[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.906855] kauditd_printk_skb: 7 callbacks suppressed [ 28.906867] audit: type=1800 audit(1545639264.888:29): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.939553] audit: type=1800 audit(1545639264.888:30): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.918530] sshd (6007) used greatest stack depth: 15728 bytes left Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. 2018/12/24 08:14:36 fuzzer started 2018/12/24 08:14:38 dialing manager at 10.128.0.26:34681 2018/12/24 08:14:39 syscalls: 1 2018/12/24 08:14:39 code coverage: enabled 2018/12/24 08:14:39 comparison tracing: enabled 2018/12/24 08:14:39 setuid sandbox: enabled 2018/12/24 08:14:39 namespace sandbox: enabled 2018/12/24 08:14:39 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/24 08:14:39 fault injection: enabled 2018/12/24 08:14:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/24 08:14:39 net packet injection: enabled 2018/12/24 08:14:39 net device setup: enabled 08:16:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) read(r0, &(0x7f0000000080)=""/10, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x2e0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 175.916901] IPVS: ftp: loaded support on port[0] = 21 08:16:52 executing program 1: sysinfo(0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000380), 0x0, 0x2}, 0x20) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x6, 0x2, 0x0, 0x8eb, 0x800, 0x8, 0xf2, 0x9, 0x7}}, 0x43) [ 176.221407] IPVS: ftp: loaded support on port[0] = 21 08:16:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x100000000}) sched_setaffinity(0x0, 0xffffffbe, &(0x7f00000003c0)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x9, 0x6}) dup2(r1, r1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r3) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000000c0)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000380), 0x0, 0x2}, 0x20) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0xffffffffffffff5b, &(0x7f0000000800)}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r6, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x6, 0x2, 0x0, 0x8eb, 0x800, 0x8, 0xf2, 0x9, 0x7}}, 0x43) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6035, r4, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[], 0x0) write$P9_RSTAT(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="840000007d020000007d000600070000004000000000000065adb818cd628646b23f5e9f8d50000000000000000000040600000080000000070000000000ddff11005b47504c5b77c78b809aa15a4edf05186c616e317070703173656c6626006b657972696e67766d6e6574312d235c28766d6e65743162644f0bf9fea2f653657665746830707070302b2d3a0100231100747275737465642cc18fe38cbf6d696d655f74797065"], 0xa8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 176.557478] IPVS: ftp: loaded support on port[0] = 21 08:16:52 executing program 3: close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x2008000) truncate(&(0x7f0000000040)='./file0\x00', 0x65) getpeername(r0, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002240)=""/210, 0xd2}, {0x0}], 0x2, &(0x7f0000002600)=""/151, 0x97}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) [ 176.972613] IPVS: ftp: loaded support on port[0] = 21 08:16:53 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001380)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f0000001300)='vmnet0[-wlan0\x00') [ 177.291535] IPVS: ftp: loaded support on port[0] = 21 08:16:53 executing program 5: close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x2008000) truncate(&(0x7f0000000040)='./file0\x00', 0x65) getpeername(r0, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002240)=""/210, 0xd2}, {0x0}], 0x2, &(0x7f0000002600)=""/151, 0x97}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) [ 177.656669] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.670321] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.681439] device bridge_slave_0 entered promiscuous mode [ 177.707788] IPVS: ftp: loaded support on port[0] = 21 [ 177.800085] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.811061] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.819004] device bridge_slave_1 entered promiscuous mode [ 177.953792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.023608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.305392] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.326293] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.334151] device bridge_slave_0 entered promiscuous mode [ 178.345776] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.469698] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.481384] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.503016] device bridge_slave_1 entered promiscuous mode [ 178.520420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.685341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.805521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.150092] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.173869] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.180568] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.197178] device bridge_slave_0 entered promiscuous mode [ 179.281398] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.292239] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.299598] device bridge_slave_1 entered promiscuous mode [ 179.328883] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.343720] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.377000] team0: Port device team_slave_0 added [ 179.432573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.442937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 179.457566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.495789] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.505277] team0: Port device team_slave_1 added [ 179.510680] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.541610] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.551910] device bridge_slave_0 entered promiscuous mode [ 179.601864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.610380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.629449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.652029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.691628] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.697992] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.706817] device bridge_slave_1 entered promiscuous mode [ 179.746207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.789216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 179.821522] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.828007] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.852610] device bridge_slave_0 entered promiscuous mode [ 179.879502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.896410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.936422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.962241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.974698] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.001843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.011605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.022207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.052130] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.058590] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.066759] device bridge_slave_1 entered promiscuous mode [ 180.105244] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.124102] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.137661] team0: Port device team_slave_0 added [ 180.152183] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.158548] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.185337] device bridge_slave_0 entered promiscuous mode [ 180.207954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.221280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.230161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.277137] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.321392] team0: Port device team_slave_1 added [ 180.328999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.345795] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.360404] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.368924] device bridge_slave_1 entered promiscuous mode [ 180.378243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.410444] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.442136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.452467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.501249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.509271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.559994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.581033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.603889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.622533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.633460] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.681903] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.701524] team0: Port device team_slave_0 added [ 180.708964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.727655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.743594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.762396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.776342] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.812939] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.820273] team0: Port device team_slave_1 added [ 180.860524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.886212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.902048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.926526] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.003498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.104117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.164679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.183321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.191353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.199371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.224008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.251504] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.282354] team0: Port device team_slave_0 added [ 181.322365] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.362460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.371322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.382352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.416459] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.438941] team0: Port device team_slave_1 added [ 181.460188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 181.481793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.538072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.546931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.562280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.581031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.591563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.602542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.618252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.633773] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.648716] team0: Port device team_slave_0 added [ 181.662799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.709341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.802098] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.809487] team0: Port device team_slave_1 added [ 181.821195] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.827656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.834760] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.841177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.849922] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.866480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.910477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.932171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.977143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.010830] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.042322] team0: Port device team_slave_0 added [ 182.050180] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.077058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.089443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.119226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.137205] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.145267] team0: Port device team_slave_1 added [ 182.167094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.188937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.222108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.262908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.270503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.282622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.330049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.355239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.368490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.431338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.438487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.457870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.497421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.515268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.552533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.609322] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.615760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.622467] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.628839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.654642] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.681786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.709749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.725080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.805881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.822403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.838381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.098989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.127439] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.133856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.140539] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.146985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.159702] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.484130] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.490515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.497235] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.503655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.524548] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.966736] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.973180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.979863] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.986304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.002564] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 184.171186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.181977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.189175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.360407] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.366841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.373595] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.379963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.391277] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.211277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.432524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.836163] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.886972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.266853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.402643] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.408881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.431551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.467884] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.754401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.761556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.899389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.922448] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.958447] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.974021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.983399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.216994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.224673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.240200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.271638] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.362060] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.389921] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.679194] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.781994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.788189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.801544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.842731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.853746] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.872310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.879435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.229953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 190.259148] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.361392] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.740336] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.771913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.780987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.335870] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.036638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.051797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.180336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:17:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x800100) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 08:17:08 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2) 08:17:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') read$FUSE(r0, 0x0, 0x0) 08:17:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000580)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000740)='K', 0x1}], 0x1) 08:17:08 executing program 1: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x404000, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_yield() fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='y\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) r1 = epoll_create(0x0) dup3(r1, 0xffffffffffffffff, 0x0) clock_settime(0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000004c0)={0x97}) connect(0xffffffffffffffff, &(0x7f0000000500)=@rc={0x1f, {}, 0xed9}, 0x80) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setpriority(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) pivot_root(0x0, 0x0) pivot_root(0x0, &(0x7f0000000800)='./file0/file0\x00') ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) write$P9_RUNLINKAT(r3, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000007c0)) 08:17:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback}, 0x0) [ 192.782406] hrtimer: interrupt took 29207 ns 08:17:08 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 08:17:08 executing program 0: r0 = memfd_create(&(0x7f0000000240)='\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 08:17:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x100000000}) sched_setaffinity(0x0, 0xffffffbe, &(0x7f00000003c0)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x9, 0x6}) dup2(r1, r1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r3) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000000c0)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000380), 0x0, 0x2}, 0x20) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0xffffffffffffff5b, &(0x7f0000000800)}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r6, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x6, 0x2, 0x0, 0x8eb, 0x800, 0x8, 0xf2, 0x9, 0x7}}, 0x43) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6035, r4, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[], 0x0) write$P9_RSTAT(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="840000007d020000007d000600070000004000000000000065adb818cd628646b23f5e9f8d50000000000000000000040600000080000000070000000000ddff11005b47504c5b77c78b809aa15a4edf05186c616e317070703173656c6626006b657972696e67766d6e6574312d235c28766d6e65743162644f0bf9fea2f653657665746830707070302b2d3a0100231100747275737465642cc18fe38cbf6d696d655f74797065"], 0xa8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) [ 193.449956] proc: Unknown parameter 'vmnet0[-wlan0' 08:17:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x100000000}) sched_setaffinity(0x0, 0xffffffbe, &(0x7f00000003c0)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x9, 0x6}) dup2(r1, r1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r3) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000000c0)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000380), 0x0, 0x2}, 0x20) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0xffffffffffffff5b, &(0x7f0000000800)}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r6, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x6, 0x2, 0x0, 0x8eb, 0x800, 0x8, 0xf2, 0x9, 0x7}}, 0x43) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6035, r4, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[], 0x0) write$P9_RSTAT(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="840000007d020000007d000600070000004000000000000065adb818cd628646b23f5e9f8d50000000000000000000040600000080000000070000000000ddff11005b47504c5b77c78b809aa15a4edf05186c616e317070703173656c6626006b657972696e67766d6e6574312d235c28766d6e65743162644f0bf9fea2f653657665746830707070302b2d3a0100231100747275737465642cc18fe38cbf6d696d655f74797065"], 0xa8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 08:17:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) socketpair$unix(0x1, 0x1000000003, 0x0, 0x0) 08:17:10 executing program 5: close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x2008000) truncate(&(0x7f0000000040)='./file0\x00', 0x65) getpeername(r0, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002240)=""/210, 0xd2}, {0x0}], 0x2, &(0x7f0000002600)=""/151, 0x97}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) 08:17:10 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 08:17:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x44) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) fstat(0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0)) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000480)={0x0, 0xfb, 0x15, 0x4, 0x4, "0608b82dad8e23323df3f0c889cf6c05"}, 0x15, 0x0) fcntl$getown(r0, 0x9) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000600)={0x0, @aes256}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000640)) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000740)={'nat\x00'}, 0x0) get_mempolicy(&(0x7f00000007c0), 0x0, 0x3ff, &(0x7f0000ffc000/0x4000)=nil, 0x2) mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) 08:17:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x100000000}) sched_setaffinity(0x0, 0xffffffbe, &(0x7f00000003c0)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x9, 0x6}) dup2(r1, r1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r3) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000000c0)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000380), 0x0, 0x2}, 0x20) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0xffffffffffffff5b, &(0x7f0000000800)}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r6, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x6, 0x2, 0x0, 0x8eb, 0x800, 0x8, 0xf2, 0x9, 0x7}}, 0x43) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6035, r4, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[], 0x0) write$P9_RSTAT(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="840000007d020000007d000600070000004000000000000065adb818cd628646b23f5e9f8d50000000000000000000040600000080000000070000000000ddff11005b47504c5b77c78b809aa15a4edf05186c616e317070703173656c6626006b657972696e67766d6e6574312d235c28766d6e65743162644f0bf9fea2f653657665746830707070302b2d3a0100231100747275737465642cc18fe38cbf6d696d655f74797065"], 0xa8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 08:17:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x100000000}) sched_setaffinity(0x0, 0xffffffbe, &(0x7f00000003c0)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x9, 0x6}) dup2(r1, r1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r3) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000000c0)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000380), 0x0, 0x2}, 0x20) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0xffffffffffffff5b, &(0x7f0000000800)}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r6, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x6, 0x2, 0x0, 0x8eb, 0x800, 0x8, 0xf2, 0x9, 0x7}}, 0x43) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6035, r4, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[], 0x0) write$P9_RSTAT(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="840000007d020000007d000600070000004000000000000065adb818cd628646b23f5e9f8d50000000000000000000040600000080000000070000000000ddff11005b47504c5b77c78b809aa15a4edf05186c616e317070703173656c6626006b657972696e67766d6e6574312d235c28766d6e65743162644f0bf9fea2f653657665746830707070302b2d3a0100231100747275737465642cc18fe38cbf6d696d655f74797065"], 0xa8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 08:17:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000380)={0x0, 0x0, 0x100, 0xfffffffffffffffd, 0x100000000}) sched_setaffinity(0x0, 0xffffffbe, &(0x7f00000003c0)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000140)={0x9, 0x6}) dup2(r1, r1) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r3) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f00000000c0)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000380), 0x0, 0x2}, 0x20) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0xffffffffffffff5b, &(0x7f0000000800)}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r6, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x6, 0x2, 0x0, 0x8eb, 0x800, 0x8, 0xf2, 0x9, 0x7}}, 0x43) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6035, r4, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[], 0x0) write$P9_RSTAT(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="840000007d020000007d000600070000004000000000000065adb818cd628646b23f5e9f8d50000000000000000000040600000080000000070000000000ddff11005b47504c5b77c78b809aa15a4edf05186c616e317070703173656c6626006b657972696e67766d6e6574312d235c28766d6e65743162644f0bf9fea2f653657665746830707070302b2d3a0100231100747275737465642cc18fe38cbf6d696d655f74797065"], 0xa8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 08:17:10 executing program 2: close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x2008000) truncate(&(0x7f0000000040)='./file0\x00', 0x65) getpeername(r0, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002240)=""/210, 0xd2}, {0x0}], 0x2, &(0x7f0000002600)=""/151, 0x97}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) 08:17:10 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 08:17:11 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 08:17:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 08:17:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f716610010000000000000000000000000000000005828a1be2cf9e2cc75c95c0001000000000000000000000000000000010000000004019078009fbf2600ba9300"], 0x0) 08:17:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 08:17:11 executing program 5: close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x2008000) truncate(&(0x7f0000000040)='./file0\x00', 0x65) getpeername(r0, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002240)=""/210, 0xd2}, {0x0}], 0x2, &(0x7f0000002600)=""/151, 0x97}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) 08:17:11 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002740)='/dev/full\x00', 0x44100, 0x0) getresuid(0x0, &(0x7f0000002900), &(0x7f0000002940)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000029c0)) fchownat(r0, &(0x7f0000002880)='./file0\x00', r1, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x4a, &(0x7f0000ffb000/0x1000)=nil) 08:17:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'io'}]}, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 08:17:11 executing program 2: socket$inet6(0xa, 0x80805, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfffffc72) mmap(&(0x7f0000c3c000/0x5000)=nil, 0x5000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a1b000/0x2000)=nil, 0x2000, 0x0, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 08:17:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 08:17:12 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 08:17:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x383}, 0x7) 08:17:12 executing program 1: r0 = gettid() socket$nl_route(0x10, 0x3, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RFSYNC(r1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getgid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) 08:17:12 executing program 4: r0 = memfd_create(&(0x7f0000000240)='\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 196.215545] syz-executor0 (7707) used greatest stack depth: 14656 bytes left 08:17:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xa, 0x8, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r0, &(0x7f0000000180), 0x0, 0x2}, 0x20) 08:17:12 executing program 4: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x5a4, 0x0, 0x0) 08:17:12 executing program 3: ftruncate(0xffffffffffffffff, 0x0) truncate(0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002240)=""/210, 0xd2}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='uid_map\x00') arch_prctl$ARCH_GET_FS(0x1003, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 08:17:12 executing program 5: close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x2008000) truncate(&(0x7f0000000040)='./file0\x00', 0x65) getpeername(r0, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002240)=""/210, 0xd2}, {0x0}], 0x2, &(0x7f0000002600)=""/151, 0x97}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) 08:17:12 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x4857) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x1, 0xfffffffffffffffc, 0xfffffffffffff001, 0xffffffffffffff00, 0x0, 0x3f, 0x4, 0xed, 0x40, 0x2ac, 0x2, 0x100, 0x38, 0x1, 0x4}, [{0x1, 0x8000, 0x3, 0x7, 0x5c5d, 0x42, 0x20}], "60e2a6edfeff575151b07c6b9d46cd6143593001504da50382de39a0e5c5d6523087c073298fc3b2424df5de8bdd86ea32deb7afbccd4b0a0cae815a86a989bd0dd3f0047891e6c69bb714148363707812700d9f9ddb93c4ab7cc720d0c207959054f593a858c7624f", [[], [], [], [], [], [], []]}, 0x7e1) fcntl$lock(0xffffffffffffffff, 0x27, &(0x7f0000001600)={0x1, 0x1, 0x20, 0x2}) 08:17:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x383}, 0x7) 08:17:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "f71661", 0x10, 0x0, 0x0, @loopback, @loopback, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "9fbf26", 0x0, "baf400"}}}}}}}, 0x0) 08:17:12 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1000000002806, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 'syz1\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1c"}, 0x119) 08:17:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 08:17:13 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x4000000000000003, 0x2) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 196.994535] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 197.034469] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 08:17:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = dup2(r0, r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 08:17:13 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 08:17:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) stat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000011ff0), 0x10) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) sigaltstack(&(0x7f0000ec9000/0x6000)=nil, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000006680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006640)={&(0x7f0000006600)=@gettfilter={0x2c, 0x2e, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, {0x1f, 0xf}, {0x0, 0x14}, {0x0, 0xfff2}}, [{0x8}]}, 0x2c}}, 0x4000001) tkill(0x0, 0x0) 08:17:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000200)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 08:17:13 executing program 1: r0 = socket$inet6(0xa, 0x1040000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00\xec\bV/\xe8\xb0+CN\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xc, 0x1, @dev}]}, 0x2c}}, 0x0) 08:17:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0, 0x1}, 0x20) 08:17:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) 08:17:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001d001fff0000000000000000050000000800060000000000"], 0x1}}, 0x0) 08:17:13 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) 08:17:13 executing program 5: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) fstat(0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0)="958b59821d5e07faad3f4b38150d6093", 0x10) fcntl$getown(0xffffffffffffffff, 0x9) get_mempolicy(&(0x7f00000007c0), &(0x7f0000000800), 0x3ff, &(0x7f0000ffc000/0x4000)=nil, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000840)) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000a80)={'bond_slave_0\x00'}) 08:17:13 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) r1 = socket(0x0, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xfffffffffffffffd}) 08:17:13 executing program 5: r0 = openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000002180)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40002040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) [ 197.939948] device bridge0 entered promiscuous mode 08:17:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x383}, 0x7) 08:17:14 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) 08:17:14 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1000000002806, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 'syz1\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1c"}, 0x119) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000180), 0xa) 08:17:14 executing program 1: r0 = socket(0x10, 0x802, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) write(r0, &(0x7f0000000240)="fc00000048007f0000000900000007000a060000000000000000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548de873cf1587c3b41000000000000000000000000000000", 0xfc) 08:17:14 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001580)='cpu&5\n\n\n\x00\x00\x01\x00\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') [ 198.110240] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 198.123868] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 08:17:14 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) 08:17:14 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) 08:17:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0xa, 0x100000000000914, 0x5}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x164) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000)="b8", 0x0}, 0x18) 08:17:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xa, 0x8, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000140)='^', 0x0}, 0x20) 08:17:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000540), &(0x7f0000000180)=0x60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000004c0)={'team0\x00'}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff4b) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000000)=""/29) signalfd4(r1, &(0x7f0000000080), 0x8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x44bfc9) r4 = memfd_create(&(0x7f0000000300)='keyringsycgroup\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xafS\xb7(\xd7\xd5d\xe6\t\xd10xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) 08:17:14 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002240)=""/210, 0xd2}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 08:17:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) creat(0x0, 0x0) 08:17:14 executing program 4: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x5a4, 0xc00e, 0x0) 08:17:14 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001500add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 08:17:14 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 08:17:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 08:17:14 executing program 2: r0 = openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x9d, 0x80000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) [ 198.536305] netlink: 64 bytes leftover after parsing attributes in process `syz-executor2'. 08:17:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) r1 = socket$inet6(0xa, 0x803, 0x3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x8408) 08:17:14 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 08:17:14 executing program 4: socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:17:15 executing program 5: 08:17:15 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 08:17:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 08:17:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001240)="2e0000002800815fe45ae0d7e8fe075e0b0f33ee34f90bac87185082cf0400b04826cb0be66e5c0d8a0000230400", 0x2e}], 0x1}, 0x0) 08:17:15 executing program 2: r0 = openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x9d, 0x80000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) 08:17:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 08:17:15 executing program 4: 08:17:15 executing program 3: 08:17:15 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(0xffffffffffffffff, r0) 08:17:15 executing program 5: 08:17:15 executing program 1: 08:17:15 executing program 4: 08:17:15 executing program 3: 08:17:15 executing program 1: 08:17:15 executing program 4: 08:17:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) dup2(r0, 0xffffffffffffffff) 08:17:15 executing program 2: r0 = openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x9d, 0x80000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) 08:17:15 executing program 5: 08:17:15 executing program 3: 08:17:15 executing program 1: 08:17:15 executing program 5: 08:17:15 executing program 4: 08:17:15 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) 08:17:15 executing program 3: 08:17:15 executing program 5: 08:17:16 executing program 1: 08:17:16 executing program 4: 08:17:16 executing program 2: r0 = openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x9d, 0x80000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) 08:17:16 executing program 3: 08:17:16 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) 08:17:16 executing program 1: 08:17:16 executing program 4: 08:17:16 executing program 5: 08:17:16 executing program 3: 08:17:16 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(0xffffffffffffffff, r0) 08:17:16 executing program 1: 08:17:16 executing program 4: 08:17:16 executing program 3: 08:17:16 executing program 5: 08:17:16 executing program 2: 08:17:16 executing program 4: 08:17:16 executing program 5: 08:17:16 executing program 1: 08:17:16 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r1, r0) 08:17:16 executing program 3: 08:17:16 executing program 5: 08:17:16 executing program 4: 08:17:16 executing program 3: 08:17:16 executing program 1: 08:17:16 executing program 2: 08:17:16 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r1, r0) 08:17:16 executing program 4: 08:17:16 executing program 5: 08:17:16 executing program 2: 08:17:16 executing program 1: 08:17:16 executing program 3: 08:17:16 executing program 4: 08:17:16 executing program 2: 08:17:16 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(r1, r0) 08:17:16 executing program 5: 08:17:16 executing program 4: 08:17:17 executing program 3: 08:17:17 executing program 1: 08:17:17 executing program 2: 08:17:17 executing program 5: 08:17:17 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) dup2(r1, r0) 08:17:17 executing program 4: 08:17:17 executing program 3: 08:17:17 executing program 5: 08:17:17 executing program 1: 08:17:17 executing program 2: 08:17:17 executing program 4: 08:17:17 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) dup2(r1, r0) 08:17:17 executing program 4: 08:17:17 executing program 3: 08:17:17 executing program 5: 08:17:17 executing program 2: 08:17:17 executing program 1: 08:17:17 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) dup2(r1, r0) 08:17:17 executing program 3: 08:17:17 executing program 1: 08:17:17 executing program 4: 08:17:17 executing program 2: 08:17:17 executing program 5: 08:17:17 executing program 3: 08:17:17 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(0xffffffffffffffff, r0) 08:17:17 executing program 2: 08:17:17 executing program 1: 08:17:17 executing program 4: 08:17:17 executing program 5: 08:17:17 executing program 3: 08:17:17 executing program 1: 08:17:17 executing program 4: 08:17:17 executing program 5: 08:17:17 executing program 2: 08:17:17 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) dup2(r0, 0xffffffffffffffff) 08:17:17 executing program 3: 08:17:17 executing program 1: 08:17:17 executing program 2: 08:17:17 executing program 4: 08:17:18 executing program 3: 08:17:18 executing program 5: 08:17:18 executing program 0: 08:17:18 executing program 1: 08:17:18 executing program 2: 08:17:18 executing program 4: 08:17:18 executing program 5: 08:17:18 executing program 3: 08:17:18 executing program 0: 08:17:18 executing program 1: 08:17:18 executing program 2: 08:17:18 executing program 4: 08:17:18 executing program 3: 08:17:18 executing program 0: 08:17:18 executing program 5: 08:17:18 executing program 1: 08:17:18 executing program 0: 08:17:18 executing program 5: 08:17:18 executing program 2: 08:17:18 executing program 3: 08:17:18 executing program 4: 08:17:18 executing program 1: 08:17:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xfffffff5]}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 08:17:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000), 0xffffffffffffedd) 08:17:18 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000380), 0x24, 0x0) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 08:17:18 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20006, 0x0, 0x0, 0xffffffff}]}) eventfd2(0x0, 0x0) 08:17:18 executing program 4: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x6, &(0x7f00000012c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="20000000000101000000000000000000000000000c0201000000000000000000"], 0x20}}, 0x0) clock_gettime(0x0, &(0x7f0000008040)={0x0}) io_getevents(r0, 0x4, 0x80000000000012e, &(0x7f0000007f80)=[{}, {}], &(0x7f0000008080)={r4}) fcntl$getownex(r1, 0x10, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, 0x0) stat(0x0, 0x0) lstat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) getpgid(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 08:17:18 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20006, 0x0, 0x0, 0xffffffff}]}) tgkill(0x0, 0x0, 0x0) 08:17:18 executing program 5: 08:17:18 executing program 2: [ 202.810759] audit: type=1326 audit(1545639438.788:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8198 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 [ 202.847657] audit: type=1326 audit(1545639438.818:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8200 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 [ 202.876220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 08:17:18 executing program 2: 08:17:18 executing program 5: 08:17:18 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0xffffffffffffffff}, 0x2c) [ 202.903043] audit: type=1326 audit(1545639438.828:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8209 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 08:17:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) 08:17:19 executing program 2: 08:17:19 executing program 5: 08:17:19 executing program 3: [ 203.541520] audit: type=1326 audit(1545639439.528:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8198 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 [ 203.610602] audit: type=1326 audit(1545639439.588:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8200 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 [ 203.627125] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 08:17:19 executing program 0: [ 203.647685] audit: type=1326 audit(1545639439.628:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8209 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 08:17:19 executing program 5: 08:17:19 executing program 2: 08:17:19 executing program 3: 08:17:19 executing program 1: 08:17:19 executing program 4: 08:17:19 executing program 0: 08:17:19 executing program 1: 08:17:19 executing program 3: 08:17:19 executing program 2: 08:17:19 executing program 5: 08:17:19 executing program 0: 08:17:19 executing program 4: 08:17:19 executing program 1: 08:17:19 executing program 3: 08:17:20 executing program 5: 08:17:20 executing program 0: 08:17:20 executing program 2: 08:17:20 executing program 5: 08:17:20 executing program 4: 08:17:20 executing program 1: 08:17:20 executing program 3: 08:17:20 executing program 0: 08:17:20 executing program 2: 08:17:20 executing program 5: 08:17:20 executing program 0: 08:17:20 executing program 3: 08:17:20 executing program 1: 08:17:20 executing program 4: 08:17:20 executing program 2: 08:17:20 executing program 5: 08:17:20 executing program 3: 08:17:20 executing program 2: 08:17:20 executing program 0: 08:17:20 executing program 4: 08:17:20 executing program 5: 08:17:20 executing program 1: 08:17:20 executing program 3: 08:17:20 executing program 2: 08:17:20 executing program 0: 08:17:20 executing program 1: 08:17:20 executing program 4: 08:17:20 executing program 5: 08:17:20 executing program 2: 08:17:20 executing program 4: 08:17:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x394) 08:17:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @remote}, {}, 0x0, {0x2, 0x0, @dev}, 'ip6_vti0\x00'}) 08:17:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000008000)=[{{0x0, 0x0, 0x0}}], 0x800000000000209, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000160001030000042af124462482995ab7", @ANYRES32=0x0], 0x2}}, 0x0) 08:17:20 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 08:17:20 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 08:17:20 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x4, 0x1000, 0x7, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) 08:17:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) close(r0) 08:17:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000100)=0x1e) 08:17:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 08:17:21 executing program 4: select(0x1000001f4, 0x0, 0x0, 0x0, 0x0) [ 205.075759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:17:21 executing program 3: mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x10, 0x0) flock(r0, 0x2) close(r0) open(&(0x7f0000000000)='./bus\x00', 0x1a, 0x0) execve(0x0, 0x0, 0x0) 08:17:21 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x8008000, 0x5900) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 205.207497] audit: type=1804 audit(1545639441.188:37): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir140080421/syzkaller.xsWipk/44/bus" dev="sda1" ino=16621 res=1 08:17:21 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f8571") r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000013c0)='cpuacct.usage\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000001400)=0x1e) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x3f, @loopback, 0x8}], 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x1ff, @empty, 0x10001}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000005e80)=[@in={0x2, 0x0, @multicast1}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @rand_addr=0x6}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0xffffffffffffff01, @loopback}], 0x5c) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0xde4}], 0x1, 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001200)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x74, r2, 0x801, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x74}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257009bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x2800000003000000, 0xe, 0x0, &(0x7f0000000200)="a06ad876d56a0e64d082778c3938", 0x0, 0xb4b}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001540)={{{@in, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001480)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001640)={{{@in, @in6=@mcast2, 0x4e24, 0x3, 0x4e21, 0x8, 0xa, 0x20, 0x1d, 0x77, 0x0, r5}, {0x10001, 0x2, 0xba, 0x982c, 0x1, 0x7, 0x2, 0x1f}, {0x1, 0x81, 0x100, 0x4}, 0xffffffffffffffb1, 0x6e6bc0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d5, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xb}, 0x3507, 0x4, 0x2, 0x7, 0x8, 0x9}}, 0xe8) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380)='IPVS\x00') r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001180)={&(0x7f0000000080), 0xc, &(0x7f0000001140)={&(0x7f0000000240)={0x40, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xda3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001a80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000001500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f00000014c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="6d8e75f06b316a81e23e7fd7937e58a869a36bae7851b4fcbf8aefd1d78000096a770f868a"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x8c1) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000300), 0xffffff3e) 08:17:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000540)={0x2, &(0x7f0000000000)=[{}, {0xfffffffffffffffd}]}, 0x10) [ 205.270980] audit: type=1804 audit(1545639441.188:38): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir140080421/syzkaller.xsWipk/44/bus" dev="sda1" ino=16621 res=1 [ 205.380583] audit: type=1804 audit(1545639441.198:39): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir140080421/syzkaller.xsWipk/44/bus" dev="sda1" ino=16621 res=1 [ 205.448639] audit: type=1804 audit(1545639441.198:40): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir140080421/syzkaller.xsWipk/44/bus" dev="sda1" ino=16621 res=1 08:17:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @remote}, 'ip6_vti0\x00'}) 08:17:21 executing program 0: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x700, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) 08:17:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 08:17:22 executing program 3: r0 = socket(0x10, 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000130009006900000000000000ab00804803000000447f0107000000141800290073130000006455c4726e0000000400000306000000", 0x39}], 0x1) 08:17:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) 08:17:22 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xef, &(0x7f0000000300)="9800ae2f5cd202bac55db99e351f", 0xe) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x17}}) 08:17:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000140)=0x10) 08:17:22 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000001980)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@assoc={0x18}], 0x18, 0x20000000}], 0x1, 0x20000014) [ 206.232898] netlink: 'syz-executor3': attribute type 41 has an invalid length. 08:17:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x267, 0x200007fd, &(0x7f00000008c0)={0x5, 0x0, @local}, 0x10) 08:17:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 206.297214] netlink: 1 bytes leftover after parsing attributes in process `syz-executor3'. 08:17:22 executing program 2: [ 206.337430] kernel msg: ebtables bug: please report to author: Wrong nr of counters 08:17:22 executing program 3: 08:17:22 executing program 2: 08:17:22 executing program 0: 08:17:22 executing program 1: utimes(0x0, &(0x7f0000000080)={{}, {0x100000000000000}}) msgrcv(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="07ff2016"], 0x1, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0xc) r0 = socket$inet6(0x18, 0x1, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs={0x25af90167d5e1800}, 0x1c) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/244}, {&(0x7f0000000340)=""/211}, {&(0x7f0000000440)=""/209}], 0x100000000000030d}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 08:17:22 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 08:17:22 executing program 0: 08:17:23 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xef, &(0x7f0000000300)="9800ae2f5cd202bac55db99e351f", 0xe) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x17}}) 08:17:23 executing program 2: 08:17:23 executing program 1: 08:17:23 executing program 3: 08:17:23 executing program 0: 08:17:23 executing program 4: 08:17:23 executing program 0: 08:17:23 executing program 1: 08:17:23 executing program 4: 08:17:23 executing program 3: 08:17:23 executing program 2: 08:17:23 executing program 2: 08:17:23 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x2c0) 08:17:23 executing program 3: syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x5}}}}}, 0x0) 08:17:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r1, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x17}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 08:17:23 executing program 0: socketpair$unix(0x1, 0x2000000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 08:17:23 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xef, &(0x7f0000000300)="9800ae2f5cd202bac55db99e351f", 0xe) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x17}}) 08:17:23 executing program 2: 08:17:23 executing program 2: 08:17:24 executing program 3: [ 208.000474] audit: type=1326 audit(1545639443.978:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8482 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 08:17:24 executing program 2: 08:17:24 executing program 1: 08:17:24 executing program 2: 08:17:24 executing program 1: 08:17:24 executing program 2: 08:17:24 executing program 3: 08:17:24 executing program 4: 08:17:24 executing program 0: 08:17:24 executing program 1: 08:17:24 executing program 3: 08:17:24 executing program 2: 08:17:24 executing program 4: 08:17:24 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xef, &(0x7f0000000300)="9800ae2f5cd202bac55db99e351f", 0xe) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x17}}) [ 208.729008] audit: type=1326 audit(1545639444.708:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8482 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0xffff0000 08:17:24 executing program 4: 08:17:24 executing program 2: 08:17:24 executing program 3: 08:17:24 executing program 1: 08:17:24 executing program 0: 08:17:24 executing program 4: 08:17:24 executing program 2: 08:17:25 executing program 0: 08:17:25 executing program 3: 08:17:25 executing program 1: 08:17:25 executing program 4: 08:17:25 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xef, &(0x7f0000000300)="9800ae2f5cd202bac55db99e351f", 0xe) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) 08:17:25 executing program 0: 08:17:25 executing program 2: 08:17:25 executing program 3: 08:17:25 executing program 1: 08:17:25 executing program 4: 08:17:25 executing program 3: 08:17:25 executing program 4: 08:17:25 executing program 2: 08:17:25 executing program 0: 08:17:25 executing program 1: 08:17:25 executing program 3: 08:17:26 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xef, &(0x7f0000000300)="9800ae2f5cd202bac55db99e351f", 0xe) 08:17:26 executing program 1: 08:17:26 executing program 2: 08:17:26 executing program 4: 08:17:26 executing program 0: 08:17:26 executing program 3: 08:17:26 executing program 3: 08:17:26 executing program 4: 08:17:26 executing program 1: 08:17:26 executing program 0: 08:17:26 executing program 2: 08:17:26 executing program 1: 08:17:26 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 08:17:26 executing program 3: 08:17:26 executing program 4: 08:17:26 executing program 2: 08:17:26 executing program 0: 08:17:26 executing program 1: 08:17:26 executing program 4: 08:17:26 executing program 3: 08:17:26 executing program 1: 08:17:26 executing program 2: 08:17:26 executing program 0: 08:17:27 executing program 4: 08:17:27 executing program 3: 08:17:27 executing program 1: 08:17:27 executing program 2: 08:17:27 executing program 0: 08:17:27 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 08:17:27 executing program 4: 08:17:27 executing program 0: 08:17:27 executing program 1: 08:17:27 executing program 2: 08:17:27 executing program 3: 08:17:27 executing program 4: 08:17:27 executing program 0: 08:17:27 executing program 1: 08:17:27 executing program 2: 08:17:27 executing program 3: 08:17:27 executing program 4: 08:17:28 executing program 2: 08:17:28 executing program 0: 08:17:28 executing program 1: 08:17:28 executing program 4: 08:17:28 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) 08:17:28 executing program 3: 08:17:28 executing program 3: 08:17:28 executing program 0: 08:17:28 executing program 4: 08:17:28 executing program 1: 08:17:28 executing program 2: 08:17:28 executing program 3: 08:17:28 executing program 4: 08:17:28 executing program 2: 08:17:28 executing program 0: 08:17:28 executing program 1: 08:17:28 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) 08:17:28 executing program 3: 08:17:28 executing program 0: 08:17:28 executing program 4: 08:17:28 executing program 1: 08:17:28 executing program 2: 08:17:28 executing program 3: 08:17:28 executing program 1: 08:17:28 executing program 0: 08:17:28 executing program 2: 08:17:28 executing program 4: 08:17:29 executing program 1: r0 = socket(0x80000000000010, 0x802, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800040001000000", 0x24) 08:17:29 executing program 5: socket$inet6(0x10, 0x803, 0x27fb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) 08:17:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x9, 0xebe, 0x3}, 0x3f5) bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x100000003, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000002c0)='%', 0x0}, 0x18) 08:17:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") writev(r0, &(0x7f00007af000)=[{&(0x7f0000000100)="480000001500190a20ffff7fffffff5602113b850e1de097485e000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 08:17:29 executing program 4: 08:17:29 executing program 0: 08:17:29 executing program 1: socketpair(0x0, 0x0, 0x310, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x5, 0x30000000000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x81, 0x0, 0x5, 0x0, 0x7f, 0x5, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x1c00000000, 0x0, 0x0, 0x1000, 0xb92, 0x0, 0x7ff, 0x64e, 0x0, 0x0, 0xf83, 0x0, @perf_bp={0x0, 0x8}, 0x10810, 0x1, 0x0, 0x0, 0x9c3, 0x2, 0x2}, 0x0, 0x2, r1, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) r4 = openat$cgroup(r0, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xf, 0xffffffffffffffff, 0x80) openat$cgroup_type(r4, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) sendmsg$kcm(r2, &(0x7f0000003c00)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}}}, 0x80, &(0x7f0000003a80)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000540)=@ax25={0x3, {"512d72b0c69b36"}, 0x2}, 0x80, 0x0}, 0x2000c800) write$cgroup_int(r3, &(0x7f0000000000)=0x8, 0x335) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) close(r3) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x9b) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x20000001) 08:17:29 executing program 0: r0 = socket$kcm(0x2, 0x4000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f0000000040), 0x147) 08:17:29 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2200800000001, 0x40000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) [ 213.517520] netlink: 48 bytes leftover after parsing attributes in process `syz-executor2'. 08:17:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00\xbc0G\xebR_HO\x89\xfc\x96\xddl\xa6M\xa4\x0f\xf0#\x12.f\xf6'}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000700)}, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2200800000001, 0x40000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 08:17:29 executing program 0: socketpair(0x0, 0x0, 0x310, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x5, 0x30000000000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x81, 0x0, 0x5, 0x0, 0x7f, 0x5, 0x1ff, 0x0, 0x4, 0x445, 0x0, 0x0, 0x9, 0x5, 0x0, 0x1c00000000, 0x0, 0x0, 0x1000, 0xb92, 0x0, 0x7ff, 0x64e, 0x0, 0x0, 0xf83, 0x0, @perf_bp={0x0}, 0x10810, 0x1, 0x100, 0x0, 0x0, 0x2, 0x2}, 0x0, 0x2, r1, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) r4 = openat$cgroup(r0, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xf, 0xffffffffffffffff, 0x80) openat$cgroup_type(r4, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000003c00)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}}}, 0x80, &(0x7f0000003a80)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$kcm(r6, &(0x7f0000001980)={&(0x7f0000000540)=@ax25={0x3, {"512d72b0c69b36"}, 0x2}, 0x80, 0x0}, 0x2000c800) write$cgroup_int(r3, &(0x7f0000000000)=0x8, 0x335) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x0) close(r3) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, 0x0, 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x9b) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x20000001) 08:17:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff4f, &(0x7f00000000c0), 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 213.677094] raw_sendmsg: syz-executor1 forgot to set AF_INET. Fix it! [ 213.806588] device nr0 entered promiscuous mode [ 213.827196] syz-executor4 (8771) used greatest stack depth: 14224 bytes left 08:17:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB='n'], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 214.048238] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 214.120863] ================================================================== [ 214.128388] BUG: KASAN: slab-out-of-bounds in fpstate_init+0x50/0x160 [ 214.128404] Write of size 832 at addr ffff8881b614abc0 by task syz-executor2/8787 [ 214.128411] [ 214.128432] CPU: 1 PID: 8787 Comm: syz-executor2 Not tainted 4.20.0-rc6-next-20181217+ #172 [ 214.152742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.152748] Call Trace: [ 214.152766] dump_stack+0x244/0x39d [ 214.152786] ? dump_stack_print_info.cold.1+0x20/0x20 [ 214.152801] ? printk+0xa7/0xcf [ 214.152817] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 214.152842] print_address_description.cold.4+0x9/0x1ff [ 214.186933] ? fpstate_init+0x50/0x160 [ 214.190845] kasan_report.cold.5+0x1b/0x39 [ 214.195094] ? fpstate_init+0x50/0x160 [ 214.198996] ? fpstate_init+0x50/0x160 [ 214.202897] check_memory_region+0x13e/0x1b0 [ 214.207316] memset+0x23/0x40 [ 214.210436] fpstate_init+0x50/0x160 [ 214.214190] kvm_arch_vcpu_init+0x3e9/0x870 [ 214.218535] kvm_vcpu_init+0x2fa/0x420 [ 214.222445] ? vcpu_stat_get+0x300/0x300 [ 214.226518] ? kmem_cache_alloc+0x33f/0x730 [ 214.230863] vmx_create_vcpu+0x1b7/0x2695 [ 214.235026] ? perf_trace_sched_process_exec+0x860/0x860 [ 214.240486] ? do_raw_spin_unlock+0xa7/0x330 [ 214.244911] ? vmx_exec_control+0x210/0x210 [ 214.249252] ? kasan_check_write+0x14/0x20 [ 214.253498] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 214.258436] ? futex_wait_queue_me+0x55d/0x840 [ 214.263031] ? wait_for_completion+0x8a0/0x8a0 [ 214.267627] ? print_usage_bug+0xc0/0xc0 [ 214.271713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.277274] ? get_futex_value_locked+0xcb/0xf0 [ 214.281955] kvm_arch_vcpu_create+0xe5/0x220 [ 214.286395] ? kvm_arch_vcpu_free+0x90/0x90 [ 214.290749] kvm_vm_ioctl+0x526/0x2030 [ 214.294650] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 214.299766] ? futex_wait+0x5ec/0xa50 [ 214.303578] ? kvm_unregister_device_ops+0x70/0x70 [ 214.308543] ? mark_held_locks+0x130/0x130 [ 214.312796] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 214.317999] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 214.323116] ? futex_wake+0x304/0x760 [ 214.326940] ? __lock_acquire+0x62f/0x4c20 [ 214.331206] ? mark_held_locks+0x130/0x130 [ 214.335457] ? graph_lock+0x270/0x270 [ 214.339266] ? do_futex+0x249/0x26d0 [ 214.343039] ? find_held_lock+0x36/0x1c0 [ 214.347125] ? __fget+0x4aa/0x740 [ 214.350592] ? lock_downgrade+0x900/0x900 [ 214.354748] ? check_preemption_disabled+0x48/0x280 [ 214.359781] ? kasan_check_read+0x11/0x20 [ 214.363943] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 214.369237] ? rcu_read_unlock_special+0x370/0x370 [ 214.374224] ? __fget+0x4d1/0x740 [ 214.377707] ? ksys_dup3+0x680/0x680 [ 214.381452] ? __might_fault+0x12b/0x1e0 [ 214.385530] ? lock_downgrade+0x900/0x900 [ 214.389702] ? lock_release+0xa00/0xa00 [ 214.393725] ? perf_trace_sched_process_exec+0x860/0x860 [ 214.399188] ? kvm_unregister_device_ops+0x70/0x70 [ 214.404168] do_vfs_ioctl+0x1de/0x1790 [ 214.408101] ? ioctl_preallocate+0x300/0x300 [ 214.412522] ? __fget_light+0x2e9/0x430 [ 214.416505] ? fget_raw+0x20/0x20 [ 214.419967] ? _copy_to_user+0xc8/0x110 [ 214.423964] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 214.429529] ? put_timespec64+0x10f/0x1b0 [ 214.433701] ? nsecs_to_jiffies+0x30/0x30 [ 214.437881] ? do_syscall_64+0x9a/0x820 [ 214.441871] ? do_syscall_64+0x9a/0x820 [ 214.445859] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 214.450455] ? security_file_ioctl+0x94/0xc0 [ 214.454880] ksys_ioctl+0xa9/0xd0 [ 214.458345] __x64_sys_ioctl+0x73/0xb0 [ 214.462266] do_syscall_64+0x1b9/0x820 [ 214.466198] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 214.471609] ? syscall_return_slowpath+0x5e0/0x5e0 [ 214.476555] ? trace_hardirqs_on_caller+0x310/0x310 [ 214.481583] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 214.486609] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 214.493295] ? __switch_to_asm+0x40/0x70 [ 214.497373] ? __switch_to_asm+0x34/0x70 [ 214.501454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 214.506308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.511520] RIP: 0033:0x457669 [ 214.514724] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 214.533627] RSP: 002b:00007f43e295dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.541337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 214.548604] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 214.555871] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 214.563153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43e295e6d4 [ 214.570420] R13: 00000000004c00ff R14: 00000000004d1170 R15: 00000000ffffffff [ 214.577708] [ 214.579337] Allocated by task 8787: [ 214.582965] save_stack+0x43/0xd0 [ 214.586415] kasan_kmalloc+0xcb/0xd0 [ 214.590130] kasan_slab_alloc+0x12/0x20 [ 214.594104] kmem_cache_alloc+0x130/0x730 [ 214.598249] vmx_create_vcpu+0x110/0x2695 [ 214.602417] kvm_arch_vcpu_create+0xe5/0x220 [ 214.606826] kvm_vm_ioctl+0x526/0x2030 [ 214.610717] do_vfs_ioctl+0x1de/0x1790 [ 214.614607] ksys_ioctl+0xa9/0xd0 [ 214.618057] __x64_sys_ioctl+0x73/0xb0 [ 214.621944] do_syscall_64+0x1b9/0x820 [ 214.625956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.631134] [ 214.632760] Freed by task 0: [ 214.635766] (stack is not available) [ 214.639471] [ 214.641096] The buggy address belongs to the object at ffff8881b614ab80 [ 214.641096] which belongs to the cache x86_fpu of size 832 [ 214.653406] The buggy address is located 64 bytes inside of [ 214.653406] 832-byte region [ffff8881b614ab80, ffff8881b614aec0) [ 214.665191] The buggy address belongs to the page: [ 214.670126] page:ffffea0006d85280 count:1 mapcount:0 mapping:ffff8881d5035e00 index:0x0 [ 214.678264] flags: 0x2fffc0000000200(slab) [ 214.682503] raw: 02fffc0000000200 ffff8881d5032c48 ffff8881d5032c48 ffff8881d5035e00 [ 214.690385] raw: 0000000000000000 ffff8881b614a040 0000000100000004 0000000000000000 [ 214.698258] page dumped because: kasan: bad access detected [ 214.703954] [ 214.705574] Memory state around the buggy address: [ 214.710499] ffff8881b614ad80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 214.717855] ffff8881b614ae00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 214.725229] >ffff8881b614ae80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 214.732580] ^ [ 214.738114] ffff8881b614af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.745470] ffff8881b614af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.752820] ================================================================== [ 214.760171] Disabling lock debugging due to kernel taint [ 214.792209] Kernel panic - not syncing: panic_on_warn set ... [ 214.798139] CPU: 1 PID: 8787 Comm: syz-executor2 Tainted: G B 4.20.0-rc6-next-20181217+ #172 [ 214.808014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.817362] Call Trace: [ 214.819955] dump_stack+0x244/0x39d [ 214.823593] ? dump_stack_print_info.cold.1+0x20/0x20 [ 214.828799] ? fpstate_init+0x30/0x160 [ 214.832701] panic+0x2ad/0x632 [ 214.835901] ? add_taint.cold.5+0x16/0x16 [ 214.840057] ? preempt_schedule+0x4d/0x60 [ 214.844229] ? ___preempt_schedule+0x16/0x18 [ 214.848642] ? trace_hardirqs_on+0xb4/0x310 [ 214.852968] ? fpstate_init+0x50/0x160 [ 214.856871] end_report+0x47/0x4f [ 214.860331] kasan_report.cold.5+0xe/0x39 [ 214.864480] ? fpstate_init+0x50/0x160 [ 214.868372] ? fpstate_init+0x50/0x160 [ 214.872264] check_memory_region+0x13e/0x1b0 [ 214.876672] memset+0x23/0x40 [ 214.879790] fpstate_init+0x50/0x160 [ 214.883517] kvm_arch_vcpu_init+0x3e9/0x870 [ 214.887847] kvm_vcpu_init+0x2fa/0x420 [ 214.891751] ? vcpu_stat_get+0x300/0x300 [ 214.895833] ? kmem_cache_alloc+0x33f/0x730 [ 214.900705] vmx_create_vcpu+0x1b7/0x2695 [ 214.904866] ? perf_trace_sched_process_exec+0x860/0x860 [ 214.910319] ? do_raw_spin_unlock+0xa7/0x330 [ 214.914737] ? vmx_exec_control+0x210/0x210 [ 214.919065] ? kasan_check_write+0x14/0x20 [ 214.923305] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 214.928232] ? futex_wait_queue_me+0x55d/0x840 [ 214.932813] ? wait_for_completion+0x8a0/0x8a0 [ 214.937381] ? print_usage_bug+0xc0/0xc0 [ 214.941430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 214.946951] ? get_futex_value_locked+0xcb/0xf0 [ 214.951608] kvm_arch_vcpu_create+0xe5/0x220 [ 214.956010] ? kvm_arch_vcpu_free+0x90/0x90 [ 214.960327] kvm_vm_ioctl+0x526/0x2030 [ 214.964202] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 214.969304] ? futex_wait+0x5ec/0xa50 [ 214.973093] ? kvm_unregister_device_ops+0x70/0x70 [ 214.978014] ? mark_held_locks+0x130/0x130 [ 214.982236] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 214.987410] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 214.992506] ? futex_wake+0x304/0x760 [ 214.996317] ? __lock_acquire+0x62f/0x4c20 [ 215.000543] ? mark_held_locks+0x130/0x130 [ 215.004775] ? graph_lock+0x270/0x270 [ 215.008569] ? do_futex+0x249/0x26d0 [ 215.012287] ? find_held_lock+0x36/0x1c0 [ 215.016335] ? __fget+0x4aa/0x740 [ 215.019778] ? lock_downgrade+0x900/0x900 [ 215.023911] ? check_preemption_disabled+0x48/0x280 [ 215.028912] ? kasan_check_read+0x11/0x20 [ 215.033044] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 215.038349] ? rcu_read_unlock_special+0x370/0x370 [ 215.043277] ? __fget+0x4d1/0x740 [ 215.046722] ? ksys_dup3+0x680/0x680 [ 215.050423] ? __might_fault+0x12b/0x1e0 [ 215.054469] ? lock_downgrade+0x900/0x900 [ 215.058602] ? lock_release+0xa00/0xa00 [ 215.062574] ? perf_trace_sched_process_exec+0x860/0x860 [ 215.068021] ? kvm_unregister_device_ops+0x70/0x70 [ 215.072947] do_vfs_ioctl+0x1de/0x1790 [ 215.076837] ? ioctl_preallocate+0x300/0x300 [ 215.081239] ? __fget_light+0x2e9/0x430 [ 215.085196] ? fget_raw+0x20/0x20 [ 215.088640] ? _copy_to_user+0xc8/0x110 [ 215.092600] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 215.098126] ? put_timespec64+0x10f/0x1b0 [ 215.102256] ? nsecs_to_jiffies+0x30/0x30 [ 215.106403] ? do_syscall_64+0x9a/0x820 [ 215.110360] ? do_syscall_64+0x9a/0x820 [ 215.114334] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 215.118904] ? security_file_ioctl+0x94/0xc0 [ 215.123300] ksys_ioctl+0xa9/0xd0 [ 215.126751] __x64_sys_ioctl+0x73/0xb0 [ 215.130637] do_syscall_64+0x1b9/0x820 [ 215.134522] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 215.139884] ? syscall_return_slowpath+0x5e0/0x5e0 [ 215.144803] ? trace_hardirqs_on_caller+0x310/0x310 [ 215.149806] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 215.154809] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 215.161459] ? __switch_to_asm+0x40/0x70 [ 215.165514] ? __switch_to_asm+0x34/0x70 [ 215.169577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 215.174417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.179603] RIP: 0033:0x457669 [ 215.182779] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 215.201662] RSP: 002b:00007f43e295dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.209349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 215.216628] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 215.223882] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 215.231131] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43e295e6d4 [ 215.238382] R13: 00000000004c00ff R14: 00000000004d1170 R15: 00000000ffffffff [ 215.246649] Kernel Offset: disabled [ 215.250272] Rebooting in 86400 seconds..