-vm:72584kB, anon-rss:2188kB, file-rss:35824kB, shmem-rss:0kB 09:35:32 executing program 0: perf_event_open(&(0x7f0000000140)={0x100000000000002, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xe6\xd6\xaa\x00\xc7\xf4\\.\xf3\xd3\xa6\xb0(I\xc4\x85\xcb\xe7\x84\x00\xf2\xc8\xd4\x99\x8bP`-iU\x83\r\x94\xe6l\x87\f\xea1\xc2', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000103) 09:35:32 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 09:35:32 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 09:35:32 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 09:35:32 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) [ 1009.965596][ T1040] oom_reaper: reaped process 1209 (syz-executor0), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB 09:35:32 executing program 1: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x0, 0x0) ioctl(r0, 0x0, 0x0) setpriority(0x0, r1, 0x10000) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) getegid() lstat(0x0, &(0x7f00000007c0)) getgid() ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000680)={{{@in, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) ioprio_set$pid(0x0, r1, 0x0) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000780)=@v2={0x2000000, [{0xe24, 0xffff}]}, 0x14, 0x1) pivot_root(0x0, &(0x7f0000000580)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1010.039972][ T1188] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1010.111875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.118979][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1010.126537][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.132940][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1010.141108][ T1188] CPU: 1 PID: 1188 Comm: syz-executor0 Not tainted 5.0.0-rc3-next-20190122 #17 [ 1010.150059][ T1188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.160116][ T1188] Call Trace: [ 1010.163477][ T1188] dump_stack+0x1db/0x2d0 [ 1010.167825][ T1188] ? dump_stack_print_info.cold+0x20/0x20 [ 1010.173570][ T1188] ? perf_trace_lock+0x12f/0x750 [ 1010.178520][ T1188] dump_header+0x1e6/0x11a6 [ 1010.183042][ T1188] ? add_lock_to_list.isra.0+0x450/0x450 [ 1010.188686][ T1188] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 1010.194337][ T1188] ? ___ratelimit+0x37c/0x686 [ 1010.199027][ T1188] ? find_held_lock+0x35/0x120 [ 1010.203828][ T1188] ? mark_held_locks+0xa4/0xf0 [ 1010.208610][ T1188] ? lock_acquire+0x1db/0x570 [ 1010.213299][ T1188] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1010.219117][ T1188] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1010.224949][ T1188] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1010.230238][ T1188] ? trace_hardirqs_on+0xbd/0x310 [ 1010.235266][ T1188] ? kasan_check_read+0x11/0x20 [ 1010.240121][ T1188] ? ___ratelimit+0x37c/0x686 [ 1010.244817][ T1188] ? trace_hardirqs_off_caller+0x300/0x300 [ 1010.250665][ T1188] ? do_raw_spin_trylock+0x270/0x270 [ 1010.255953][ T1188] ? trace_hardirqs_on_caller+0x310/0x310 [ 1010.261671][ T1188] ? lock_acquire+0x1db/0x570 [ 1010.266373][ T1188] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1010.272200][ T1188] ? ___ratelimit+0xac/0x686 [ 1010.276793][ T1188] ? idr_get_free+0xee0/0xee0 [ 1010.281493][ T1188] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1010.286797][ T1188] oom_kill_process.cold+0x10/0x9ca [ 1010.292001][ T1188] ? cgroup_procs_next+0x70/0x70 [ 1010.296950][ T1188] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1010.302147][ T1188] ? oom_badness+0xa50/0xa50 [ 1010.306745][ T1188] ? oom_evaluate_task+0x540/0x540 [ 1010.311867][ T1188] ? mem_cgroup_iter_break+0x30/0x30 [ 1010.317157][ T1188] ? mutex_trylock+0x2d0/0x2d0 [ 1010.321939][ T1188] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1010.328202][ T1188] ? rcu_read_unlock_special+0x380/0x380 [ 1010.333847][ T1188] out_of_memory+0x885/0x1420 [ 1010.338551][ T1188] ? oom_killer_disable+0x340/0x340 [ 1010.343784][ T1188] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1010.349595][ T1188] ? lock_acquire+0x1db/0x570 [ 1010.354288][ T1188] mem_cgroup_out_of_memory+0x21a/0x2a0 [ 1010.359864][ T1188] ? do_raw_spin_unlock+0xa0/0x330 [ 1010.364987][ T1188] ? memory_oom_group_write+0x160/0x160 [ 1010.370531][ T1188] ? do_raw_spin_trylock+0x270/0x270 [ 1010.376094][ T1188] ? _raw_spin_unlock+0x2d/0x50 [ 1010.380957][ T1188] try_charge+0x1407/0x1d30 [ 1010.385469][ T1188] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1010.391727][ T1188] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1010.397291][ T1188] ? rcu_read_unlock_special+0x380/0x380 [ 1010.402943][ T1188] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 1010.408508][ T1188] ? get_mem_cgroup_from_page+0x190/0x190 [ 1010.414259][ T1188] ? rcu_read_lock_sched_held+0x110/0x130 [ 1010.419994][ T1188] mem_cgroup_try_charge+0x43a/0xdb0 [ 1010.425288][ T1188] ? mem_cgroup_protected+0xa10/0xa10 [ 1010.430675][ T1188] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1010.436920][ T1188] ? check_preemption_disabled+0x48/0x290 [ 1010.442649][ T1188] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1010.448902][ T1188] ? check_preemption_disabled+0x48/0x290 [ 1010.454654][ T1188] ? debug_smp_processor_id+0x1c/0x20 [ 1010.460042][ T1188] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1010.466287][ T1188] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1010.472538][ T1188] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1010.478175][ T1188] wp_page_copy+0x45a/0x1c70 [ 1010.482764][ T1188] ? swp_swapcount+0x540/0x540 [ 1010.487525][ T1188] ? __lock_acquire+0x572/0x4a10 [ 1010.492473][ T1188] ? pmd_pfn+0x1d0/0x1d0 [ 1010.496713][ T1188] ? find_held_lock+0x35/0x120 [ 1010.501472][ T1188] ? do_wp_page+0x74e/0x1cc0 [ 1010.506093][ T1188] ? kasan_check_read+0x11/0x20 [ 1010.511435][ T1188] ? do_raw_spin_unlock+0xa0/0x330 [ 1010.516562][ T1188] ? do_raw_spin_trylock+0x270/0x270 [ 1010.521872][ T1188] ? print_usage_bug+0xd0/0xd0 [ 1010.526674][ T1188] do_wp_page+0x756/0x1cc0 [ 1010.531109][ T1188] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1010.536504][ T1188] ? kernel_text_address+0x73/0xf0 [ 1010.541629][ T1188] ? lock_acquire+0x1db/0x570 [ 1010.546311][ T1188] ? __handle_mm_fault+0x1dac/0x5610 [ 1010.551606][ T1188] ? kasan_check_write+0x14/0x20 [ 1010.556544][ T1188] ? do_raw_spin_lock+0x156/0x360 09:35:32 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) [ 1010.561580][ T1188] ? lock_release+0xc40/0xc40 [ 1010.566260][ T1188] ? rwlock_bug.part.0+0x90/0x90 [ 1010.571207][ T1188] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 1010.577023][ T1188] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1010.582768][ T1188] __handle_mm_fault+0x2d06/0x5610 [ 1010.587927][ T1188] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1010.593478][ T1188] ? check_preemption_disabled+0x48/0x290 [ 1010.599208][ T1188] ? handle_mm_fault+0x3cc/0xc80 [ 1010.604208][ T1188] ? lock_downgrade+0xc40/0xc40 [ 1010.609060][ T1188] ? kasan_check_read+0x11/0x20 [ 1010.613913][ T1188] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1010.619886][ T1188] ? rcu_read_unlock_special+0x380/0x380 [ 1010.625504][ T1188] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1010.631728][ T1188] ? check_preemption_disabled+0x48/0x290 [ 1010.637437][ T1188] handle_mm_fault+0x4ec/0xc80 [ 1010.642188][ T1188] ? __handle_mm_fault+0x5610/0x5610 [ 1010.647463][ T1188] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1010.653696][ T1188] ? vmacache_update+0x114/0x140 [ 1010.658622][ T1188] __do_page_fault+0x5ef/0xda0 [ 1010.663395][ T1188] do_page_fault+0xe6/0x7d8 [ 1010.667928][ T1188] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1010.673559][ T1188] ? vmalloc_sync_all+0x30/0x30 [ 1010.678417][ T1188] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1010.684550][ T1188] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1010.690166][ T1188] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1010.696404][ T1188] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1010.702131][ T1188] ? page_fault+0x8/0x30 [ 1010.706375][ T1188] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1010.711903][ T1188] ? page_fault+0x8/0x30 [ 1010.716126][ T1188] page_fault+0x1e/0x30 [ 1010.720262][ T1188] RIP: 0033:0x42f226 [ 1010.724149][ T1188] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 1010.743757][ T1188] RSP: 002b:00007ffeca2b8530 EFLAGS: 00010206 [ 1010.749813][ T1188] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 09:35:32 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 09:35:32 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) [ 1010.757796][ T1188] RDX: 0000000001b67930 RSI: 0000000001b6f970 RDI: 0000000000000003 [ 1010.765769][ T1188] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001b66940 [ 1010.773768][ T1188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 1010.781750][ T1188] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 1010.791413][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.797297][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1010.807092][ T1188] memory: usage 4984kB, limit 0kB, failcnt 208 09:35:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/104, 0x68, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4) setns(0xffffffffffffffff, 0x8000000) inotify_rm_watch(0xffffffffffffffff, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x7, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001080}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003000000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0xfffffffffffffe39) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc}) r2 = semget(0x0, 0x0, 0x285) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x5]) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x00\xff', 0x4bfd}) [ 1010.822847][ T1188] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1010.891955][ T1188] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1010.949307][ T1188] Memory cgroup stats for /syz0: cache:36KB rss:72KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:4KB active_file:4KB unevictable:0KB 09:35:33 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x80046108, &(0x7f0000000300)) [ 1010.995818][ T1188] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=1188,uid=0 [ 1011.105985][ T1188] Memory cgroup out of memory: Kill process 1188 (syz-executor0) score 8756000 or sacrifice child [ 1011.168281][ T1188] Killed process 1188 (syz-executor0) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 1011.173925][ T1235] IPVS: ftp: loaded support on port[0] = 21 [ 1011.239995][ T1233] device team0 entered promiscuous mode 09:35:33 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) [ 1011.290072][ T1233] device team_slave_0 entered promiscuous mode [ 1011.310571][ T1233] device team_slave_1 entered promiscuous mode [ 1012.247440][ T1238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.842887][ T1255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.943348][ C0] net_ratelimit: 20 callbacks suppressed [ 1015.943359][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1015.954920][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1016.343109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.349012][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1016.354974][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.360758][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1018.022319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1018.028181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1018.422079][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1018.427979][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 09:35:43 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x200000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000900)=""/4096) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) close(r2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 09:35:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/104, 0x68, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4) setns(0xffffffffffffffff, 0x8000000) inotify_rm_watch(0xffffffffffffffff, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x7, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001080}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003000000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0xfffffffffffffe39) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc}) r2 = semget(0x0, 0x0, 0x285) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x5]) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x00\xff', 0x4bfd}) 09:35:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffff1, 0x40) 09:35:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/104, 0x68, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4) setns(0xffffffffffffffff, 0x8000000) inotify_rm_watch(0xffffffffffffffff, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x7, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001080}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003000000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0xfffffffffffffe39) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc}) r2 = semget(0x0, 0x0, 0x285) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x5]) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x00\xff', 0x4bfd}) [ 1021.515090][ T1261] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 09:35:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffff1, 0x40) [ 1022.190154][ C0] net_ratelimit: 14 callbacks suppressed [ 1022.190164][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.201752][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffff1, 0x40) [ 1022.590006][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.595924][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.601840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.607659][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffff1, 0x40) [ 1023.075998][ T1264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.117040][ T1274] IPVS: ftp: loaded support on port[0] = 21 [ 1023.377513][ T1274] chnl_net:caif_netlink_parms(): no params data found [ 1023.459302][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.468535][ T1274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.482279][ T1274] device bridge_slave_0 entered promiscuous mode [ 1023.493425][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.503374][ T1274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.514185][ T1274] device bridge_slave_1 entered promiscuous mode [ 1023.548632][ T1274] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1023.565522][ T1274] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1023.595503][ T1274] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1023.608182][ T1274] team0: Port device team_slave_0 added [ 1023.616046][ T1274] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1023.627893][ T1274] team0: Port device team_slave_1 added [ 1023.635564][ T1274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1023.647820][ T1274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1023.995220][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.001054][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.006823][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.012652][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.053682][ T1274] device hsr_slave_0 entered promiscuous mode [ 1024.109588][ T1274] device hsr_slave_1 entered promiscuous mode [ 1024.149792][ T1274] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1024.158265][ T1274] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1024.186197][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.193261][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.200685][ T1274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.207844][ T1274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.257250][ T1274] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1024.264556][ T1274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.274954][ T1274] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1024.286496][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1024.296686][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.318881][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.341527][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 09:35:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 09:35:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffff1, 0x40) 09:35:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/104, 0x68, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4) setns(0xffffffffffffffff, 0x8000000) inotify_rm_watch(0xffffffffffffffff, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x7, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001080}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003000000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0xfffffffffffffe39) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc}) r2 = semget(0x0, 0x0, 0x285) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x5]) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x00\xff', 0x4bfd}) 09:35:46 executing program 1: semtimedop(0x0, 0x0, 0x0, 0xffffffffffffffff) 09:35:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffff1, 0x40) [ 1024.366223][ T1274] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1024.403769][ T1274] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.471071][ T1274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1024.488331][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1024.502982][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 09:35:46 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) [ 1024.595559][ T1298] IPVS: ftp: loaded support on port[0] = 21 09:35:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) [ 1024.659814][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.666897][ T8026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.678493][ T1274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1025.002011][ T1306] IPVS: ftp: loaded support on port[0] = 21 [ 1025.027000][ T1308] IPVS: ftp: loaded support on port[0] = 21 09:35:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffff1, 0x40) [ 1026.335908][ T1284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.357418][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1026.374474][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1026.392690][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.399869][ T8026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.414714][ T1274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1026.505170][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1026.566870][ T1274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1026.628813][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1026.971238][ T1274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1027.053938][ T1274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1027.227621][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1027.238402][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1027.248275][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1027.339229][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1027.349307][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1027.731509][ T1274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1027.830367][ T1274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1027.918749][ T1274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1028.008383][ T1274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1028.068748][ T1274] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1028.097202][ C1] net_ratelimit: 20 callbacks suppressed [ 1028.097210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1028.108665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1028.114530][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1028.120347][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1028.126174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1028.131997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1028.239187][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1028.270314][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1028.298523][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1028.308048][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1028.347389][ T207] device bridge_slave_1 left promiscuous mode [ 1028.357439][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.407067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1028.412983][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1028.427060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1028.432836][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1028.488277][ T207] device bridge_slave_0 left promiscuous mode [ 1028.494555][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.622870][ T207] device hsr_slave_1 left promiscuous mode [ 1028.691220][ T207] device hsr_slave_0 left promiscuous mode [ 1028.740894][ T207] team0 (unregistering): Port device team_slave_1 removed [ 1028.759449][ T207] team0 (unregistering): Port device team_slave_0 removed [ 1028.773202][ T207] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1028.804768][ T207] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1028.911467][ T207] bond0 (unregistering): Released all slaves [ 1029.022738][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1029.164661][ T1274] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1029.195414][ T1274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.429549][ T1314] device team0 entered promiscuous mode [ 1029.436314][ T1314] device team_slave_0 entered promiscuous mode [ 1029.453979][ T1314] device team_slave_1 entered promiscuous mode [ 1029.650051][ T1316] 8021q: adding VLAN 0 to HW filter on device team0 09:35:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/104, 0x68, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4) setns(0xffffffffffffffff, 0x8000000) inotify_rm_watch(0xffffffffffffffff, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x7, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001080}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003000000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0xfffffffffffffe39) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc}) r2 = semget(0x0, 0x0, 0x285) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x5]) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x00\xff', 0x4bfd}) 09:35:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 09:35:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 09:35:51 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 09:35:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/104, 0x68, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4) setns(0xffffffffffffffff, 0x8000000) inotify_rm_watch(0xffffffffffffffff, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x7, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001080}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003000000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0xfffffffffffffe39) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc}) r2 = semget(0x0, 0x0, 0x285) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x5]) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x00\xff', 0x4bfd}) 09:35:51 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) [ 1030.102446][ T1335] IPVS: ftp: loaded support on port[0] = 21 [ 1030.218996][ T1340] IPVS: ftp: loaded support on port[0] = 21 [ 1030.240443][ T1333] IPVS: ftp: loaded support on port[0] = 21 09:35:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 09:35:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 09:35:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/104, 0x68, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4) setns(0xffffffffffffffff, 0x8000000) inotify_rm_watch(0xffffffffffffffff, r1) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x7, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001080}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000003000000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0xfffffffffffffe39) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc}) r2 = semget(0x0, 0x0, 0x285) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x5]) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x00\xff', 0x4bfd}) [ 1031.719420][ T1336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.750840][ T1339] 8021q: adding VLAN 0 to HW filter on device team0 09:35:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x7ffffffff000, 0x2, 0x90, [], 0x2, 0x0, &(0x7f0000000240)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x108) [ 1032.243402][ T1357] kernel msg: ebtables bug: please report to author: No valid hooks specified 09:35:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) [ 1033.396529][ T1355] 8021q: adding VLAN 0 to HW filter on device team0 09:35:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x7ffffffff000, 0x2, 0x90, [], 0x2, 0x0, &(0x7f0000000240)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x108) 09:35:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100006e", 0x24) [ 1034.111939][ T1364] kernel msg: ebtables bug: please report to author: No valid hooks specified [ 1034.138994][ T1366] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 1034.198247][ T1367] netlink: 'syz-executor0': attribute type 27 has an invalid length. 09:35:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x7ffffffff000, 0x2, 0x90, [], 0x2, 0x0, &(0x7f0000000240)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x108) [ 1034.414880][ C1] net_ratelimit: 34 callbacks suppressed [ 1034.415040][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.427869][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1034.434087][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.442030][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:35:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 09:35:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 09:35:56 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40000000, 0x0) write$nbd(r1, &(0x7f0000000600)={0x67446698, 0x0, 0x4, 0x3, 0x3, "e85df6c8580b8a5bfc1581ab40a125d2423de494e8dc3e6a92bfb151de24d920bece88348dcc187bb55e676f3840b4d6bc7e88c31699656508987b000880defc8d8ecaf6ec240b9714edd9c3da83a6ac377f871ca128cbd39f9a80b277af91b7b3"}, 0x71) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0xfffffffffffffffd, 0x7f0d5dd6, 0xfffffffffffffc78}]}) syz_genetlink_get_family_id$team(&(0x7f0000000480)='team\x00') recvmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000980)=@can, 0x80, &(0x7f0000000bc0)=[{0x0}, {0x0}, {&(0x7f0000000b00)=""/90, 0x5a}, {0x0}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x5, &(0x7f0000000c40)=""/196, 0xc4, 0xcb2}, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000002a40)) sendmsg$nl_crypto(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x409500}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@upd={0x108, 0x12, 0x0, 0x70bd2b, 0x25dfdbff, {{'drbg_nopr_hmac_sha256\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x8}, {0x8}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6d4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) 09:35:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") sendto$inet6(r0, &(0x7f00000001c0)="050300000100baffffffffff810049faf22c", 0x12, 0x0, 0x0, 0x0) [ 1034.616545][ T1371] kernel msg: ebtables bug: please report to author: No valid hooks specified [ 1034.653938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.659781][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:35:56 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}}) 09:35:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x7ffffffff000, 0x2, 0x90, [], 0x2, 0x0, &(0x7f0000000240)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x108) [ 1034.869557][ T1382] IPVS: ftp: loaded support on port[0] = 21 [ 1034.930804][ T1384] batman_adv: batadv0: adding TT local entry ba:ff:ff:ff:ff:ff to non-existent VLAN 2554 [ 1034.972791][ T1388] IPVS: ftp: loaded support on port[0] = 21 [ 1034.978986][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.979054][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.043346][ T1383] IPVS: ftp: loaded support on port[0] = 21 [ 1035.054179][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.361841][ T1395] kernel msg: ebtables bug: please report to author: No valid hooks specified 09:35:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") sendto$inet6(r0, &(0x7f00000001c0)="050300000100baffffffffff810049faf22c", 0x12, 0x0, 0x0, 0x0) 09:35:57 executing program 5: r0 = syz_open_dev$adsp(0x0, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x6}) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") write(r4, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10) 09:35:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") sendto$inet6(r0, &(0x7f00000001c0)="050300000100baffffffffff810049faf22c", 0x12, 0x0, 0x0, 0x0) 09:35:58 executing program 2: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 09:35:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000007000002800000850000000000000095"], 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="d7dbb23bab31f7d84ff4dfb4c7fc", 0x0}, 0x28) 09:35:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") sendto$inet6(r0, &(0x7f00000001c0)="050300000100baffffffffff810049faf22c", 0x12, 0x0, 0x0, 0x0) 09:35:58 executing program 5: r0 = syz_open_dev$adsp(0x0, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x6}) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") write(r4, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10) 09:35:58 executing program 1: r0 = syz_open_dev$adsp(0x0, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x6}) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") write(r4, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10) 09:35:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f7fe8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:35:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x84}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 09:35:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:35:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) getpid() acct(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @multicast1}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:35:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") socketpair(0x8000000000001e, 0x2000000000000005, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000805000), 0xfe55) read(r2, &(0x7f0000000400)=""/253, 0x29) 09:35:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) getpid() acct(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @multicast1}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:35:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) getpid() acct(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @multicast1}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:35:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000004c00)={0xe, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0xa7}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x48) 09:35:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x3}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r3, &(0x7f0000481000)=""/128, 0x80) 09:35:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) getpid() acct(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @multicast1}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:35:59 executing program 5: r0 = syz_open_dev$adsp(0x0, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x6}) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") write(r4, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10) 09:35:59 executing program 1: r0 = syz_open_dev$adsp(0x0, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x6}) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") write(r4, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10) 09:35:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) getpid() acct(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @multicast1}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:35:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="1b0000001a0025f00485bc04fef7001d0a0b48ff2265cea2037ea0", 0x1b) 09:35:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) getpid() acct(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @multicast1}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:35:59 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 09:35:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) getpid() acct(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @multicast1}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:35:59 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000180)='net/ip6_mr_vif\x00', 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54", 0x48) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000080)) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={0x0, 0xfffffffffffffff7}, 0x8) r2 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, 0x0) dup(0xffffffffffffffff) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) 09:35:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:36:00 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x20400003, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x7, 0x5) clone(0x20000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r1, 0x127f, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0xffffffffffffffa6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) memfd_create(&(0x7f0000000080)='vW\x87\xe1\xb1\x18\xfb\x00\x00\x00', 0x0) r6 = openat(0xffffffffffffffff, 0x0, 0x101000, 0x80) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f0000000480), &(0x7f0000000100)=0x60) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) r8 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x41007701, &(0x7f0000000080)='\x00') syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0xfffffffffffffff7, 0x4040) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB="c5000000977f3c2a8dbbcd7372b700a306b83e52abb789c74d2ce20a396bbb6a8f8d1de16c85b53cd4847f2850577a05bf542ee6c96104839e5158827b63f558962faa7afd5dd82b6ec31c277a11ed3c85e53de6d0aeda3d565a915694969f18974978b4462d96f9822c70dd2fccbe80f9cf9f043278693984d9d43212aaff6e50c1993dca8454d79f80eeed50d40bc35f265e59b2926ecd9fd1bcd660a965ad21ca64d681c995e912aa257e285181d09524b7f5d858c4bd29488413fc411c711c9dc3a367e8"], 0x0) 09:36:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:36:00 executing program 5: r0 = syz_open_dev$adsp(0x0, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x6}) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") write(r4, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10) 09:36:00 executing program 1: r0 = syz_open_dev$adsp(0x0, 0x7, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x6}) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") write(r4, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10) 09:36:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:36:00 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000180)='net/ip6_mr_vif\x00', 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54", 0x48) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000080)) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={0x0, 0xfffffffffffffff7}, 0x8) r2 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, 0x0) dup(0xffffffffffffffff) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) 09:36:01 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180)='syz', 0xfffffffffffffffa) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001100)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, 0x0) r4 = getgid() lchown(&(0x7f0000000080)='./file0\x00', r3, r4) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x400000, 0x0) fchdir(0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)=0x2, 0x4) openat(r2, &(0x7f0000000480)='./file2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x7ff, 0x138, 0x0, 0x0, 0x10000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0xba, 0xfffffffffffffffe, 0x0, 0xdac6, 0x6, 0x0, 0x1ff, 0x0, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9c2, 0x0, @perf_bp={0x0}, 0x20048, 0x0, 0x0, 0x0, 0x73}, 0x0, 0x0, 0xffffffffffffffff, 0x9) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000280)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000540)={0x0, @loopback, @broadcast}, 0x0) getsockname$packet(r2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000640)) recvmmsg(r2, &(0x7f0000006540)=[{{&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/107, 0x6b}], 0x1, &(0x7f0000000980)=""/145, 0x91}}, {{&(0x7f0000000a40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/164, 0xa4}], 0x3, &(0x7f0000000c40)=""/166, 0xa6}, 0x9}, {{&(0x7f0000000d00)=@rc, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/248, 0xf8}, {&(0x7f0000000e80)=""/243, 0xf3}], 0x2}, 0x4}, {{&(0x7f0000001080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000001600)=""/37, 0x25}, 0x100000001}, {{&(0x7f0000002e40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000002fc0)}}, {{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003080)=""/70, 0x46}], 0x1, &(0x7f00000031c0)=""/237, 0xed}, 0x2}], 0x6, 0x20, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000006940)) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000006980)={'team0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000006c40), &(0x7f0000006c80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000007000)={{{@in=@loopback, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000007100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f000000e900)={'vcan0\x00'}) accept4$packet(r1, &(0x7f000000e9c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000ea00)=0x14, 0x800) 09:36:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 09:36:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000200)=@ethtool_dump={0x23}}) 09:36:02 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000180)='net/ip6_mr_vif\x00', 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54", 0x48) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000080)) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={0x0, 0xfffffffffffffff7}, 0x8) r2 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, 0x0) dup(0xffffffffffffffff) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) 09:36:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:36:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x2, 0x40030000000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x6558, r1, 0x93e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) 09:36:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-des3_ede-asm,crc32c-intel(\x00'}, 0x58) 09:36:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCSETSF(r1, 0x5437, 0x0) 09:36:02 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 09:36:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 1040.834557][ T1538] IPVS: ftp: loaded support on port[0] = 21 [ 1040.899210][ T1542] IPVS: ftp: loaded support on port[0] = 21 09:36:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000180)='net/ip6_mr_vif\x00', 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(r1, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54", 0x48) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000080)) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={0x0, 0xfffffffffffffff7}, 0x8) r2 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, 0x0) dup(0xffffffffffffffff) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) 09:36:03 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 09:36:03 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 09:36:03 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 09:36:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 09:36:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe(0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) socketpair$unix(0x1, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000480), 0x800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0xfffffffffffff5ef}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYBLOB="fe0f0000"], 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$setopts(0x4205, r3, 0x800000000002, 0xa07200) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7ff, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000240)) chdir(&(0x7f0000000180)='./file0\x00') r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00', 0x2}, 0x11) ioctl$TCGETS(r5, 0x5401, &(0x7f00000003c0)) 09:36:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 1043.403489][ T1542] chnl_net:caif_netlink_parms(): no params data found [ 1043.686932][ T1538] chnl_net:caif_netlink_parms(): no params data found [ 1043.698099][ T1542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.705989][ T1542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.714581][ T1542] device bridge_slave_0 entered promiscuous mode [ 1043.723209][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.723239][ T1542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.738683][ T1542] device bridge_slave_1 entered promiscuous mode [ 1043.980070][ T1538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.987215][ T1538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.995963][ T1538] device bridge_slave_0 entered promiscuous mode [ 1044.004341][ T1538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.014632][ T1538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.022923][ T1538] device bridge_slave_1 entered promiscuous mode [ 1044.032844][ T1542] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1044.062624][ T1538] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1044.076573][ T1542] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1044.305064][ T1538] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1044.326687][ T1542] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1044.335432][ T1542] team0: Port device team_slave_0 added [ 1044.573244][ T1542] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1044.581584][ T1542] team0: Port device team_slave_1 added [ 1044.596366][ T1542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1044.607471][ T1538] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1044.616404][ T1538] team0: Port device team_slave_0 added [ 1044.623368][ T1538] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1044.631737][ T1538] team0: Port device team_slave_1 added [ 1044.638064][ T1542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1044.646424][ T1538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1044.654828][ T1538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1044.961250][ T1542] device hsr_slave_0 entered promiscuous mode [ 1044.999352][ T1542] device hsr_slave_1 entered promiscuous mode [ 1045.049309][ T1542] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1045.090591][ T1538] device hsr_slave_0 entered promiscuous mode [ 1045.129006][ T1538] device hsr_slave_1 entered promiscuous mode [ 1045.179235][ T1538] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1045.187009][ T1538] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1045.195027][ T1542] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1045.424651][ T1542] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1045.434838][ T1538] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1045.457656][ T207] device bridge_slave_1 left promiscuous mode [ 1045.464407][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.519613][ T207] device bridge_slave_0 left promiscuous mode [ 1045.525801][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.679780][ T207] device hsr_slave_1 left promiscuous mode [ 1050.742792][ T207] device hsr_slave_0 left promiscuous mode [ 1050.789992][ T207] team0 (unregistering): Port device team_slave_1 removed [ 1050.805368][ T207] team0 (unregistering): Port device team_slave_0 removed [ 1050.820259][ T207] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1050.867752][ T207] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1050.967680][ T207] bond0 (unregistering): Released all slaves [ 1051.182197][ T1542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.209783][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1051.223070][ T1538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.241755][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1051.253043][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1051.262330][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1051.270936][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.282823][ T1538] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1051.290680][ T1538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.299975][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1051.346844][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1051.354779][ T8011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.458066][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1051.468876][ T1542] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1051.476620][ T1542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.525786][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1051.543661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1051.552595][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.559733][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.568670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1051.580275][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1051.592804][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1051.601688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1051.611539][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1051.621700][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.628847][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.638141][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1051.647406][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1051.665206][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.672410][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.684010][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1051.696153][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1051.706148][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1051.714166][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1051.724608][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1051.734411][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1051.753642][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.760745][ T8026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.783769][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1051.795656][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1051.816054][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1051.829596][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1051.854210][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1051.872323][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1051.888697][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1051.909662][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1051.931731][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1051.958784][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1051.977509][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1051.992435][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1052.007229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1052.033534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1052.043470][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1052.059705][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1052.087525][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1052.114606][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1052.131171][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1052.140406][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1052.163263][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1052.179409][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1052.198730][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1052.217441][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1052.227613][ T1538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1052.246912][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1052.264766][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1052.286919][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1052.309927][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1052.333219][ T1538] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1052.341158][ T1538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1052.352507][ T1542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1052.362557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1052.372032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1052.397025][ T1542] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1052.403815][ T1542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1052.445975][ T1538] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1052.472225][ T1538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.487897][ T1542] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1052.528690][ T1542] 8021q: adding VLAN 0 to HW filter on device batadv0 09:36:14 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x100, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000480)="6466932e3591e747eed36fdd09be17cda55d6b7b3aca64d88d88abb595f81866d6008de82dab2f5586d5e0fdf7aec2067c3a7ab3d10f271f0b714ab8561eef6e1281f1d18a3eef606580a14c70fbd9fb3cd6", 0x0}, 0x18) 09:36:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x2) r3 = accept4(r1, 0x0, 0x0, 0x0) dup2(r2, r3) 09:36:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe(0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) socketpair$unix(0x1, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000480), 0x800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0xfffffffffffff5ef}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYBLOB="fe0f0000"], 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$setopts(0x4205, r3, 0x800000000002, 0xa07200) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7ff, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000240)) chdir(&(0x7f0000000180)='./file0\x00') r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00', 0x2}, 0x11) ioctl$TCGETS(r5, 0x5401, &(0x7f00000003c0)) 09:36:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe(0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) socketpair$unix(0x1, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000480), 0x800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0xfffffffffffff5ef}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYBLOB="fe0f0000"], 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$setopts(0x4205, r3, 0x800000000002, 0xa07200) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7ff, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000240)) chdir(&(0x7f0000000180)='./file0\x00') r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00', 0x2}, 0x11) ioctl$TCGETS(r5, 0x5401, &(0x7f00000003c0)) 09:36:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f00000002c0)=""/177) 09:36:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCSETSF(r1, 0x5437, 0x0) [ 1053.044101][ C1] net_ratelimit: 31 callbacks suppressed [ 1053.044112][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:36:15 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) 09:36:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCSETSF(r1, 0x5437, 0x0) 09:36:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x2) r3 = accept4(r1, 0x0, 0x0, 0x0) dup2(r2, r3) 09:36:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe(0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) socketpair$unix(0x1, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000480), 0x800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0xfffffffffffff5ef}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYBLOB="fe0f0000"], 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$setopts(0x4205, r3, 0x800000000002, 0xa07200) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7ff, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000240)) chdir(&(0x7f0000000180)='./file0\x00') r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00', 0x2}, 0x11) ioctl$TCGETS(r5, 0x5401, &(0x7f00000003c0)) 09:36:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe(0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) socketpair$unix(0x1, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000480), 0x800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0xfffffffffffff5ef}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYBLOB="fe0f0000"], 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$setopts(0x4205, r3, 0x800000000002, 0xa07200) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7ff, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000240)) chdir(&(0x7f0000000180)='./file0\x00') r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00', 0x2}, 0x11) ioctl$TCGETS(r5, 0x5401, &(0x7f00000003c0)) [ 1053.418532][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:36:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x2) r3 = accept4(r1, 0x0, 0x0, 0x0) dup2(r2, r3) [ 1053.919585][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:36:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCSETSF(r1, 0x5437, 0x0) 09:36:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe(0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) socketpair$unix(0x1, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000480), 0x800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0xfffffffffffff5ef}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYBLOB="fe0f0000"], 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$setopts(0x4205, r3, 0x800000000002, 0xa07200) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7ff, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000240)) chdir(&(0x7f0000000180)='./file0\x00') r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00', 0x2}, 0x11) ioctl$TCGETS(r5, 0x5401, &(0x7f00000003c0)) 09:36:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f00000002c0)=""/177) 09:36:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe(0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) socketpair$unix(0x1, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000480), 0x800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0xfffffffffffff5ef}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYBLOB="fe0f0000"], 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$setopts(0x4205, r3, 0x800000000002, 0xa07200) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7ff, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000240)) chdir(&(0x7f0000000180)='./file0\x00') r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'ip6gre0\x00', 0x2}, 0x11) ioctl$TCGETS(r5, 0x5401, &(0x7f00000003c0)) 09:36:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x2) r3 = accept4(r1, 0x0, 0x0, 0x0) dup2(r2, r3) [ 1054.451602][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:36:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x2) r3 = accept4(r1, 0x0, 0x0, 0x0) dup2(r2, r3) 09:36:16 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) 09:36:16 executing program 4: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6368616e6765686174203081303034e981aee47b99850593f233b94930303030303030303030303030305e7070703176626f786e6574307f002f006da888058f0667adf3df0c412f1c01181eb9c8"], 0x1) ptrace$peek(0x1, 0x0, &(0x7f00000000c0)) 09:36:16 executing program 0: socketpair(0x1, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x90000000, 0x800) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000000c0)) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:36:17 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) getgid() mkdir(&(0x7f00000004c0)='./file0\x00', 0x3) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a40)=ANY=[], 0x0) io_setup(0x9, &(0x7f0000000400)=0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x4b, 0x1}, 0x7) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000140)) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000, 0x407000}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=0x0, &(0x7f0000000380)=0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x100, 0x200, 0x7ff, 0x8, r1}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000600)={0x1000, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @empty}}}, 0x108) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 09:36:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004d80)=""/140, 0x8c}, {&(0x7f0000000d00)=""/7, 0x7}, {&(0x7f0000004fc0)=""/109, 0x6d}], 0x3}}], 0x1, 0x0, 0x0) 09:36:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x2) r3 = accept4(r1, 0x0, 0x0, 0x0) dup2(r2, r3) 09:36:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x69, 0x4) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000004000000000000900000100000000000000000040000000000027bf4ff0a8612ba400de860000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) 09:36:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f00000002c0)=""/177) 09:36:18 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) 09:36:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 09:36:18 executing program 0: socketpair(0x1, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x90000000, 0x800) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000000c0)) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:36:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 09:36:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 09:36:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x2) r3 = accept4(r1, 0x0, 0x0, 0x0) dup2(r2, r3) 09:36:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f00000002c0)=""/177) 09:36:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 09:36:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x69, 0x4) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000004000000000000900000100000000000000000040000000000027bf4ff0a8612ba400de860000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) 09:36:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x69, 0x4) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000004000000000000900000100000000000000000040000000000027bf4ff0a8612ba400de860000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) 09:36:19 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) 09:36:19 executing program 0: socketpair(0x1, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x90000000, 0x800) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000000c0)) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:36:19 executing program 2: unshare(0x8000400) mq_open(&(0x7f0000000180)='trustedcpusetlocgroupself{\'eth0trustednodev%*\x13loeth1[\x00', 0x133b2c48909cbf0, 0x0, 0x0) unshare(0x8000400) 09:36:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x69, 0x4) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000004000000000000900000100000000000000000040000000000027bf4ff0a8612ba400de860000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) 09:36:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 09:36:20 executing program 2: unshare(0x8000400) mq_open(&(0x7f0000000180)='trustedcpusetlocgroupself{\'eth0trustednodev%*\x13loeth1[\x00', 0x133b2c48909cbf0, 0x0, 0x0) unshare(0x8000400) 09:36:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x69, 0x4) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000004000000000000900000100000000000000000040000000000027bf4ff0a8612ba400de860000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) 09:36:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x69, 0x4) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000004000000000000900000100000000000000000040000000000027bf4ff0a8612ba400de860000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) 09:36:20 executing program 0: socketpair(0x1, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x90000000, 0x800) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000000c0)) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:36:20 executing program 2: unshare(0x8000400) mq_open(&(0x7f0000000180)='trustedcpusetlocgroupself{\'eth0trustednodev%*\x13loeth1[\x00', 0x133b2c48909cbf0, 0x0, 0x0) unshare(0x8000400) 09:36:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00\x00\x00\x00\x00\x03\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0xe, 0x3, 0x380, [0x0, 0x20000740, 0x200008d8, 0x200009d8], 0x0, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'bpq0\x00', 'veth0_to_team\x00', 'bcsf0\x00', 'vlan0\x00', @broadcast, [], @local, [], 0xd8, 0x138, 0x168, [@pkttype={'pkttype\x00', 0x8}, @cluster={'cluster\x00', 0x10}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'syz_tun\x00', 'rose0\x00', 'erspan0\x00', 'eql\x00', @local, [], @dev, [], 0xa0, 0xa0, 0xd0, [@m802_3={'802_3\x00', 0x8}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00', 'veth0_to_bond\x00', 'team_slave_0\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0x3f8) 09:36:20 executing program 2: unshare(0x8000400) mq_open(&(0x7f0000000180)='trustedcpusetlocgroupself{\'eth0trustednodev%*\x13loeth1[\x00', 0x133b2c48909cbf0, 0x0, 0x0) unshare(0x8000400) [ 1058.713124][ T1852] xt_cluster: cannot load conntrack support for proto=7 09:36:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00\x00\x00\x00\x00\x03\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0xe, 0x3, 0x380, [0x0, 0x20000740, 0x200008d8, 0x200009d8], 0x0, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'bpq0\x00', 'veth0_to_team\x00', 'bcsf0\x00', 'vlan0\x00', @broadcast, [], @local, [], 0xd8, 0x138, 0x168, [@pkttype={'pkttype\x00', 0x8}, @cluster={'cluster\x00', 0x10}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'syz_tun\x00', 'rose0\x00', 'erspan0\x00', 'eql\x00', @local, [], @dev, [], 0xa0, 0xa0, 0xd0, [@m802_3={'802_3\x00', 0x8}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00', 'veth0_to_bond\x00', 'team_slave_0\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0x3f8) 09:36:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'gre0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x69, 0x4) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c5f7200000000000000004000000000000900000100000000000000000040000000000027bf4ff0a8612ba400de860000000000380000001700000000000000001f3be2d3ff000000000000000000000000000000000000000ef400000001000000000000000000000000000000faffffe007ffffff"], 0x78) [ 1058.984854][ T1862] xt_cluster: cannot load conntrack support for proto=7 09:36:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 09:36:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00\x00\x00\x00\x00\x03\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0xe, 0x3, 0x380, [0x0, 0x20000740, 0x200008d8, 0x200009d8], 0x0, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'bpq0\x00', 'veth0_to_team\x00', 'bcsf0\x00', 'vlan0\x00', @broadcast, [], @local, [], 0xd8, 0x138, 0x168, [@pkttype={'pkttype\x00', 0x8}, @cluster={'cluster\x00', 0x10}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'syz_tun\x00', 'rose0\x00', 'erspan0\x00', 'eql\x00', @local, [], @dev, [], 0xa0, 0xa0, 0xd0, [@m802_3={'802_3\x00', 0x8}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00', 'veth0_to_bond\x00', 'team_slave_0\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0x3f8) [ 1059.195792][ T1871] input: syz1 as /devices/virtual/input/input21 [ 1059.329686][ T1877] xt_cluster: cannot load conntrack support for proto=7 09:36:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00\x00\x00\x00\x00\x03\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0xe, 0x3, 0x380, [0x0, 0x20000740, 0x200008d8, 0x200009d8], 0x0, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'bpq0\x00', 'veth0_to_team\x00', 'bcsf0\x00', 'vlan0\x00', @broadcast, [], @local, [], 0xd8, 0x138, 0x168, [@pkttype={'pkttype\x00', 0x8}, @cluster={'cluster\x00', 0x10}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'syz_tun\x00', 'rose0\x00', 'erspan0\x00', 'eql\x00', @local, [], @dev, [], 0xa0, 0xa0, 0xd0, [@m802_3={'802_3\x00', 0x8}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00', 'veth0_to_bond\x00', 'team_slave_0\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0x3f8) 09:36:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 09:36:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) [ 1059.680150][ T1886] xt_cluster: cannot load conntrack support for proto=7 09:36:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 09:36:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) [ 1059.866495][ T1896] input: syz1 as /devices/virtual/input/input23 09:36:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) [ 1059.988071][ T1904] input: syz1 as /devices/virtual/input/input24 [ 1060.023130][ T1907] input: syz1 as /devices/virtual/input/input25 09:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 09:36:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) [ 1060.646880][ T1923] input: syz1 as /devices/virtual/input/input26 09:36:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) [ 1060.800127][ T1929] input: syz1 as /devices/virtual/input/input27 09:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="670000007f000000fc3960ed64350a35f472dda32b5070c45a6b7bdc33ddefe41b202b9cd214bf38ad2ebaf5439debbd5ed7305b882b8e3dd8d5b7c6bdeec403ca74b6562909c6f7ceb71b519de0bd353f94dbc60c2b00f882b993c93f5c0dd26784a3d9568b56018d634ea93a5de68fa2da802097ca11ebcc616ff8d1c0e0d0b3018000000000000089db0761712d1caf9a69816ce4938d4826fc5955d1598b24ee9c15e8ddb2fd13e336720e819d3e1b9c20f5f7357f0ad40d88c0372c1e64edea962afcbb52b7c9e4b82c781fa3d3aabee9f7bbaad8181b797151bc450897dd7bcf8328c069f6393801e0a20645dccbc6b6c96ba1061ea01638ccab599a348e90f7dbfaf9930097462b3902546393bf48a81d57f86932923bf42b6e48a8b421c439237ae612094835af24dfb06a8c5d2846ab3bbff8db1e05b89165713d1626555fb5475a032b75abd56b72897583b14e814307518e670bb4f8e5a7bbaea129234ca6ce59ff2c544fdb5d4defa4d2db65d86ba0de682c7801e4448121669ff1fdf2682ab969ea264cae72ce8b0961a2a03a0d57dd2ddbe686108d3109ee99d4842835c0e4d44d40ec8d85b0a49aec65941991d48f85077d24f32a665f3014f0bb8af4578e4c565d3eb39b2aa7cd7d824c5cd4b4db1854e7bac7ed2d81336d84cda195e2eb34cb0eaa2aa21c1adc72"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) [ 1060.899771][ T1938] input: syz1 as /devices/virtual/input/input28 09:36:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) [ 1061.302659][ T1952] input: syz1 as /devices/virtual/input/input29 [ 1061.321560][ T1953] input: syz1 as /devices/virtual/input/input30 09:36:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) [ 1061.552785][ T1965] input: syz1 as /devices/virtual/input/input31 [ 1061.641823][ T1972] input: syz1 as /devices/virtual/input/input32 [ 1061.705924][ T1976] input: syz1 as /devices/virtual/input/input33 09:36:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) [ 1061.919170][ T1984] input: syz1 as /devices/virtual/input/input34 09:36:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) [ 1062.092933][ T1990] input: syz1 as /devices/virtual/input/input35 [ 1062.175611][ T1993] input: syz1 as /devices/virtual/input/input36 09:36:24 executing program 3: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x10000000016, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$poke(0x420d, r0, &(0x7f0000000000), 0x0) 09:36:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) [ 1062.403346][ T2004] input: syz1 as /devices/virtual/input/input37 [ 1062.538986][ T2013] input: syz1 as /devices/virtual/input/input38 09:36:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) [ 1062.815013][ T2021] input: syz1 as /devices/virtual/input/input39 09:36:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) [ 1062.888199][ T2026] input: syz1 as /devices/virtual/input/input40 09:36:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) fstatfs(r2, &(0x7f0000000500)=""/88) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4081) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) [ 1063.148692][ T2036] input: syz1 as /devices/virtual/input/input41 09:36:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) 09:36:25 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000180)={0x0, "7a77b19ca9ba44d7563df0aa6485b4082c8563a06ec84eb6e7a6f3691ed23afa"}) 09:36:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="740000ea64e5010827be71f932d3c3ddc93a91f5d09f1333ba860153b56f86ffce7d7b21e27d7fcb9a487529bde2575c40cc8516a7f358f6c486f3a3524985dcd385e6e2e03ecd2d11d8536734ab565c91302840fa88864f6c339418f37e3d2abec7172211c552cdb639cd18cf6a8f27deea3cafb725db3e4a87737b834edd15f97c4c01cfc559c2a8952aeeab4b18641a16ceaf858938f39b9c5c312279b182e5cc42ca5b66506b73b7c7054039be4d8c3c905c9c963515973d0dc3885cbefe432be9000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000400)=""/19) r5 = socket$inet(0x2, 0x3, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r7, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r5, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r3, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) name_to_handle_at(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1400) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 09:36:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000002c0)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd0000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000880)=ANY=[@ANYBLOB="eeca92469dcf810c06109e493346ac671ccfead573f55674760b5bcd0600baeeffd40d6e19ddf93501ace37b61a3de0c097c3b3a129abfc12109cf3bb61b948250"], 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r3 = dup2(r1, r1) ioctl$TCSBRKP(r2, 0x5425, 0x5) write$FUSE_OPEN(r3, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0x9d}], 0x1, 0x2) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) [ 1063.396966][ T2049] input: syz1 as /devices/virtual/input/input42 09:36:25 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x8000000200000100, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:36:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) [ 1063.545257][ T2060] input: syz1 as /devices/virtual/input/input43 [ 1063.782175][ T26] audit: type=1804 audit(1548149785.838:205): pid=2066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/34/file0" dev="sda1" ino=17282 res=1 09:36:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000380)="1f0000000206190200b00bd82edf6032b26a0e84fd4245a1e1d93c32afa9cb", 0x1f}], 0x1) 09:36:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) [ 1063.956601][ T2073] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. [ 1063.981699][ T2074] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. 09:36:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="230000002400075e1dfffd726fa2830020200a0009000000000001a0ffffffff0d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e639700000100000000006cf055d90f15a3", 0x4c}], 0x1}, 0x0) 09:36:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) fstatfs(r2, &(0x7f0000000500)=""/88) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4081) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 09:36:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000380)="1f0000000206190200b00bd82edf6032b26a0e84fd4245a1e1d93c32afa9cb", 0x1f}], 0x1) [ 1064.290844][ T2082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 09:36:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) 09:36:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) [ 1064.387216][ T26] audit: type=1804 audit(1548149786.438:206): pid=2067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/34/file0" dev="sda1" ino=17282 res=1 [ 1064.414844][ T26] audit: type=1804 audit(1548149786.468:207): pid=2066 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/34/file0" dev="sda1" ino=17282 res=1 [ 1064.416631][ T2087] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. 09:36:26 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x8000000200000100, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:36:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) 09:36:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000380)="1f0000000206190200b00bd82edf6032b26a0e84fd4245a1e1d93c32afa9cb", 0x1f}], 0x1) 09:36:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) 09:36:26 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x8000000200000100, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 09:36:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) [ 1064.903619][ T2104] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. 09:36:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) 09:36:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000380)="1f0000000206190200b00bd82edf6032b26a0e84fd4245a1e1d93c32afa9cb", 0x1f}], 0x1) 09:36:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) fstatfs(r2, &(0x7f0000000500)=""/88) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4081) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 09:36:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) [ 1065.311083][ T2124] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. [ 1065.331532][ T26] audit: type=1804 audit(1548149787.389:208): pid=2118 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/36/file0" dev="sda1" ino=16833 res=1 09:36:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) 09:36:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) 09:36:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) [ 1065.717146][ T26] audit: type=1804 audit(1548149787.769:209): pid=2136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/89/file0" dev="sda1" ino=16845 res=1 09:36:27 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x8000000200000100, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 1065.977895][ T26] audit: type=1804 audit(1548149788.019:210): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir803116505/syzkaller.Bm3aA4/21/file0" dev="sda1" ino=16491 res=1 09:36:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) 09:36:28 executing program 2: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000b2d000)) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 09:36:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) fstatfs(r2, &(0x7f0000000500)=""/88) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4081) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 09:36:28 executing program 2: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000140)={&(0x7f00000001c0)={'md5\x00'}}) 09:36:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) 09:36:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") read(r0, &(0x7f0000000040)=""/28, 0xfe91) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045300, &(0x7f0000000300)) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 09:36:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) 09:36:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) lseek(r1, 0x400000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r3, &(0x7f0000000180)='v', 0x1) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)={0x0, 0x10100}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1066.708643][ T26] audit: type=1804 audit(1548149788.759:211): pid=2164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/90/file0" dev="sda1" ino=16753 res=1 [ 1066.838566][ T26] audit: type=1804 audit(1548149788.799:212): pid=2169 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/38/bus" dev="sda1" ino=17185 res=1 09:36:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0xf50c}, 0xb2, &(0x7f0000000100)={&(0x7f0000001400)={0x14}, 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfa17}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) ioctl(r0, 0x4, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000180)={0x8000000}) [ 1066.912265][ T26] audit: type=1804 audit(1548149788.849:213): pid=2175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/38/bus" dev="sda1" ino=17185 res=1 [ 1066.951130][ T26] audit: type=1804 audit(1548149788.859:214): pid=2175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/38/bus" dev="sda1" ino=17185 res=1 09:36:29 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6}]}) 09:36:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) 09:36:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) pipe2$9p(&(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c00b89a61c58dcc9e4d4121e41c4ae18ff80c1a7f3561b2c59b1ec2b9233ffa71839c327ce75740dd4293edee5af38a79393c9e70183a30aafa3979b8b432a9aa96bf9b6fa2ec0589e1229b035978bcca91f5fdc24b6cc4132b24c4532aff3208ad9c208f4338df7110b0ce400f5a0ddc75d3bbfcfaa3510be3332efcc10517410f6d53cf5893c4f42a5667ba208af4d6a9712bcba78a485b6c5419abd0eb0ab86547835306895e029231c68c3d2df011057ec9bdec10f58a76ca"]) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000002c0)={0xab, 0x0, 0x8, 0x10000, 0x1f, 0x18, 0x23, "9a7614bbbc3b7c654c1fb641cd1958cc7831fbb5", "aec36a61175c6c397ed9517f3c63ea55be9c2cd6"}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4001, 0x100) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/user\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x90002) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r1, r0, 0x0, 0x8804200) 09:36:29 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6}]}) 09:36:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x12a) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x6, 0x0, &(0x7f0000000280)) close(r2) close(r1) 09:36:29 executing program 5: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x11, 0x8009, 0x8003) 09:36:29 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6}]}) 09:36:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) lseek(r1, 0x400000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r3, &(0x7f0000000180)='v', 0x1) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)={0x0, 0x10100}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:36:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) lseek(r1, 0x400000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r3, &(0x7f0000000180)='v', 0x1) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)={0x0, 0x10100}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:36:30 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="c143050000004000ffe21fe4ac14140ceb", 0x11}], 0x1}, 0x0) 09:36:30 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) 09:36:30 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSPASS(r0, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6}]}) 09:36:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00\x8e\xa1\x1d\\\xb1z\x80-\x95p\x1f\x19\xf2\x9e\x84\x8372\f\xcf\xb1\x1c\x87\xc5\x96\x8dJr\x05\xf5\xcd\xafd\xbav]\xc2\x1c>\xa3\xfda1\xa8\xb6W\\D\xb4\xde\xa9\t{\xb3\x84\x89K\xa8G\xf6\x9b\x8ba\x86\x05c<~\xa1\x9fI/\x8d\xfc\\%\x7f\x8c\xcb\x9a}.a\xe4\xf2\xaf\ns\xda\xbb&\xb7\xe4=\xfa\xe2E\ac0\x06\x90Y') preadv(r0, &(0x7f0000000480), 0x10000000000000af, 0x0) getuid() connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 09:36:30 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="c143050000004000ffe21fe4ac14140ceb", 0x11}], 0x1}, 0x0) 09:36:30 executing program 4: r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='cpu&0x&\x00\x00\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\t(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 09:36:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f000044e000/0x3000)=nil, 0x3000}) [ 1068.549336][ T2244] [ 1068.551727][ T2244] ===================================================== [ 1068.558669][ T2244] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1068.566117][ T2244] 5.0.0-rc3-next-20190122 #17 Not tainted [ 1068.571826][ T2244] ----------------------------------------------------- [ 1068.578759][ T2244] syz-executor1/2244 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1068.586653][ T2244] 00000000c69e61db (&ctx->fault_pending_wqh){+.+.}, at: userfaultfd_ctx_read+0x690/0x2060 [ 1068.596562][ T2244] [ 1068.596562][ T2244] and this task is already holding: [ 1068.603920][ T2244] 000000005ca0fea0 (&ctx->fd_wqh){....}, at: userfaultfd_ctx_read+0x25e/0x2060 [ 1068.612858][ T2244] which would create a new lock dependency: [ 1068.618749][ T2244] (&ctx->fd_wqh){....} -> (&ctx->fault_pending_wqh){+.+.} [ 1068.625945][ T2244] [ 1068.625945][ T2244] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1068.635403][ T2244] (&(&ctx->ctx_lock)->rlock){..-.} [ 1068.635414][ T2244] [ 1068.635414][ T2244] ... which became SOFTIRQ-irq-safe at: 09:36:30 executing program 4: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 09:36:30 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="c143050000004000ffe21fe4ac14140ceb", 0x11}], 0x1}, 0x0) 09:36:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00\x8e\xa1\x1d\\\xb1z\x80-\x95p\x1f\x19\xf2\x9e\x84\x8372\f\xcf\xb1\x1c\x87\xc5\x96\x8dJr\x05\xf5\xcd\xafd\xbav]\xc2\x1c>\xa3\xfda1\xa8\xb6W\\D\xb4\xde\xa9\t{\xb3\x84\x89K\xa8G\xf6\x9b\x8ba\x86\x05c<~\xa1\x9fI/\x8d\xfc\\%\x7f\x8c\xcb\x9a}.a\xe4\xf2\xaf\ns\xda\xbb&\xb7\xe4=\xfa\xe2E\ac0\x06\x90Y') preadv(r0, &(0x7f0000000480), 0x10000000000000af, 0x0) getuid() connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 1068.648306][ T2244] lock_acquire+0x1db/0x570 [ 1068.652914][ T2244] _raw_spin_lock_irq+0x60/0x80 [ 1068.657848][ T2244] free_ioctx_users+0xa7/0x6e0 [ 1068.662705][ T2244] percpu_ref_switch_to_atomic_rcu+0x50c/0x6b0 [ 1068.668931][ T2244] rcu_core+0xc4a/0x1680 [ 1068.673250][ T2244] __do_softirq+0x30b/0xb11 [ 1068.677817][ T2244] run_ksoftirqd+0x8e/0x110 [ 1068.682389][ T2244] smpboot_thread_fn+0x6ab/0xa10 [ 1068.687413][ T2244] kthread+0x357/0x430 [ 1068.691571][ T2244] ret_from_fork+0x3a/0x50 [ 1068.696043][ T2244] [ 1068.696043][ T2244] to a SOFTIRQ-irq-unsafe lock: [ 1068.703039][ T2244] (&ctx->fault_pending_wqh){+.+.} [ 1068.703048][ T2244] [ 1068.703048][ T2244] ... which became SOFTIRQ-irq-unsafe at: [ 1068.715997][ T2244] ... [ 1068.716024][ T2244] lock_acquire+0x1db/0x570 [ 1068.723196][ T2244] _raw_spin_lock+0x2f/0x40 [ 1068.727784][ T2244] userfaultfd_release+0x613/0x8b0 [ 1068.732975][ T2244] __fput+0x3c5/0xb10 [ 1068.737029][ T2244] ____fput+0x16/0x20 [ 1068.741071][ T2244] task_work_run+0x1f4/0x2b0 [ 1068.745722][ T2244] exit_to_usermode_loop+0x32a/0x3b0 [ 1068.751078][ T2244] do_syscall_64+0x696/0x800 [ 1068.755759][ T2244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1068.761705][ T2244] [ 1068.761705][ T2244] other info that might help us debug this: [ 1068.761705][ T2244] [ 1068.771909][ T2244] Chain exists of: [ 1068.771909][ T2244] &(&ctx->ctx_lock)->rlock --> &ctx->fd_wqh --> &ctx->fault_pending_wqh [ 1068.771909][ T2244] [ 1068.786120][ T2244] Possible interrupt unsafe locking scenario: [ 1068.786120][ T2244] [ 1068.794422][ T2244] CPU0 CPU1 [ 1068.799779][ T2244] ---- ---- [ 1068.805119][ T2244] lock(&ctx->fault_pending_wqh); [ 1068.810227][ T2244] local_irq_disable(); [ 1068.816971][ T2244] lock(&(&ctx->ctx_lock)->rlock); [ 1068.824657][ T2244] lock(&ctx->fd_wqh); [ 1068.831327][ T2244] [ 1068.834785][ T2244] lock(&(&ctx->ctx_lock)->rlock); [ 1068.840147][ T2244] [ 1068.840147][ T2244] *** DEADLOCK *** [ 1068.840147][ T2244] [ 1068.848279][ T2244] 1 lock held by syz-executor1/2244: [ 1068.853534][ T2244] #0: 000000005ca0fea0 (&ctx->fd_wqh){....}, at: userfaultfd_ctx_read+0x25e/0x2060 [ 1068.862916][ T2244] [ 1068.862916][ T2244] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1068.873317][ T2244] -> (&(&ctx->ctx_lock)->rlock){..-.} { [ 1068.878967][ T2244] IN-SOFTIRQ-W at: [ 1068.883043][ T2244] lock_acquire+0x1db/0x570 [ 1068.889383][ T2244] _raw_spin_lock_irq+0x60/0x80 [ 1068.896055][ T2244] free_ioctx_users+0xa7/0x6e0 [ 1068.902621][ T2244] percpu_ref_switch_to_atomic_rcu+0x50c/0x6b0 [ 1068.910608][ T2244] rcu_core+0xc4a/0x1680 [ 1068.916672][ T2244] __do_softirq+0x30b/0xb11 [ 1068.922991][ T2244] run_ksoftirqd+0x8e/0x110 [ 1068.929293][ T2244] smpboot_thread_fn+0x6ab/0xa10 [ 1068.936030][ T2244] kthread+0x357/0x430 [ 1068.941908][ T2244] ret_from_fork+0x3a/0x50 [ 1068.948125][ T2244] INITIAL USE at: [ 1068.952093][ T2244] lock_acquire+0x1db/0x570 [ 1068.958318][ T2244] _raw_spin_lock_irq+0x60/0x80 [ 1068.964913][ T2244] free_ioctx_users+0xa7/0x6e0 [ 1068.971404][ T2244] percpu_ref_switch_to_atomic_rcu+0x50c/0x6b0 [ 1068.979278][ T2244] rcu_core+0xc4a/0x1680 [ 1068.985242][ T2244] __do_softirq+0x30b/0xb11 [ 1068.991453][ T2244] run_ksoftirqd+0x8e/0x110 [ 1068.997669][ T2244] smpboot_thread_fn+0x6ab/0xa10 [ 1069.004353][ T2244] kthread+0x357/0x430 [ 1069.010151][ T2244] ret_from_fork+0x3a/0x50 [ 1069.016288][ T2244] } [ 1069.018890][ T2244] ... key at: [] __key.52263+0x0/0x40 [ 1069.026411][ T2244] ... acquired at: [ 1069.030291][ T2244] _raw_spin_lock+0x2f/0x40 [ 1069.034942][ T2244] aio_poll+0x7b9/0x14e0 [ 1069.039339][ T2244] io_submit_one+0xc39/0x1050 [ 1069.044172][ T2244] __x64_sys_io_submit+0x1c4/0x5d0 [ 1069.049432][ T2244] do_syscall_64+0x1a3/0x800 [ 1069.054177][ T2244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.060212][ T2244] [ 1069.062524][ T2244] -> (&ctx->fd_wqh){....} { [ 1069.067029][ T2244] INITIAL USE at: [ 1069.070901][ T2244] lock_acquire+0x1db/0x570 [ 1069.076953][ T2244] _raw_spin_lock_irqsave+0x95/0xcd [ 1069.083714][ T2244] __wake_up_common_lock+0x19b/0x390 [ 1069.090558][ T2244] __wake_up+0xe/0x10 [ 1069.096085][ T2244] userfaultfd_release+0x671/0x8b0 [ 1069.102751][ T2244] __fput+0x3c5/0xb10 [ 1069.108292][ T2244] ____fput+0x16/0x20 [ 1069.113825][ T2244] task_work_run+0x1f4/0x2b0 [ 1069.119961][ T2244] exit_to_usermode_loop+0x32a/0x3b0 [ 1069.126791][ T2244] do_syscall_64+0x696/0x800 [ 1069.132919][ T2244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.140352][ T2244] } [ 1069.142864][ T2244] ... key at: [] __key.45190+0x0/0x40 [ 1069.150295][ T2244] ... acquired at: [ 1069.154076][ T2244] lock_acquire+0x1db/0x570 [ 1069.158735][ T2244] _raw_spin_lock+0x2f/0x40 [ 1069.163411][ T2244] userfaultfd_ctx_read+0x690/0x2060 [ 1069.168859][ T2244] userfaultfd_read+0x1e0/0x2c0 [ 1069.173885][ T2244] do_iter_read+0x4a9/0x660 [ 1069.178561][ T2244] vfs_readv+0x175/0x1c0 [ 1069.182976][ T2244] do_readv+0x11a/0x300 [ 1069.187283][ T2244] __x64_sys_readv+0x75/0xb0 [ 1069.192026][ T2244] do_syscall_64+0x1a3/0x800 [ 1069.196780][ T2244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.202826][ T2244] [ 1069.205126][ T2244] [ 1069.205126][ T2244] the dependencies between the lock to be acquired [ 1069.205130][ T2244] and SOFTIRQ-irq-unsafe lock: [ 1069.218603][ T2244] -> (&ctx->fault_pending_wqh){+.+.} { [ 1069.224060][ T2244] HARDIRQ-ON-W at: [ 1069.228029][ T2244] lock_acquire+0x1db/0x570 [ 1069.234168][ T2244] _raw_spin_lock+0x2f/0x40 [ 1069.240328][ T2244] userfaultfd_release+0x613/0x8b0 [ 1069.247077][ T2244] __fput+0x3c5/0xb10 [ 1069.252684][ T2244] ____fput+0x16/0x20 [ 1069.258303][ T2244] task_work_run+0x1f4/0x2b0 [ 1069.264530][ T2244] exit_to_usermode_loop+0x32a/0x3b0 [ 1069.271457][ T2244] do_syscall_64+0x696/0x800 [ 1069.277684][ T2244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.285211][ T2244] SOFTIRQ-ON-W at: [ 1069.289202][ T2244] lock_acquire+0x1db/0x570 [ 1069.295345][ T2244] _raw_spin_lock+0x2f/0x40 [ 1069.301490][ T2244] userfaultfd_release+0x613/0x8b0 [ 1069.308241][ T2244] __fput+0x3c5/0xb10 [ 1069.313851][ T2244] ____fput+0x16/0x20 [ 1069.319480][ T2244] task_work_run+0x1f4/0x2b0 [ 1069.325709][ T2244] exit_to_usermode_loop+0x32a/0x3b0 [ 1069.332617][ T2244] do_syscall_64+0x696/0x800 [ 1069.338846][ T2244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.346393][ T2244] INITIAL USE at: [ 1069.350268][ T2244] lock_acquire+0x1db/0x570 [ 1069.356307][ T2244] _raw_spin_lock+0x2f/0x40 [ 1069.362369][ T2244] userfaultfd_release+0x613/0x8b0 [ 1069.369028][ T2244] __fput+0x3c5/0xb10 [ 1069.374549][ T2244] ____fput+0x16/0x20 [ 1069.380075][ T2244] task_work_run+0x1f4/0x2b0 [ 1069.386222][ T2244] exit_to_usermode_loop+0x32a/0x3b0 [ 1069.393058][ T2244] do_syscall_64+0x696/0x800 [ 1069.399199][ T2244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.406631][ T2244] } [ 1069.409117][ T2244] ... key at: [] __key.45187+0x0/0x40 [ 1069.416542][ T2244] ... acquired at: [ 1069.420344][ T2244] lock_acquire+0x1db/0x570 [ 1069.425009][ T2244] _raw_spin_lock+0x2f/0x40 [ 1069.429659][ T2244] userfaultfd_ctx_read+0x690/0x2060 [ 1069.435091][ T2244] userfaultfd_read+0x1e0/0x2c0 [ 1069.440099][ T2244] do_iter_read+0x4a9/0x660 [ 1069.444765][ T2244] vfs_readv+0x175/0x1c0 [ 1069.449163][ T2244] do_readv+0x11a/0x300 [ 1069.453486][ T2244] __x64_sys_readv+0x75/0xb0 [ 1069.458258][ T2244] do_syscall_64+0x1a3/0x800 [ 1069.463006][ T2244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.469054][ T2244] [ 1069.471354][ T2244] [ 1069.471354][ T2244] stack backtrace: [ 1069.477235][ T2244] CPU: 1 PID: 2244 Comm: syz-executor1 Not tainted 5.0.0-rc3-next-20190122 #17 [ 1069.486153][ T2244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.496362][ T2244] Call Trace: [ 1069.499670][ T2244] dump_stack+0x1db/0x2d0 [ 1069.504012][ T2244] ? dump_stack_print_info.cold+0x20/0x20 [ 1069.509731][ T2244] ? print_shortest_lock_dependencies.cold+0x176/0x1f0 [ 1069.516573][ T2244] ? vprintk_func+0x86/0x189 [ 1069.521151][ T2244] check_usage.cold+0x5e2/0x917 [ 1069.525996][ T2244] ? check_usage_forwards+0x3e0/0x3e0 [ 1069.531345][ T2244] ? check_preemption_disabled+0x48/0x290 [ 1069.537070][ T2244] ? finish_task_switch+0x1e9/0xac0 [ 1069.542253][ T2244] ? lockdep_on+0x50/0x50 [ 1069.546557][ T2244] ? lock_pin_lock+0x3a0/0x3a0 [ 1069.551296][ T2244] ? save_trace+0x290/0x290 [ 1069.555786][ T2244] ? kasan_check_read+0x11/0x20 [ 1069.560644][ T2244] ? finish_task_switch+0x1e9/0xac0 [ 1069.565844][ T2244] __lock_acquire+0x2142/0x4a10 [ 1069.570678][ T2244] ? __lock_acquire+0x2142/0x4a10 [ 1069.575682][ T2244] ? mark_held_locks+0xf0/0xf0 [ 1069.580433][ T2244] ? __lock_acquire+0x572/0x4a10 [ 1069.585358][ T2244] ? __switch_to_asm+0x34/0x70 [ 1069.590112][ T2244] ? __switch_to_asm+0x34/0x70 [ 1069.594858][ T2244] ? __switch_to_asm+0x40/0x70 [ 1069.599614][ T2244] ? __switch_to_asm+0x40/0x70 [ 1069.604362][ T2244] ? mark_held_locks+0xf0/0xf0 [ 1069.609116][ T2244] ? pci_mmcfg_check_reserved+0x170/0x170 [ 1069.614820][ T2244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1069.621035][ T2244] ? check_preemption_disabled+0x48/0x290 [ 1069.626730][ T2244] ? debug_smp_processor_id+0x1c/0x20 [ 1069.632077][ T2244] ? perf_trace_lock+0x12f/0x750 [ 1069.637015][ T2244] ? print_usage_bug+0xd0/0xd0 [ 1069.641767][ T2244] lock_acquire+0x1db/0x570 [ 1069.646245][ T2244] ? userfaultfd_ctx_read+0x690/0x2060 [ 1069.651684][ T2244] ? lock_release+0xc40/0xc40 [ 1069.656345][ T2244] ? rwlock_bug.part.0+0x90/0x90 [ 1069.661276][ T2244] ? trace_hardirqs_on_caller+0x310/0x310 [ 1069.666974][ T2244] ? aa_file_perm+0x46a/0x1180 [ 1069.671716][ T2244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1069.677957][ T2244] _raw_spin_lock+0x2f/0x40 [ 1069.682445][ T2244] ? userfaultfd_ctx_read+0x690/0x2060 [ 1069.687897][ T2244] userfaultfd_ctx_read+0x690/0x2060 [ 1069.693165][ T2244] ? userfaultfd_event_wait_completion+0xc90/0xc90 [ 1069.699654][ T2244] ? add_lock_to_list.isra.0+0x450/0x450 [ 1069.705269][ T2244] ? wake_up_q+0x100/0x100 [ 1069.709659][ T2244] ? aa_path_link+0x5d0/0x5d0 [ 1069.714318][ T2244] ? print_usage_bug+0xd0/0xd0 [ 1069.719090][ T2244] ? find_held_lock+0x35/0x120 [ 1069.723861][ T2244] ? __might_fault+0x12b/0x1e0 [ 1069.728625][ T2244] ? lock_acquire+0x1db/0x570 [ 1069.733280][ T2244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1069.739507][ T2244] ? fsnotify+0x50c/0xef0 [ 1069.743824][ T2244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1069.750038][ T2244] ? __fsnotify_parent+0xe2/0x450 [ 1069.755066][ T2244] ? fsnotify_first_mark+0x350/0x350 [ 1069.760334][ T2244] ? apparmor_path_rmdir+0x30/0x30 [ 1069.765447][ T2244] userfaultfd_read+0x1e0/0x2c0 [ 1069.770303][ T2244] ? userfaultfd_ctx_read+0x2060/0x2060 [ 1069.775827][ T2244] ? security_file_permission+0x94/0x320 [ 1069.781437][ T2244] ? rw_verify_area+0x118/0x360 [ 1069.786273][ T2244] do_iter_read+0x4a9/0x660 [ 1069.790763][ T2244] ? dup_iter+0x260/0x260 [ 1069.795070][ T2244] vfs_readv+0x175/0x1c0 [ 1069.799304][ T2244] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 1069.805360][ T2244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1069.811588][ T2244] ? __fdget_pos+0xdc/0x1f0 [ 1069.816093][ T2244] ? __fdget_raw+0x20/0x20 [ 1069.820503][ T2244] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1069.826729][ T2244] ? put_timespec64+0x115/0x1b0 [ 1069.831557][ T2244] do_readv+0x11a/0x300 [ 1069.835691][ T2244] ? vfs_readv+0x1c0/0x1c0 [ 1069.840093][ T2244] ? trace_hardirqs_off_caller+0x300/0x300 [ 1069.845900][ T2244] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1069.851333][ T2244] __x64_sys_readv+0x75/0xb0 [ 1069.855916][ T2244] do_syscall_64+0x1a3/0x800 [ 1069.860487][ T2244] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1069.866099][ T2244] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1069.871792][ T2244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1069.877324][ T2244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.883212][ T2244] RIP: 0033:0x458099 [ 1069.887103][ T2244] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1069.906678][ T2244] RSP: 002b:00007f6b8d629c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1069.915074][ T2244] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 1069.923024][ T2244] RDX: 0000000000000001 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1069.930972][ T2244] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1069.938936][ T2244] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b8d62a6d4 [ 1069.946900][ T2244] R13: 00000000004c4b0b R14: 00000000004d8458 R15: 00000000ffffffff 09:36:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) lseek(r1, 0x400000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r3, &(0x7f0000000180)='v', 0x1) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)={0x0, 0x10100}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:36:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) lseek(r1, 0x400000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r3, &(0x7f0000000180)='v', 0x1) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)={0x0, 0x10100}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1069.983024][ T3866] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1069.993958][ T3866] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1070.059464][ T3866] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1070.076728][ T3866] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1070.102707][ T2253] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env 09:36:32 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="c143050000004000ffe21fe4ac14140ceb", 0x11}], 0x1}, 0x0) [ 1070.119118][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1070.119132][ T26] audit: type=1804 audit(1548149792.181:227): pid=2259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/94/bus" dev="sda1" ino=17298 res=1 [ 1070.137491][ T2253] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:36:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f000044e000/0x3000)=nil, 0x3000}) [ 1070.237140][ T26] audit: type=1804 audit(1548149792.281:228): pid=2268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/94/bus" dev="sda1" ino=17298 res=1 [ 1070.262154][ T2253] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1070.268313][ T2264] overlayfs: failed to resolve './file1': -2 09:36:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00\x8e\xa1\x1d\\\xb1z\x80-\x95p\x1f\x19\xf2\x9e\x84\x8372\f\xcf\xb1\x1c\x87\xc5\x96\x8dJr\x05\xf5\xcd\xafd\xbav]\xc2\x1c>\xa3\xfda1\xa8\xb6W\\D\xb4\xde\xa9\t{\xb3\x84\x89K\xa8G\xf6\x9b\x8ba\x86\x05c<~\xa1\x9fI/\x8d\xfc\\%\x7f\x8c\xcb\x9a}.a\xe4\xf2\xaf\ns\xda\xbb&\xb7\xe4=\xfa\xe2E\ac0\x06\x90Y') preadv(r0, &(0x7f0000000480), 0x10000000000000af, 0x0) getuid() connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 1070.277569][ T26] audit: type=1804 audit(1548149792.281:229): pid=2268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/94/bus" dev="sda1" ino=17298 res=1 [ 1070.303250][ T2264] QAT: Invalid ioctl [ 1070.304625][ T2253] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1070.334472][ T3866] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1070.348673][ T3866] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1070.360306][ T2267] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1070.368768][ T2267] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:36:32 executing program 3: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1070.417304][ T3866] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1070.429226][ T26] audit: type=1804 audit(1548149792.491:230): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/40/bus" dev="sda1" ino=17169 res=1 [ 1070.470189][ T3866] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1070.512269][ T26] audit: type=1804 audit(1548149792.561:231): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/40/bus" dev="sda1" ino=17169 res=1 [ 1070.556509][ T2267] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1070.563834][ T26] audit: type=1804 audit(1548149792.561:232): pid=2282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/40/bus" dev="sda1" ino=17169 res=1 [ 1070.630730][ T2267] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1070.695349][ T2291] overlayfs: './file0' not a directory 09:36:32 executing program 3: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1070.773380][ T2296] overlayfs: failed to resolve './file1': -2 [ 1070.785744][ T2253] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1070.802944][ T2253] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:36:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00\x8e\xa1\x1d\\\xb1z\x80-\x95p\x1f\x19\xf2\x9e\x84\x8372\f\xcf\xb1\x1c\x87\xc5\x96\x8dJr\x05\xf5\xcd\xafd\xbav]\xc2\x1c>\xa3\xfda1\xa8\xb6W\\D\xb4\xde\xa9\t{\xb3\x84\x89K\xa8G\xf6\x9b\x8ba\x86\x05c<~\xa1\x9fI/\x8d\xfc\\%\x7f\x8c\xcb\x9a}.a\xe4\xf2\xaf\ns\xda\xbb&\xb7\xe4=\xfa\xe2E\ac0\x06\x90Y') preadv(r0, &(0x7f0000000480), 0x10000000000000af, 0x0) getuid() connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 1070.843818][ T2297] QAT: Invalid ioctl [ 1070.866010][ T2253] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1070.873666][ T2253] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:36:33 executing program 4: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 09:36:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) lseek(r1, 0x400000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r3, &(0x7f0000000180)='v', 0x1) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)={0x0, 0x10100}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:36:33 executing program 3: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1071.122939][ T2309] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1071.133069][ T2309] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1071.162518][ T3866] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1071.175572][ T3866] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1071.201601][ T26] audit: type=1804 audit(1548149793.262:233): pid=2313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/95/bus" dev="sda1" ino=16625 res=1 [ 1071.204546][ T2309] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env 09:36:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f000044e000/0x3000)=nil, 0x3000}) [ 1071.272427][ T26] audit: type=1804 audit(1548149793.312:234): pid=2318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/95/bus" dev="sda1" ino=16625 res=1 09:36:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) lseek(r1, 0x400000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r3, &(0x7f0000000180)='v', 0x1) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000280)={0x0, 0x10100}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 09:36:33 executing program 2: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1071.312283][ T26] audit: type=1804 audit(1548149793.322:235): pid=2318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir288280782/syzkaller.i57jdD/95/bus" dev="sda1" ino=16625 res=1 [ 1071.354004][ T2319] overlayfs: failed to resolve './file1': -2 [ 1071.356624][ T2309] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:36:33 executing program 3: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1071.384607][ T2319] QAT: Invalid ioctl [ 1071.425111][ T3866] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1071.451772][ T2321] overlayfs: failed to resolve './file1': -2 [ 1071.457915][ T3866] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1071.476478][ T26] audit: type=1804 audit(1548149793.542:236): pid=2327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir968104655/syzkaller.Z0TfUe/41/bus" dev="sda1" ino=16506 res=1 [ 1071.479727][ T2314] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1071.507457][ T3866] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1071.528018][ T3866] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1071.541290][ T2321] QAT: Invalid ioctl 09:36:33 executing program 2: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1071.591347][ T2314] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:36:33 executing program 3: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1071.732432][ T2314] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1071.734440][ T2337] overlayfs: failed to resolve './file1': -2 [ 1071.741696][ T2314] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1071.777768][ T2337] QAT: Invalid ioctl 09:36:33 executing program 2: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1071.888078][ T2340] overlayfs: failed to resolve './file1': -2 [ 1071.912272][ T2342] overlayfs: failed to resolve './file1': -2 [ 1071.931226][ T2342] QAT: Invalid ioctl 09:36:34 executing program 2: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1071.943595][ T2340] QAT: Invalid ioctl 09:36:34 executing program 4: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 09:36:34 executing program 3: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1072.063336][ T3866] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1072.076659][ T3866] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:36:34 executing program 5: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1072.214215][ T3866] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1072.231144][ T2348] overlayfs: failed to resolve './file1': -2 [ 1072.232074][ T2344] overlayfs: failed to resolve './file1': -2 [ 1072.238899][ T3866] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1072.245834][ T2347] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env 09:36:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f000044e000/0x3000)=nil, 0x3000}) [ 1072.302306][ T2347] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1072.326042][ T2344] QAT: Invalid ioctl [ 1072.345400][ T3866] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1072.352569][ T3866] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1072.371929][ T2353] kobject: 'loop5' (000000001425413c): kobject_uevent_env 09:36:34 executing program 0: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1072.410607][ T2353] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' 09:36:34 executing program 2: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1072.462568][ T2349] overlayfs: failed to resolve './file1': -2 [ 1072.473055][ T2349] QAT: Invalid ioctl [ 1072.483680][ T2348] QAT: Invalid ioctl [ 1072.489694][ T2347] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1072.502193][ T2347] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1072.503259][ T2362] overlayfs: failed to resolve './file1': -2 [ 1072.550745][ T3866] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1072.563709][ T3866] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1072.570401][ T2353] QAT: Invalid ioctl 09:36:34 executing program 4: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1072.605169][ T2357] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1072.629525][ T2357] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' 09:36:34 executing program 3: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1072.652095][ T2367] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1072.660973][ T2367] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1072.683798][ T3866] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1072.719258][ T3866] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1072.726187][ T2367] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1072.748237][ T2367] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1072.764154][ T2378] overlayfs: failed to resolve './file1': -2 [ 1072.770852][ T2357] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1072.800632][ T2378] QAT: Invalid ioctl [ 1072.800798][ T2370] overlayfs: failed to resolve './file1': -2 09:36:34 executing program 2: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1072.832649][ T2370] QAT: Invalid ioctl [ 1072.842002][ T2383] overlayfs: failed to resolve './file1': -2 [ 1072.856979][ T2381] overlayfs: failed to resolve './file1': -2 [ 1072.865950][ T2357] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1072.884120][ T2372] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1072.891653][ T2372] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1072.912564][ T2383] QAT: Invalid ioctl 09:36:35 executing program 3: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1072.938863][ T2376] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1072.946228][ T2381] QAT: Invalid ioctl [ 1072.956921][ T2376] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1073.021118][ T2372] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1073.029618][ T2372] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1073.085195][ T2357] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1073.092596][ T2357] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1073.141052][ T2393] overlayfs: failed to resolve './file1': -2 [ 1073.152584][ T2391] overlayfs: failed to resolve './file1': -2 [ 1073.155219][ T2382] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env 09:36:35 executing program 1: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1073.182391][ T2382] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1073.191297][ T2391] QAT: Invalid ioctl [ 1073.217940][ T2393] QAT: Invalid ioctl 09:36:35 executing program 5: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 09:36:35 executing program 4: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1073.254142][ T3866] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1073.302241][ T3866] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1073.318498][ T2400] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1073.327475][ T2400] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:36:35 executing program 0: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 09:36:35 executing program 3: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 09:36:35 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1073.372805][ T2403] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1073.375374][ T3866] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1073.390861][ T2403] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1073.412183][ T3866] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1073.431359][ T3866] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1073.440105][ T3866] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1073.473204][ T2400] overlayfs: failed to resolve './file1': -2 [ 1073.500099][ T2406] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1073.516714][ T2406] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1073.526915][ T2400] QAT: Invalid ioctl [ 1073.539337][ T2417] overlayfs: failed to resolve './file1': -2 [ 1073.549969][ T2417] QAT: Invalid ioctl [ 1073.580665][ T2416] overlayfs: failed to resolve './file1': -2 [ 1073.588988][ T2403] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1073.598156][ T2420] overlayfs: failed to resolve './file1': -2 [ 1073.605113][ T2403] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1073.611178][ T2416] QAT: Invalid ioctl 09:36:35 executing program 3: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 09:36:35 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1073.636242][ T2420] QAT: Invalid ioctl [ 1073.644201][ T2414] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1073.659547][ T2414] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1073.685008][ T2409] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1073.696399][ T2409] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1073.712577][ T3866] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1073.733330][ T2406] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1073.740823][ T3866] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1073.743345][ T2406] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1073.814492][ T2414] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1073.847182][ T2414] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1073.865791][ T2427] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1073.873401][ T2427] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1073.922590][ T2440] overlayfs: failed to resolve './file1': -2 [ 1073.934921][ T2419] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1073.940386][ T2430] overlayfs: failed to resolve './file1': -2 [ 1073.942085][ T2419] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1073.973014][ T2440] QAT: Invalid ioctl 09:36:36 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) 09:36:36 executing program 5: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 09:36:36 executing program 3: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1074.024437][ T2406] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1074.026533][ T2430] QAT: Invalid ioctl [ 1074.042306][ T2406] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:36:36 executing program 4: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1074.116400][ T2427] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1074.124561][ T2427] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1074.178297][ T2435] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1074.185773][ T2435] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1074.215510][ T3866] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1074.222828][ T3866] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' 09:36:36 executing program 1: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) [ 1074.255835][ T2435] kobject: 'loop0' (00000000c70abe75): kobject_uevent_env [ 1074.288182][ T2435] kobject: 'loop0' (00000000c70abe75): fill_kobj_path: path = '/devices/virtual/block/loop0' 09:36:36 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) 09:36:36 executing program 3: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1074.319183][ T2456] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1074.338380][ T2456] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1074.380279][ T3866] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1074.392424][ T3866] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1074.403847][ T2466] overlayfs: failed to resolve './file1': -2 [ 1074.418149][ T2462] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1074.432959][ T2462] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1074.452534][ T2466] QAT: Invalid ioctl [ 1074.488786][ T2462] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1074.509118][ T2462] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1074.526854][ T2475] overlayfs: failed to resolve './file1': -2 [ 1074.533558][ T2469] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1074.541407][ T2469] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1074.549751][ T2481] QAT: Invalid ioctl [ 1074.595081][ T2464] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1074.608565][ T2464] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' 09:36:36 executing program 0: syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x80000002, 0x80) r0 = syz_open_dev$vbi(&(0x7f0000000540)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = add_key(&(0x7f0000000240)='keyring\x00', 0x0, &(0x7f0000000580)="180e0ae9bf15b5418f4af588d809b3c2b29d2381812bfd6726ac06db8b84bbf7d9805d1a41b632900539afe068772ff84c8c3f6068f0f7a36dbf27ce4b013b5f31d33d891ce68202b7a737f0c35fbedad93cbe42e9a9c386c9a7d7d029425a05a5294290930ef9b4cab689c3a4b0aed5afb1b75127c7598d18c836ba9588bda47e5eaa73df80494aa6c42a1a5b3db14d2d0036b159c64534b6762e5a86ccf573ce12e551435436812b158754d89238ecc96b4c8371dad9cc3e8a75f53322650f8508909b8adafcc9e431000998ad1f699cc676c9f69f62d4bac5c0cf722b2a031755279caf6851fe34", 0xe9, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000b40)='encrypted\x00', &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}], 0x1, r4) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x8}, {0x7}]}, 0x14, 0x1) r5 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r5, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) close(r1) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) connect$netlink(r6, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x4080}, 0xc) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d909abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c01455c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade4691005ecf02404282d8"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) chdir(&(0x7f0000000280)='./file0\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x816}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 09:36:36 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) 09:36:36 executing program 3: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1074.640575][ T2472] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env [ 1074.653457][ T2472] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1074.675580][ T3866] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1074.682762][ T3866] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1074.697395][ T2485] overlayfs: failed to resolve './file1': -2 [ 1074.721352][ T2485] QAT: Invalid ioctl [ 1074.724570][ T2472] kobject: 'loop1' (00000000ff1ee0ad): kobject_uevent_env 09:36:36 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000003c0)={0x0, @loopback, 0x0, 0x0, 'rr\x00', 0x2, 0x0, 0x49}, 0x2c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000480)={@loopback, @loopback}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) mbind(&(0x7f0000a18000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x63, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000100)=0x8) [ 1074.737918][ T2472] kobject: 'loop1' (00000000ff1ee0ad): fill_kobj_path: path = '/devices/virtual/block/loop1' 09:36:36 executing program 2: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc0189436, &(0x7f0000000400)) [ 1074.816150][ T2469] kobject: 'loop4' (0000000026c70cfa): kobject_uevent_env [ 1074.823559][ T2469] kobject: 'loop4' (0000000026c70cfa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1074.842660][ T3866] kobject: 'loop5' (000000001425413c): kobject_uevent_env [ 1074.862588][ T3866] kobject: 'loop5' (000000001425413c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1074.881278][ T2482] kobject: 'loop1' (00000000ff1ee0ad): kob