[info] Using makefile-style concurrent boot in runlevel 2. [ 24.471970] audit: type=1800 audit(1539430408.101:21): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [ 24.499169] audit: type=1800 audit(1539430408.111:22): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2447 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. 2018/10/13 11:33:46 fuzzer started 2018/10/13 11:33:48 dialing manager at 10.128.0.26:34537 2018/10/13 11:33:49 syscalls: 1 2018/10/13 11:33:49 code coverage: enabled 2018/10/13 11:33:49 comparison tracing: enabled 2018/10/13 11:33:49 setuid sandbox: enabled 2018/10/13 11:33:49 namespace sandbox: enabled 2018/10/13 11:33:49 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/13 11:33:49 fault injection: enabled 2018/10/13 11:33:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/13 11:33:49 net packed injection: enabled 2018/10/13 11:33:49 net device setup: enabled 11:37:06 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000000680)}) syzkaller login: [ 242.941581] IPVS: ftp: loaded support on port[0] = 21 11:37:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='trusted\x00', &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000800), &(0x7f0000000840)=0x8) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) epoll_create(0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x11, 0x1}, 0x14) [ 243.213087] IPVS: ftp: loaded support on port[0] = 21 11:37:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="000000000c000000000000000800010073667100480002000000000000190000000000000000010000000000000000000000000000000400000000000000000000000000090000000000000000000000000000000000000000000000c48044f78441add89a95f7643b8773a862f29f67d46962194f0c7fa4f91b0e67a2e916c41fbcb51ed08b889bc32da58f45d29450c5d719fb3837e9770aec7dd56dbaced6f87e0411a6e319344f9b8c97b12efdceb2a51c67a73a1b15c35517b494bdeee5df26db0723ee2c956e7b4017a5e93597345a1088d091ea46bb"], 0x1}}, 0x0) [ 243.466324] IPVS: ftp: loaded support on port[0] = 21 11:37:07 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000340)) ioctl$TIOCSTI(r0, 0x5412, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280), 0x4) [ 243.945174] IPVS: ftp: loaded support on port[0] = 21 11:37:07 executing program 4: r0 = socket$inet(0x2, 0x4008000000000001, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r0, &(0x7f0000000900), 0x0, 0x20000800, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) [ 244.417773] IPVS: ftp: loaded support on port[0] = 21 [ 244.728497] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.749431] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.770881] device bridge_slave_0 entered promiscuous mode 11:37:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) fanotify_mark(0xffffffffffffffff, 0x0, 0x40010002, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') [ 244.937374] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.952629] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.965046] device bridge_slave_1 entered promiscuous mode [ 245.113290] IPVS: ftp: loaded support on port[0] = 21 [ 245.122101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 245.131586] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.144548] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.162816] device bridge_slave_0 entered promiscuous mode [ 245.271753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 245.321533] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.349828] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.364895] device bridge_slave_1 entered promiscuous mode [ 245.532442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 245.653155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 245.723889] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 245.819313] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 245.899774] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.916473] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.925353] device bridge_slave_0 entered promiscuous mode [ 246.025901] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.039615] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.047554] device bridge_slave_1 entered promiscuous mode [ 246.064632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 246.084373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.108335] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.172050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.219281] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.263110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 246.279536] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.318350] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.332928] device bridge_slave_0 entered promiscuous mode [ 246.378238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 246.401906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.459842] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.481219] team0: Port device team_slave_0 added [ 246.505007] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.511373] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.538974] device bridge_slave_1 entered promiscuous mode [ 246.551379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 246.567861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.595067] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.601434] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.612861] device bridge_slave_0 entered promiscuous mode [ 246.630384] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.675363] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.685629] team0: Port device team_slave_1 added [ 246.693051] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.699499] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.723461] device bridge_slave_1 entered promiscuous mode [ 246.736567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.766780] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.834404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.892488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.902349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 246.927618] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.952531] team0: Port device team_slave_0 added [ 246.958278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.059768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 247.076435] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 247.092914] team0: Port device team_slave_1 added [ 247.108914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 247.133006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.145068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.217500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 247.252157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.262997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.284476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.302486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.318483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 247.353960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.370122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.383501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.393187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.415920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 247.426818] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.465738] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.484058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.507664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.544663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 247.562026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.580121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.600964] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.634074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.662326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.676972] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 247.689818] team0: Port device team_slave_0 added [ 247.699935] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.707170] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.716581] device bridge_slave_0 entered promiscuous mode [ 247.777349] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 247.803314] team0: Port device team_slave_1 added [ 247.865818] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.875167] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.883069] device bridge_slave_1 entered promiscuous mode [ 247.913784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.012837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.023231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 248.148278] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 248.157505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.169249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.203982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 248.242070] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.250356] team0: Port device team_slave_0 added [ 248.265174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 248.280697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.292653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.334307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.343604] team0: Port device team_slave_0 added [ 248.422021] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.430466] team0: Port device team_slave_1 added [ 248.461991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.500707] team0: Port device team_slave_1 added [ 248.576916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.600113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.622043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.637009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.647871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.661038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.675417] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 248.724583] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.731081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.738117] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.744534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.779360] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 248.788941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 248.804118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.816410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.844698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 248.883530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.946021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 248.968123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.978041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.995154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 249.020510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.052397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.090720] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.097143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.103875] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.110259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.137847] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 249.145097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.154664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.167860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.182450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 249.197369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.213854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.232281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.240149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.277570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.286508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.545245] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 249.567819] team0: Port device team_slave_0 added [ 249.669913] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 249.688368] team0: Port device team_slave_1 added [ 249.828773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.853737] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.860118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.866858] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.873283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.902911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 250.000582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.104408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 250.111567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.119793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.164498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.222886] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 250.250132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.267662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.544403] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.550799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.557528] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.563945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.583288] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 250.601767] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.608144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.614875] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.621256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.652573] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 251.172905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.180156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.746549] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.753724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.760395] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.766820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.802328] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 252.181787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.232982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.292064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.744148] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 254.766989] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 254.935212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.222883] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 255.229072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.242369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.262796] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 255.270354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.302357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.410385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.534168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.650768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.684117] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.814720] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.935577] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 255.959762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.967100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.073191] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.101503] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.383285] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.562224] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.580640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.588276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.597515] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.617874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.628395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.943982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.044104] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.067679] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.466784] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 257.967659] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.974266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.983463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.395237] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.654592] hrtimer: interrupt took 33402 ns 11:37:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='trusted\x00', &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000800), &(0x7f0000000840)=0x8) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) epoll_create(0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x11, 0x1}, 0x14) [ 258.696901] binder: 7011:7023 transaction failed 29189/-22, size 0-0 line 2834 11:37:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002f002908000000000c0094000400000000000000000000000000"], 0x1}}, 0x0) 11:37:22 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) io_setup(0x7fff, &(0x7f0000000280)=0x0) io_submit(r2, 0xb6a04a8, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000400)}]) 11:37:22 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40107447, &(0x7f0000000080)) 11:37:22 executing program 1: socket$inet(0x10, 0x3, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000740)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300)}]) 11:37:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) [ 259.512943] binder: 7011:7023 transaction failed 29189/-22, size 0-0 line 2834 [ 259.542021] binder: undelivered TRANSACTION_ERROR: 29189 [ 259.548531] binder: undelivered TRANSACTION_ERROR: 29189 11:37:23 executing program 0: syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = getpgid(0x0) getpgrp(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r2 = open(&(0x7f0000000480)='./file0\x00', 0x42042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000200)) write(r2, &(0x7f0000000840)="fc015002a2a55e34dab67b7517766f3188a613b48bef6d2a2999d8da9474917335f8e2f9da2a75722ec004a5e6e244499c012b7a80b129b96d8fa518fef1eecc7743f4d9e96018d4ded15ff21514c13fa444e6f7fee6c2516c91723bf3646a5803887e502f26fc7cfd736ef2c5", 0x6d) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r2, r2, &(0x7f00000000c0)=0x2, 0x8080ffffff10) socket$nl_netfilter(0x10, 0x3, 0xc) 11:37:23 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000e01f5ffffff000000000000000000001c000000000000387ed30000acbf6d51817a"], 0x1}}, 0x0) 11:37:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000640)='y\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb40c559144c82e4eec619f721ffbc393223213db390217acfd5bdb3fe8820a24d2718cbd8633313b222e16be196f3b813174f20ed3ec1971ecacf7703ef6e859da62"], 0xd2) write$P9_RREMOVE(r1, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00', &(0x7f00000002c0)="74086e750000000000000000008c00"]) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) fsetxattr$security_evm(r1, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="05010c0000000081007f41c695416c564c1e0e7b7a3dd5e587dacbc2fb6d44a475e624172429b4996592020ad4c3ae095fe7ea6ff559a1c77529a5469817845ce3f0c9ab51f5418bdd980a97816b947d08ce4ef23833212e924d9d23c300100000000000005ccd289258798e42b539b31afd088cc3cdf2b8e5f292d6344c94f1093db3fddfead4d9ac898daac9ac938400282c3ac78e109d970e45f545f727b641d8b9"], 0x1, 0x0) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) flistxattr(r1, &(0x7f0000000380)=""/249, 0xf9) write$P9_RVERSION(r1, &(0x7f0000000880)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 11:37:23 executing program 3: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) clock_gettime(0x3, &(0x7f0000000040)) 11:37:23 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x2000000, 0x100000010a0101fe) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r1, 0x0, 0x4) [ 260.576276] kauditd_printk_skb: 8 callbacks suppressed [ 260.576291] audit: type=1804 audit(1539430644.211:31): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir608212359/syzkaller.vgOquL/1/file0/file0" dev="sda1" ino=16527 res=1 [ 260.654263] audit: type=1804 audit(1539430644.211:32): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir608212359/syzkaller.vgOquL/1/file0/file0" dev="sda1" ino=16527 res=1 11:37:24 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) 11:37:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x3, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x4) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000200)=""/205) 11:37:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb40c559144c82e4eec619f721ffbc393223213db390217acfd5bdb3fe8820a24d2718cbd8633313b222e16be196f3b813174f20ed3ec1971ecacf7703ef6e859da62"], 0xd2) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00', &(0x7f00000002c0)="74086e750000000000000000008c00"]) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) fsetxattr$security_evm(r1, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="05010c0000000081007f41c695416c564c1e0e7b7a3dd5e587dacbc2fb6d44a475e624172429b4996592020ad4c3ae095fe7ea6ff559a1c77529a5469817845ce3f0c9ab51f5418bdd980a97816b947d08ce4ef23833212e924d9d23c300100000000000005ccd289258798e42b539b31afd088cc3cdf2b8e5f292d6344c94f1093db3fddfead4d9ac898daac9ac938400282c3ac78e109d970e45f545f727b641d8b9"], 0x1, 0x0) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) flistxattr(r1, &(0x7f0000000380)=""/249, 0xf9) write$P9_RVERSION(r1, &(0x7f0000000880)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 11:37:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 11:37:24 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fe81007a0af0fff8fffffd79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000008000000b7050000020000006a0a00fe000000078500000032000000b7000000000000009500040000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 11:37:24 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') clone(0x80002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x74, 0x0, 0x0, 0xdae6}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000000c0)=""/199) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'raw\x00'}, &(0x7f0000000040)=0x54) 11:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 11:37:24 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000012000)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000e000)={r0, &(0x7f0000000000), &(0x7f000000c000)="02"}, 0x20) 11:37:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000140)}) 11:37:24 executing program 3: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000c00)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$mice(&(0x7f0000000900)='/dev/input/mice\x00', 0x0, 0x10081) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x10, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)) 11:37:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000640)='y\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00']) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) fsetxattr$security_evm(r1, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="05010c0000000081007f41c695416c564c1e0e7b7a3dd5e587dacbc2fb6d44a475e624172429b4996592020ad4c3ae095fe7ea6ff559a1c77529a5469817845ce3f0c9ab51f5418bdd980a97816b947d08ce4ef23833212e924d9d23c300100000000000005ccd289258798e42b539b31afd088cc3cdf2b8e5f292d6344c94f1093db3fddfead4d9ac898daac9ac938400282c3ac78e109d970e45f545f727b641"], 0x1, 0x0) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) flistxattr(r1, &(0x7f0000000380)=""/249, 0xf9) write$P9_RVERSION(r1, &(0x7f0000000880)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) [ 261.064708] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 261.103300] binder_alloc: 7224: binder_alloc_buf, no vma 11:37:24 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae478) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000080)) [ 261.108955] binder: 7224:7230 transaction failed 29189/-3, size 0-0 line 2973 11:37:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="c4e2d94558b166b824010f00d866ba4100b80de4c029efdb06c4c1bdd9736f0fc799faffffff66baf80cb8a8a5048aef66bafc0ced66b82a008ee8b8010000000f01d9c4e27917d5", 0x48}], 0x1, 0x20, &(0x7f0000000140), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$mice(&(0x7f0000000900)='/dev/input/mice\x00', 0x0, 0x10081) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x10, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)) 11:37:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000640)='y\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00']) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) fsetxattr$security_evm(r1, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="05010c0000000081007f41c695416c564c1e0e7b7a3dd5e587dacbc2fb6d44a475e624172429b4996592020ad4c3ae095fe7ea6ff559a1c77529a5469817845ce3f0c9ab51f5418bdd980a97816b947d08ce4ef23833212e924d9d23c300100000000000005ccd289258798e42b539b31afd088cc3cdf2b8e5f292d6344c94f1093db3fddfead4d9ac898daac9ac938400282c3ac78e109d970e45f545f727b641"], 0x1, 0x0) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) flistxattr(r1, &(0x7f0000000380)=""/249, 0xf9) write$P9_RVERSION(r1, &(0x7f0000000880)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) [ 261.306304] binder: undelivered TRANSACTION_ERROR: 29189 11:37:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000640)='y\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb40c559144c82e4eec619f721ffbc393223213db390217acfd5bdb3fe8820a24d2718cbd8633313b222e16be196f3b813174f20ed3ec1971ecacf7703ef6e859da62"], 0xd2) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00', &(0x7f00000002c0)="74086e750000000000000000008c00"]) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) fsetxattr$security_evm(r1, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="05010c0000000081007f41c695416c564c1e0e7b7a3dd5e587dacbc2fb6d44a475e624172429b4996592020ad4c3ae095fe7ea6ff559a1c77529a5469817845ce3f0c9ab51f5418bdd980a97816b947d08ce4ef23833212e924d9d23c300100000000000005ccd289258798e42b539b31afd088cc3cdf2b8e5f292d6344c94f1093db3fddfead4d9ac898daac9ac938400282c3ac78e109d970e45f545f727b641d8b9"], 0x1, 0x0) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) flistxattr(r1, &(0x7f0000000380)=""/249, 0xf9) write$P9_RVERSION(r1, &(0x7f0000000880)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 11:37:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) read(r0, &(0x7f0000000380)=""/42, 0xf0) 11:37:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 11:37:25 executing program 0: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)="7ff6d735cd872ec88466") r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x8) 11:37:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x11000000000b) r1 = accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) sendmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000001980)=@can, 0x80, &(0x7f0000001ac0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000000000000840000000500611a"], 0x10}}], 0x1, 0x0) 11:37:25 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000012000), &(0x7f000000cff6)}, 0x20) 11:37:25 executing program 3: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000240), &(0x7f0000000140)='.', &(0x7f0000000340)='ext4\x00', 0x3002480, &(0x7f0000000700)) 11:37:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2000000, &(0x7f00000002c0)={[{@noinline_xattr='noinline_xattr'}], [{@pcr={'pcr', 0x3d, 0x1a}}]}) 11:37:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x801) write$eventfd(r0, &(0x7f0000000080)=0x8001, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x802}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000480)=0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x8) r3 = socket$kcm(0x11, 0x2, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) close(r3) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0xc008240a, 0x0) [ 262.132903] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 262.162174] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 262.241845] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 262.301187] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 11:37:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="c4e2d94558b166b824010f00d866ba4100b80de4c029efdb06c4c1bdd9736f0fc799faffffff66baf80cb8a8a5048aef66bafc0ced66b82a008ee8b8010000000f01d9c4e27917d5", 0x48}], 0x1, 0x20, &(0x7f0000000140), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$mice(&(0x7f0000000900)='/dev/input/mice\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x10, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)) 11:37:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000640)='y\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb40c559144c82e4eec619f721ffbc393223213db390217acfd5bdb3fe8820a24d2718cbd8633313b222e16be196f3b813174f20ed3ec1971ecacf7703ef6e859da62"], 0xd2) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00', &(0x7f00000002c0)="74086e750000000000000000008c00"]) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) fsetxattr$security_evm(r1, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="05010c0000000081007f41c695416c564c1e0e7b7a3dd5e587dacbc2fb6d44a475e624172429b4996592020ad4c3ae095fe7ea6ff559a1c77529a5469817845ce3f0c9ab51f5418bdd980a97816b947d08ce4ef23833212e924d9d23c300100000000000005ccd289258798e42b539b31afd088cc3cdf2b8e5f292d6344c94f1093db3fddfead4d9ac898daac9ac938400282c3ac78e109d970e45f545f727b641d8b9"], 0x1, 0x0) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) flistxattr(r1, &(0x7f0000000380)=""/249, 0xf9) write$P9_RVERSION(r1, &(0x7f0000000880)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) [ 262.396863] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 262.413387] device nr0 entered promiscuous mode [ 262.418763] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 11:37:26 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={[{@usrjquota={'usrjquota', 0x3d, ')'}}, {@noinline_xattr='noinline_xattr'}], [{@pcr={'pcr'}}, {@smackfshat={'smackfshat'}}]}) [ 262.474143] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 262.565956] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 262.744664] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 11:37:26 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000300)='./file0\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x20141042, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18}, 0x18) ftruncate(r0, 0x28007d) [ 262.881850] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 11:37:26 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={[{@usrjquota={'usrjquota', 0x3d, ')'}}, {@noinline_xattr='noinline_xattr'}], [{@pcr={'pcr'}}, {@smackfshat={'smackfshat'}}]}) [ 263.003744] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.075165] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 11:37:26 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000640)='y\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb40c559144c82e4eec619f721ffbc393223213db390217acfd5bdb3fe8820a24d2718cbd8633313b222e16be196f3b813174f20ed3ec1971ecacf7703ef6e859da62"], 0xd2) write$P9_RREMOVE(r1, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00', &(0x7f00000002c0)="74086e750000000000000000008c00"]) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) write$P9_RLCREATE(r1, &(0x7f0000000780)={0x18, 0xf, 0x1, {{0x2, 0x3, 0x4}, 0xe8c}}, 0x18) fsetxattr$security_evm(r1, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="05010c0000000081007f41c695416c564c1e0e7b7a3dd5e587dacbc2fb6d44a475e624172429b4996592020ad4c3ae095fe7ea6ff559a1c77529a5469817845ce3f0c9ab51f5418bdd980a97816b947d08ce4ef23833212e924d9d23c300100000000000005ccd289258798e42b539b31afd088cc3cdf2b8e5f292d6344c94f1093db3fddfead4d9ac898daac9ac938400282c3ac78e109d970e45f545f727b641d8b9"], 0x1, 0x0) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) write$P9_RVERSION(r1, &(0x7f0000000880)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) [ 263.152059] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.159244] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 263.171741] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.194690] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 263.211298] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 11:37:26 executing program 0: 11:37:27 executing program 1: [ 263.301774] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 11:37:27 executing program 0: [ 263.380413] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.475267] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 263.487301] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 11:37:27 executing program 0: [ 263.566355] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 11:37:27 executing program 1: [ 263.617058] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.629455] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.676406] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 263.705196] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 11:37:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="c4e2d94558b166b824010f00d866ba4100b80de4c029efdb06c4c1bdd9736f0fc799faffffff66baf80cb8a8a5048aef66bafc0ced66b82a008ee8b8010000000f01d9c4e27917d5", 0x48}], 0x1, 0x20, &(0x7f0000000140), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$mice(&(0x7f0000000900)='/dev/input/mice\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x10, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)) [ 263.731357] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.732227] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.760347] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 11:37:27 executing program 2: 11:37:27 executing program 1: [ 263.775668] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 263.790947] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.801527] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 11:37:27 executing program 4: 11:37:27 executing program 2: 11:37:27 executing program 1: 11:37:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000640)='y\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb40c559144c82e4eec619f721ffbc393223213db390217acfd5bdb3fe8820a24d2718cbd8633313b222e16be196f3b813174f20ed3ec1971ecacf7703ef6e859da62"], 0xd2) write$P9_RREMOVE(r1, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00', &(0x7f00000002c0)="74086e750000000000000000008c00"]) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) timerfd_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) sysinfo(&(0x7f0000000680)=""/169) write$P9_RLCREATE(r1, &(0x7f0000000780)={0x18, 0xf, 0x1, {{0x2, 0x3, 0x4}, 0xe8c}}, 0x18) fsetxattr$security_evm(r1, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="05010c0000000081007f41c695416c564c1e0e7b7a3dd5e587dacbc2fb6d44a475e624172429b4996592020ad4c3ae095fe7ea6ff559a1c77529a5469817845ce3f0c9ab51f5418bdd980a97816b947d08ce4ef23833212e924d9d23c300100000000000005ccd289258798e42b539b31afd088cc3cdf2b8e5f292d6344c94f1093db3fddfead4d9ac898daac9ac938400282c3ac78e109d970e45f545f727b641d8b9"], 0x1, 0x0) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) write$P9_RVERSION(r1, &(0x7f0000000880)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 11:37:27 executing program 3: 11:37:27 executing program 1: 11:37:27 executing program 2: 11:37:27 executing program 3: 11:37:27 executing program 4: 11:37:28 executing program 0: 11:37:28 executing program 2: 11:37:28 executing program 1: 11:37:28 executing program 3: 11:37:28 executing program 4: 11:37:28 executing program 5: 11:37:28 executing program 5: 11:37:28 executing program 1: 11:37:28 executing program 2: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)=0xffffffffffffffff, 0x4) close(r0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000100)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xb) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6609, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000640)=ANY=[]) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000440)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, {0xa, 0x80, 0x7, @mcast1, 0x80000001}}}, 0x80, &(0x7f00000002c0)}, 0x40000) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000004c0)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)) 11:37:28 executing program 3: 11:37:28 executing program 4: 11:37:28 executing program 3: 11:37:28 executing program 0: 11:37:28 executing program 1: 11:37:28 executing program 5: 11:37:28 executing program 4: 11:37:28 executing program 3: 11:37:28 executing program 4: 11:37:28 executing program 2: 11:37:28 executing program 5: 11:37:28 executing program 1: 11:37:28 executing program 0: 11:37:29 executing program 5: 11:37:29 executing program 3: 11:37:29 executing program 2: 11:37:29 executing program 1: 11:37:29 executing program 4: 11:37:29 executing program 0: 11:37:29 executing program 1: 11:37:29 executing program 2: 11:37:29 executing program 3: 11:37:29 executing program 5: 11:37:29 executing program 4: 11:37:29 executing program 0: 11:37:29 executing program 2: 11:37:29 executing program 1: 11:37:29 executing program 5: 11:37:29 executing program 3: 11:37:29 executing program 4: 11:37:29 executing program 0: 11:37:29 executing program 2: 11:37:29 executing program 1: 11:37:29 executing program 5: 11:37:29 executing program 3: 11:37:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) dup2(r0, r1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)) 11:37:29 executing program 0: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000002840), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x8) r1 = getpid() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r1) tkill(r1, 0x33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000000000), 0x6, &(0x7f00000002c0)) 11:37:29 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0x3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r2, 0x10, &(0x7f00000008c0)={&(0x7f0000000800)=""/151, 0x97, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r3, 0x4) perf_event_open(&(0x7f00000006c0)={0x0, 0x70, 0x0, 0xff, 0x0, 0x8, 0x0, 0x846, 0x4000, 0x0, 0x0, 0x4352d287, 0x20, 0x0, 0x60000000, 0x4, 0x95, 0x80, 0x3, 0x6, 0x701, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x101, 0x0, 0x7, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x8, 0x8, 0x0, 0xe8, 0x7, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x0, 0x5, 0x1, 0x0, 0x80, 0xbd5, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000780)={0x5, 0x70, 0x80, 0x9, 0x0, 0x8000, 0x0, 0x0, 0x80, 0x5, 0x9d, 0x0, 0x5, 0x706966dc, 0x7fffffff, 0x4, 0x401, 0x9bc6, 0x6, 0x1, 0x400, 0x7fffffff, 0x3, 0x3, 0x0, 0x7fff, 0x24000000000, 0x29, 0xfffffffffffffffd, 0x7, 0x2, 0xb64d, 0x8001, 0x0, 0x1915, 0x800, 0xd4, 0x7, 0x0, 0x5cf0, 0x2, @perf_config_ext={0x1, 0xbdd}, 0x20004, 0x100, 0x7ff, 0x7, 0x1, 0x5}) 11:37:29 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)) shutdown(r0, 0x0) 11:37:29 executing program 1: 11:37:29 executing program 2: 11:37:29 executing program 3: recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000016c0)={&(0x7f0000001500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)=""/94, 0x5e}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffff1, 0x40) 11:37:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) r1 = eventfd(0x0) dup2(r0, r1) ioctl$KDSETLED(r1, 0x4b32, 0x0) 11:37:29 executing program 2: r0 = socket$inet6(0x10, 0x8000000000000002, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="5500000018007f5300fe01b2a4a280930a60000000a8430291000000390009002300feff010000000d000500000000000000c78b80082314e9030b9d5668477b85b167320b00dc1338d54400009b84136ef75afb83", 0x55}], 0x1, &(0x7f0000000280)}, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000200)) 11:37:29 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000080)='cm\x00') 11:37:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) 11:37:30 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000040)='proc\x00') fcntl$getflags(0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) [ 266.538079] syz-executor5 (7503) used greatest stack depth: 12792 bytes left 11:37:30 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000040)='proc\x00') fcntl$getflags(0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:30 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sched_setaffinity(0x0, 0xfffffffffffffdb4, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/62, 0x3e}}], 0x300, 0x62, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x0, &(0x7f0000000580)) 11:37:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000f00)='/dev/loop#\x00', 0x0, 0x100000105082) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x400, 0x10000}) 11:37:30 executing program 5: epoll_create1(0x0) socket$inet6(0x10, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000001c0), &(0x7f0000000140)=0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@rand_addr, 0x0, 0x4}}, 0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:37:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x9b2}) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$usbmon(&(0x7f00000004c0)='/dev/usbmon#\x00', 0x3ff, 0x100) setxattr$security_evm(&(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='security.evm\x00', &(0x7f0000000780)=@md5={0x1, "55d412274904d2a83c279c3dbf21ed04"}, 0x11, 0x1) r2 = creat(&(0x7f0000000500)='./file0\x00', 0x4a) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000680)={'broute\x00', 0x0, 0x3, 0xf8, [], 0x1, &(0x7f0000000300)=[{}], &(0x7f0000000580)=""/248}, &(0x7f0000000340)=0x78) r3 = dup2(r1, r2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000540)={r2, 0x7fff, 0x9, r3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x2000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80001000000006, 0x0, 0x6, 0x100000000000}, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x3) unshare(0x40000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r5, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000003c0)={{0x2, 0x0, @rand_addr}, {0x306, @local}, 0x0, {0x2, 0x0, @remote}, 'nr0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) ioctl$KVM_S390_VCPU_FAULT(r6, 0x4008ae52, &(0x7f0000000000)=0x7f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0}, &(0x7f0000000a80)=0xc) r8 = getuid() stat(&(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() fstat(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() lsetxattr$system_posix_acl(&(0x7f00000007c0)='./file1\x00', &(0x7f0000000a00)='system.posix_acl_default\x00', &(0x7f0000000f40)={{}, {0x1, 0x2}, [{0x2, 0x2, r7}, {0x2, 0x4, r8}, {0x2, 0x1}, {}, {0x2, 0x60f9b56b82c0cb83, r9}, {0x2, 0x1}, {0x2, 0x7}], {0x4, 0x1}, [{0x8, 0x6, r10}, {0x8, 0x3}, {0x8, 0x0, r11}, {0x8, 0x6, r12}, {0x8, 0x1, r13}], {0x10, 0x2}}, 0x84, 0x3) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x2, 0xffffffffffffffa1, [], 0x2, &(0x7f0000000800)=[{}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78) 11:37:30 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000040)='proc\x00') fcntl$getflags(0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:30 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fe81007a0af0fff8fffffd79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000008000000b7050000020000006a0a00fe000000078500000032000000b7000000000000009500040000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 11:37:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000002300)=ANY=[]) 11:37:30 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000040)='proc\x00') fcntl$getflags(0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:30 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sched_setaffinity(0x0, 0xfffffffffffffdb4, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/62, 0x3e}}], 0x300, 0x62, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x0, &(0x7f0000000580)) 11:37:31 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000040)='proc\x00') fcntl$getflags(0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) [ 267.420164] IPVS: ftp: loaded support on port[0] = 21 11:37:31 executing program 5: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) 11:37:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) 11:37:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@srh, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) pipe(&(0x7f0000000500)={0xffffffffffffffff}) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r1, 0x10, &(0x7f0000000480)={&(0x7f0000000440), 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r2, 0x4) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000540)) gettid() r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x80) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000004c0)={0x82, 0x964, &(0x7f0000000e00)="8b5d803c108db5d404ae14455706c80cf9dee63c1bc8c0bb84ae632c5a186d372a18d0126aaa24189783414f1fc11aefd3", &(0x7f0000000dc0)="8bf3bc7a45726d", 0x31, 0x7}) ftruncate(r3, 0x7) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@loopback, @in=@rand_addr}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f0000000c40)={0x4fb9d853, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000c00)={0x100000000000000, 0xb74, &(0x7f0000000ac0)="ca88b1980fb78ff43e614aad36ddd0cdfdb264b19ad3497d49c4f8845540d97cf54c60ae2a936142a70d3c0a1e33fb6d0c96a2e2767e8df9e2146ac2450d65fb61e8b1b7a43c94dd65296be1d9cf275291675765f48f62203b43a6bb18e57131873af6dcd8fa8b12d342d1a837c2b001257dd4095425383d8a16f451880f73226e4099a13e1d77205fdd4174ef4cd8b8ae6922874cbc24c06544102e51beebc4f470131e9905f904c52ca446a8f1ca21a68b3a2e4cf53b3296c31aee33adcaaf320550dcc5d2947aed0ad3236d92cffe92197bf3ec3dcd1b1d21", &(0x7f0000000bc0), 0xda}) 11:37:31 executing program 1: r0 = socket$inet6(0xa, 0x800000803, 0x40000000000001) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000280), 0x0) sendto$inet6(r2, &(0x7f00000002c0), 0xfffffffffffffd93, 0x0, &(0x7f0000000f00)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14}, 0x14}}, 0x2000c000) close(r2) 11:37:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb40c559144c82e4eec619f721ffbc393223213db390217acfd5bdb3fe8820a24d2718cbd8633313b222e16be196f3b813174f20ed3ec1971ecacf7703ef6e859da62"], 0xd2) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f00000002c0)="74086e750000000000000000008c00"]) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) prctl$setendian(0x14, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) keyctl$assume_authority(0x10, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in6=@remote}}, {{@in=@rand_addr}}}, &(0x7f0000000340)=0xe8) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/254, 0xfe}], 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$packet_buf(r2, 0x107, 0x0, &(0x7f0000000500)=""/156, &(0x7f00000002c0)=0x3a3c6ac7) keyctl$join(0x1, &(0x7f0000000000)) [ 267.902819] IPVS: ftp: loaded support on port[0] = 21 11:37:32 executing program 0: r0 = memfd_create(&(0x7f0000000100)='#em3#/\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') 11:37:32 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000040)='proc\x00') fcntl$getflags(0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:32 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x8004745a, &(0x7f0000000080)) 11:37:32 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000002840), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x8) r1 = getpid() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r1) tkill(r1, 0x33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000000000), 0x6, &(0x7f00000002c0)) 11:37:32 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 11:37:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x6140, &(0x7f0000002000/0x2000)=nil, 0x2) 11:37:32 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000040)='proc\x00') fcntl$getflags(0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:32 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 11:37:33 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40107447, &(0x7f0000000080)) 11:37:33 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000100)) fcntl$getflags(0xffffffffffffffff, 0x0) 11:37:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee5f, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) write$P9_RLCREATE(r1, &(0x7f00000001c0)={0x18}, 0x18) prctl$void(0x0) 11:37:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") flistxattr(r0, &(0x7f0000001680)=""/193, 0xc1) 11:37:33 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000040)='proc\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x4) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000200)=""/205) 11:37:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="c4e2d94558b166b824010f00d866ba4100b80de4c029efdb06c4c1bdd9736f0fc799faffffff66baf80cb8a8a5048aef66bafc0ced66b82a008ee8b8010000000f01d9c4e27917d5", 0x48}], 0x1, 0x20, &(0x7f0000000140), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$mice(&(0x7f0000000900)='/dev/input/mice\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000300)="67660f3a400300baf80c66b85fbeb78066efbafc0cb0e3eeba200066edc30f350f20e06635200000000f22e0660f3830b3708f3e0f060f01712166b9800000c00f326635000100000f30", 0x4a}], 0x1, 0x10, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)) 11:37:33 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) sysfs$1(0x1, &(0x7f0000000040)='proc\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/stat\x00') fstat(r0, &(0x7f0000000280)) 11:37:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080), 0x4) 11:37:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400005f, &(0x7f0000000340)=0xffffffff, 0xffffffffffffffe0) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendmsg(r1, &(0x7f0000000800)={&(0x7f00000003c0)=@generic={0x8, "69ccf24b32e223da997211d91f47fc108e6f5028be20c33dea2d022eba9f5a1e1c0605f56390c234cdec589ed02b5dfdd8a9de9cf337f3c3f1a0c2cbd36c6e4d7ea34573d13572fa21590bbf9b76381dfa39d6d1246b9f02fa50ab1298c9863ba5f79572b33d686d43ad62e8d2b2b83e4059442c3f131440a1bd5d387e1b"}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480), 0x0, 0x40}, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000004c0)={0x0, 0xfb, 0xb7, 0x7, 0x6, "8b5e732ed0afd6817f0ce08d71cca4db", "2e30954fc65438e303bab9000fc4d958c18888bcdfdef331058db0f9f45eb8e25a4e9505bba6dd9177c16ce7cbccbc92e43fe771cd45f0c32f4f37b98c2c9a4293efe302fd730e724c5081b1fac2178c298aed16cbebfbdf99ca48e9e76d8981936f8d680d7c1f469a7e88f44c5f611e043347ecfbe156da5fbabdbd1348102bc854818bb9632028bd14f9761f32c3f8c3f9423a5329087fb37297a7a8e0d7acc9d6"}, 0xb7, 0x2) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000330e10b0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x228, 0x228, 0x228, 0x228, 0x228, 0x3, &(0x7f0000000440), {[{{@ip={@multicast1, @local, 0xff000000, 0xffffffff, '\x00', 'team_slave_0\x00', {}, {}, 0x5d, 0x2}, 0x0, 0x98, 0xb8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast1, @empty, 0x0, 0xffffffff, 'bond_slave_1\x00', 'bpq0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x2f}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x2, 0x4, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7, [0x16679183, 0x8000, 0x0, 0x9, 0x1, 0x9], 0x5, 0x2, 0x2694}, {0x3d3, [0x81, 0x81, 0x6, 0x9, 0xfffffffffffffff8, 0x5], 0x401, 0xff, 0x81}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0x14) 11:37:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f0000000900)=[@increfs], 0x0, 0x0, &(0x7f0000000140)}) 11:37:33 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) [ 269.812968] binder: BINDER_SET_CONTEXT_MGR already set 11:37:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/stat\x00') sync_file_range(r0, 0x0, 0x0, 0x0) 11:37:33 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) [ 269.854675] binder: 7744:7745 ioctl 40046207 0 returned -16 11:37:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047452, &(0x7f0000000080)) 11:37:33 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:33 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x2}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e6370752f7301003100d185a9910498de94b8d883a8a0efacb3bf1c94f0f84f93f63f6127c6ad07bf85b8a8f7c53d89000060f5d470cdfeedc06388718675a7f1e380e65f8bdbe2e3d5dd871a9a3d0c9542ba694bb92fa9493f0d2fe3e71189dd79ab61cded49a08d9148", 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x4d, 0x7}, 0xfffffffffffffdb9) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000380)={0x3, [0x1ff, 0x20000000000, 0x0]}, &(0x7f00000003c0)=0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r4, 0x2, 0xffffffffffffffff}, 0xb) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x5, 0x200, 0x101, 0x80, 0x0, 0x1, 0x1108}, &(0x7f0000000640)=0x20) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f00000037c0)={0x0, 0xfffffffffffffffa, 0x0, 0x100}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001940)={0x0, 0xebe5}, &(0x7f0000001980)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000003540)={0x0, 0x10000}, &(0x7f0000003580)=0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000480)=0x220, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000004c0)={0x0, @speck128, 0x1, "e27f5eb025e91e06"}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00012dbd7000fddbdf250f00000008000600030000000400b8966a302c02741de4b9"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0xc001) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 11:37:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x3000000) 11:37:34 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 11:37:34 executing program 2: r0 = socket$inet6(0xa, 0x805, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='E', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x8dffffff]}, 0x9}, 0x1c) 11:37:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400005f, &(0x7f0000000340)=0xffffffff, 0xffffffffffffffe0) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendmsg(r1, &(0x7f0000000800)={&(0x7f00000003c0)=@generic={0x8, "69ccf24b32e223da997211d91f47fc108e6f5028be20c33dea2d022eba9f5a1e1c0605f56390c234cdec589ed02b5dfdd8a9de9cf337f3c3f1a0c2cbd36c6e4d7ea34573d13572fa21590bbf9b76381dfa39d6d1246b9f02fa50ab1298c9863ba5f79572b33d686d43ad62e8d2b2b83e4059442c3f131440a1bd5d387e1b"}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480), 0x0, 0x40}, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000004c0)={0x0, 0xfb, 0xb7, 0x7, 0x6, "8b5e732ed0afd6817f0ce08d71cca4db", "2e30954fc65438e303bab9000fc4d958c18888bcdfdef331058db0f9f45eb8e25a4e9505bba6dd9177c16ce7cbccbc92e43fe771cd45f0c32f4f37b98c2c9a4293efe302fd730e724c5081b1fac2178c298aed16cbebfbdf99ca48e9e76d8981936f8d680d7c1f469a7e88f44c5f611e043347ecfbe156da5fbabdbd1348102bc854818bb9632028bd14f9761f32c3f8c3f9423a5329087fb37297a7a8e0d7acc9d6"}, 0xb7, 0x2) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000330e10b0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x228, 0x228, 0x228, 0x228, 0x228, 0x3, &(0x7f0000000440), {[{{@ip={@multicast1, @local, 0xff000000, 0xffffffff, '\x00', 'team_slave_0\x00', {}, {}, 0x5d, 0x2}, 0x0, 0x98, 0xb8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast1, @empty, 0x0, 0xffffffff, 'bond_slave_1\x00', 'bpq0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x2f}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x2, 0x4, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7, [0x16679183, 0x8000, 0x0, 0x9, 0x1, 0x9], 0x5, 0x2, 0x2694}, {0x3d3, [0x81, 0x81, 0x6, 0x9, 0xfffffffffffffff8, 0x5], 0x401, 0xff, 0x81}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0x14) 11:37:34 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) write(r0, &(0x7f0000000040)="c2", 0x1) truncate(&(0x7f0000000140)='./file0/bus\x00', 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@profile={'changeprofile ', 'ramfs\x00'}, 0x14) 11:37:34 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='E', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x8dffffff]}, 0x9}, 0x1c) 11:37:34 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x17, 0x0) arch_prctl(0x1003, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:37:34 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x12}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:34 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004001000080000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000e2d4ec6bab91d4", 0x55}], 0x1, &(0x7f0000000200)}, 0x0) 11:37:34 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:34 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:35 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000240), 0x4) 11:37:35 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x12}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:35 executing program 5: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000280)) 11:37:35 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @rand_addr}, {}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) 11:37:35 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x4004743c, &(0x7f0000000080)) 11:37:35 executing program 1: getsockname$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x2, 0x1db) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 11:37:35 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:35 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x12}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) [ 271.503271] syz-executor2 (7859) used obsolete PPPIOCDETACH ioctl 11:37:35 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000280)) fchdir(r2) syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000540)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x3f, @local}, r4, 0xffff}}, 0x48) write$uinput_user_dev(r3, &(0x7f0000000e00)={'syz0\x00', {0xffffffff, 0x100, 0x11d, 0xfffffffffffffffb}, 0x1f, [0x6, 0x2, 0x0, 0x393d, 0x39973791, 0x0, 0x7ae, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffffb, 0x2, 0x0, 0x1, 0x5, 0x8001, 0xc12a, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2ff78af2, 0x0, 0x3, 0x101, 0x4, 0x3, 0x9, 0x4, 0x9, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000, 0x1, 0xa83e, 0x0, 0x800, 0x1000, 0x0, 0x100000000, 0x8, 0x0, 0x8001, 0x7, 0x9, 0x6, 0x7, 0x2, 0x5, 0xce1, 0xfffffffffffffffb, 0x10000, 0xba0000000, 0x10001, 0x0, 0x20000000000000], [0x1, 0x0, 0xffff, 0x9, 0x0, 0x9, 0xffffffffffffff7f, 0x0, 0x101, 0x3f7, 0x0, 0x8, 0x6, 0x439f, 0x81, 0x4, 0x0, 0x9361, 0x0, 0x2, 0x8c4a, 0x9, 0x80, 0x3621, 0x0, 0x20, 0x57, 0x100000001, 0x6, 0x0, 0x8f3b, 0x9, 0x4c8, 0x3, 0x200, 0x4c5d, 0x4, 0x7, 0xedb, 0x9, 0x7, 0x0, 0x8, 0x5, 0x8, 0x6, 0x2, 0x1, 0x9, 0x0, 0x4, 0xfffffffffffffff9, 0x7ff, 0x7, 0xbd, 0x1f, 0x2, 0x901e, 0x60, 0x7f, 0x5a, 0x0, 0x8, 0x9], [0x7ff, 0x3, 0xa87f, 0xfff, 0x7fff, 0x0, 0xa2a0, 0x0, 0x4, 0xfffffffffffff571, 0x0, 0x0, 0x4, 0x2, 0x1f, 0xfffffffffffffffa, 0x0, 0x6, 0x401, 0x5, 0x1000, 0x1f, 0x82, 0x8fb6, 0x7, 0x7, 0x5, 0x81, 0xfffffffffffff801, 0x0, 0x81, 0x6da, 0x7, 0x10000, 0x3, 0x64, 0x4, 0xcd81, 0xfff, 0x4, 0x93e8, 0x0, 0x10001, 0x3, 0x1, 0x2, 0x0, 0x0, 0x2cab, 0xc0, 0x84e9, 0x70000000, 0xffff, 0x7, 0x0, 0x7, 0x3f0000000000000, 0x2000000, 0x3cab, 0x5, 0x3b2, 0x0, 0x20, 0x8], [0x6, 0x0, 0x0, 0x9, 0xfffffffffffffffa, 0x40000000000, 0x3, 0x8, 0x1e99, 0x0, 0x40, 0x2, 0x6, 0x0, 0x0, 0xada, 0x0, 0x7f, 0x20, 0x0, 0x401, 0x0, 0x3, 0x0, 0x0, 0x3, 0x20, 0x0, 0x7, 0x5, 0x1000, 0x8, 0x5, 0x0, 0x2, 0x8001, 0x401, 0x4, 0x80, 0x1, 0x8, 0x8, 0x100000001, 0x9, 0x20, 0x62, 0x3, 0x2, 0x5, 0x71c, 0x1000, 0x9, 0x8, 0xffffffffffffffff, 0x0, 0x72b, 0x0, 0xffffffffffff0001, 0xcc, 0xfffffffffffffff9, 0xa140, 0xffffffff, 0x7, 0x1ff]}, 0x45c) write$binfmt_aout(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000000008000000000000001200001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22794fbb1ceeb7a53617aad88a58766ded2ad1ca13b12baac4f65470bc2423012c08d72bbd4090349d30f4086cff39c81384bd5d6374c52db8f70f61af7453961f836a472862f832f922a2e34bc9dd6f80cdf9b15060bd1de9e8e4cd5fb1f756a152b6deec52204c02cf0df5cd86471356df771e0624f492d59e6f635b9d90659f6ad461611b1ffc8edd6ac1375a6ef334187a54dd6bafb64bff875164306253783214393211f4602f57dfc94bb4658e4d7671404f2aceed78c8937adf1ebaf9b189a30617ba203f5f402ce3838e232c77703e76d6e681ed905eadf4c120500fc0a6d6347101d3824bb642ecb62972dc4d52d03803d977b15fd1b4defa78528d9628ed89b5057632c092e48c3f8d19f93b831f43f9e8"], 0x177) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x9, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000640)=0x20) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000500)='./bus\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@mmap='mmap'}, {@common=@cache_loose='cache=loose'}]}}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[{0x3}, {0x2, 0x1233}, {0x3, 0xffffffffffffff80}, {0x8, 0x3}, {0x0, 0x100000001}], 0x5) 11:37:35 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047440, &(0x7f0000000080)) 11:37:35 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x12}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:35 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:35 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:35 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') clone(0x80002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x74, 0x0, 0x0, 0xdae6}]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)={'raw\x00'}, &(0x7f0000000040)=0x54) [ 272.153072] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) [ 272.161276] FAT-fs (loop4): Filesystem has been set read-only [ 272.171846] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) [ 272.195656] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) [ 272.218376] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) 11:37:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) 11:37:35 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:35 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f000002b000)="1f0000000102fffffd3b54c007110000f30501000b000600000423ca0000cf", 0x1f) 11:37:35 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:35 executing program 1: process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000001fc0)=ANY=[]}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0x3ce}], 0x1, &(0x7f0000000700), 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0x21d}], 0x4, &(0x7f0000002180), 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 11:37:36 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) [ 272.294206] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) [ 272.311464] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) 11:37:36 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000280)) fchdir(r2) syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000540)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x3f, @local}, r4, 0xffff}}, 0x48) write$uinput_user_dev(r3, &(0x7f0000000e00)={'syz0\x00', {0xffffffff, 0x100, 0x11d, 0xfffffffffffffffb}, 0x1f, [0x6, 0x2, 0x0, 0x393d, 0x39973791, 0x0, 0x7ae, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffffb, 0x2, 0x0, 0x1, 0x5, 0x8001, 0xc12a, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2ff78af2, 0x0, 0x3, 0x101, 0x4, 0x3, 0x9, 0x4, 0x9, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000, 0x1, 0xa83e, 0x0, 0x800, 0x1000, 0x0, 0x100000000, 0x8, 0x0, 0x8001, 0x7, 0x9, 0x6, 0x7, 0x2, 0x5, 0xce1, 0xfffffffffffffffb, 0x10000, 0xba0000000, 0x10001, 0x0, 0x20000000000000], [0x1, 0x0, 0xffff, 0x9, 0x0, 0x9, 0xffffffffffffff7f, 0x0, 0x101, 0x3f7, 0x0, 0x8, 0x6, 0x439f, 0x81, 0x4, 0x0, 0x9361, 0x0, 0x2, 0x8c4a, 0x9, 0x80, 0x3621, 0x0, 0x20, 0x57, 0x100000001, 0x6, 0x0, 0x8f3b, 0x9, 0x4c8, 0x3, 0x200, 0x4c5d, 0x4, 0x7, 0xedb, 0x9, 0x7, 0x0, 0x8, 0x5, 0x8, 0x6, 0x2, 0x1, 0x9, 0x0, 0x4, 0xfffffffffffffff9, 0x7ff, 0x7, 0xbd, 0x1f, 0x2, 0x901e, 0x60, 0x7f, 0x5a, 0x0, 0x8, 0x9], [0x7ff, 0x3, 0xa87f, 0xfff, 0x7fff, 0x0, 0xa2a0, 0x0, 0x4, 0xfffffffffffff571, 0x0, 0x0, 0x4, 0x2, 0x1f, 0xfffffffffffffffa, 0x0, 0x6, 0x401, 0x5, 0x1000, 0x1f, 0x82, 0x8fb6, 0x7, 0x7, 0x5, 0x81, 0xfffffffffffff801, 0x0, 0x81, 0x6da, 0x7, 0x10000, 0x3, 0x64, 0x4, 0xcd81, 0xfff, 0x4, 0x93e8, 0x0, 0x10001, 0x3, 0x1, 0x2, 0x0, 0x0, 0x2cab, 0xc0, 0x84e9, 0x70000000, 0xffff, 0x7, 0x0, 0x7, 0x3f0000000000000, 0x2000000, 0x3cab, 0x5, 0x3b2, 0x0, 0x20, 0x8], [0x6, 0x0, 0x0, 0x9, 0xfffffffffffffffa, 0x40000000000, 0x3, 0x8, 0x1e99, 0x0, 0x40, 0x2, 0x6, 0x0, 0x0, 0xada, 0x0, 0x7f, 0x20, 0x0, 0x401, 0x0, 0x3, 0x0, 0x0, 0x3, 0x20, 0x0, 0x7, 0x5, 0x1000, 0x8, 0x5, 0x0, 0x2, 0x8001, 0x401, 0x4, 0x80, 0x1, 0x8, 0x8, 0x100000001, 0x9, 0x20, 0x62, 0x3, 0x2, 0x5, 0x71c, 0x1000, 0x9, 0x8, 0xffffffffffffffff, 0x0, 0x72b, 0x0, 0xffffffffffff0001, 0xcc, 0xfffffffffffffff9, 0xa140, 0xffffffff, 0x7, 0x1ff]}, 0x45c) write$binfmt_aout(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x177) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x9, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000640)=0x20) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000500)='./bus\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@mmap='mmap'}, {@common=@cache_loose='cache=loose'}]}}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[{0x3}, {0x2, 0x1233}, {0x3, 0xffffffffffffff80}, {0x8, 0x3}, {0x0, 0x100000001}], 0x5) 11:37:36 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), 0x14) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 11:37:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x4) 11:37:36 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:36 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="00000049102fc906f7") mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 11:37:36 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:36 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) [ 272.926117] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) [ 272.952172] FAT-fs (loop4): Filesystem has been set read-only 11:37:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:37:36 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x0, 0x5, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) [ 272.975508] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) [ 273.031111] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) [ 273.063444] FAT-fs (loop4): error, invalid access to FAT (entry 0x000005cb) 11:37:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = eventfd(0x0) dup2(r0, r1) 11:37:36 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) write(r0, &(0x7f0000000040)="c2", 0x1) 11:37:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400005f, &(0x7f0000000340)=0xffffffff, 0xffffffffffffffe0) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendmsg(r1, &(0x7f0000000800)={&(0x7f00000003c0)=@generic={0x8, "69ccf24b32e223da997211d91f47fc108e6f5028be20c33dea2d022eba9f5a1e1c0605f56390c234cdec589ed02b5dfdd8a9de9cf337f3c3f1a0c2cbd36c6e4d7ea34573d13572fa21590bbf9b76381dfa39d6d1246b9f02fa50ab1298c9863ba5f79572b33d686d43ad62e8d2b2b83e4059442c3f131440a1bd5d387e1b"}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480), 0x0, 0x40}, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000004c0)={0x0, 0xfb, 0xb7, 0x7, 0x6, "8b5e732ed0afd6817f0ce08d71cca4db", "2e30954fc65438e303bab9000fc4d958c18888bcdfdef331058db0f9f45eb8e25a4e9505bba6dd9177c16ce7cbccbc92e43fe771cd45f0c32f4f37b98c2c9a4293efe302fd730e724c5081b1fac2178c298aed16cbebfbdf99ca48e9e76d8981936f8d680d7c1f469a7e88f44c5f611e043347ecfbe156da5fbabdbd1348102bc854818bb9632028bd14f9761f32c3f8c3f9423a5329087fb37297a7a8e0d7acc9d6"}, 0xb7, 0x2) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000330e10b0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xb010055500000000]}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x228, 0x228, 0x228, 0x228, 0x228, 0x3, &(0x7f0000000440), {[{{@ip={@multicast1, @local, 0xff000000, 0xffffffff, '\x00', 'team_slave_0\x00', {}, {}, 0x5d, 0x2}, 0x0, 0x98, 0xb8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast1, @empty, 0x0, 0xffffffff, 'bond_slave_1\x00', 'bpq0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x2f}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x2, 0x4, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7, [0x16679183, 0x8000, 0x0, 0x9, 0x1, 0x9], 0x5, 0x2, 0x2694}, {0x3d3, [0x81, 0x81, 0x6, 0x9, 0xfffffffffffffff8, 0x5], 0x401, 0xff, 0x81}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0x14) 11:37:37 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:37 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40107447, &(0x7f0000000080)=0xfdfdffff) 11:37:37 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x80000, 0x0, &(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/201, 0xc9, 0x0) 11:37:37 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb40c559144c82e4eec619f721ffbc393223213db390217acfd5bdb3fe8820a24d2718cbd8633313b222e16be196f3b"], 0xbf) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00', &(0x7f00000002c0)="74086e750000000000000000008c00"]) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) prctl$setendian(0x14, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) keyctl$assume_authority(0x10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000600)={0x20, {{0x2, 0x4e22, @remote}}}, 0x88) 11:37:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@srh, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) pipe(&(0x7f0000000500)) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x10, &(0x7f0000000480)={&(0x7f0000000440), 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r1, 0x4) gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x0, 0x964, &(0x7f0000000e00)="8b5d803c108db5d404ae14455706c80cf9dee63c1bc8c0bb84ae632c5a186d372a18d0126aaa24189783414f1fc1", &(0x7f0000000dc0)="8bf3bc7a45726d", 0x2e, 0x7}) r2 = syz_open_dev$dspn(&(0x7f0000000800)='/dev/dsp#\x00', 0x9, 0x208082) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x3f) ioctl(0xffffffffffffffff, 0x7ff, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@loopback, @in=@rand_addr}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40)={0x4fb9d853, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000c00)={0x0, 0xb74, &(0x7f0000000ac0)="ca88b1980fb78ff43e614aad36ddd0cdfdb264b19ad3497d49c4f8845540d97cf54c60ae2a936142a70d3c0a1e33fb6d0c96a2e2767e8df9e2146ac2450d65fb61e8b1b7a43c94dd65296be1d9cf275291675765f48f62203b43a6bb18e57131873af6dcd8fa8b12d342d1a837c2b00125", &(0x7f0000000bc0)="b04b1ae8c69bbf14a914c59396c4fb9128", 0x71, 0x11}) 11:37:37 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:37 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000640)='y\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYRES16, @ANYRESHEX=r2, @ANYRESOCT=0x0], @ANYRESHEX=r1, @ANYRES32=r1], 0xfffffffffffffee0) write$P9_RREMOVE(r2, &(0x7f0000000600)={0x7, 0x7b, 0x2}, 0x7) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00', &(0x7f00000002c0)="74086e750000000000000000008c00"]) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) tee(r0, r0, 0x0, 0x4) timerfd_settime(r2, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) memfd_create(&(0x7f0000000540)='\\cpuset@\x00', 0x2) sendfile(r1, r2, &(0x7f0000000180)=0x6, 0x2000005) fsetxattr$security_evm(r2, &(0x7f0000000740)='security.evm\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="05010c0000000081007f41c695416c564c1e0e7b7a3dd5e587dacbc2fb6d44a475e62417242934996592020ad4c3ae095fe7ea6ff559a1c77529a5469817845ce3f0c9ab51f5418bdd980a97816b947d08ce4ef23833212e92459d23c300100000000000005ccd289258798e42b539b31afd088cc3cdf2b8e5f292d6344c94f1093db3fddfead4d9ac898daac9ac938400282c3ac78e109d970e45f545f727b641d8b91de8d9d81d7c1c615f"], 0x1, 0x0) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) flistxattr(r2, &(0x7f0000000380)=""/249, 0xf9) write$P9_RVERSION(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ff000100000008003950323030302e75497f568489591080aeff733fc3f176ccaea9d8e5ef64e8b70bd8dbf67595e061"], 0x35) 11:37:37 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/stat\x00') openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 11:37:37 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:37 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sched_setaffinity(0x0, 0xfffffffffffffdb4, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/62, 0x3e}}], 0x261, 0x62, 0x0) 11:37:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="af6f78a0ca4ffedb64e657bceee202"], 0xf) 11:37:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400005f, &(0x7f0000000340)=0xffffffff, 0xffffffffffffffe0) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendmsg(r1, &(0x7f0000000800)={&(0x7f00000003c0)=@generic={0x8, "69ccf24b32e223da997211d91f47fc108e6f5028be20c33dea2d022eba9f5a1e1c0605f56390c234cdec589ed02b5dfdd8a9de9cf337f3c3f1a0c2cbd36c6e4d7ea34573d13572fa21590bbf9b76381dfa39d6d1246b9f02fa50ab1298c9863ba5f79572b33d686d43ad62e8d2b2b83e4059442c3f131440a1bd5d387e1b"}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480), 0x0, 0x40}, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000004c0)={0x0, 0xfb, 0xb7, 0x7, 0x6, "8b5e732ed0afd6817f0ce08d71cca4db", "2e30954fc65438e303bab9000fc4d958c18888bcdfdef331058db0f9f45eb8e25a4e9505bba6dd9177c16ce7cbccbc92e43fe771cd45f0c32f4f37b98c2c9a4293efe302fd730e724c5081b1fac2178c298aed16cbebfbdf99ca48e9e76d8981936f8d680d7c1f469a7e88f44c5f611e043347ecfbe156da5fbabdbd1348102bc854818bb9632028bd14f9761f32c3f8c3f9423a5329087fb37297a7a8e0d7acc9d6"}, 0xb7, 0x2) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000330e10b0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0xb010055500000000]}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x228, 0x228, 0x228, 0x228, 0x228, 0x3, &(0x7f0000000440), {[{{@ip={@multicast1, @local, 0xff000000, 0xffffffff, '\x00', 'team_slave_0\x00', {}, {}, 0x5d, 0x2}, 0x0, 0x98, 0xb8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast1, @empty, 0x0, 0xffffffff, 'bond_slave_1\x00', 'bpq0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x2f}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x2, 0x4, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7, [0x16679183, 0x8000, 0x0, 0x9, 0x1, 0x9], 0x5, 0x2, 0x2694}, {0x3d3, [0x81, 0x81, 0x6, 0x9, 0xfffffffffffffff8, 0x5], 0x401, 0xff, 0x81}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0x14) 11:37:37 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:37 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') readv(r0, &(0x7f0000000200)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:37:37 executing program 5: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f00000007c0)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x20, &(0x7f0000000800)=ANY=[@ANYBLOB='rodir,iocharset=macromanian,iocharset=ascii,iocharset=ascii,shortname=lower,shortname=winnt,rode=mixed,hash,fscontext=system_u,permit_directio,context=r']) 11:37:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb4"], 0x91) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00']) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r1 = timerfd_create(0x0, 0x80800) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) prctl$setendian(0x14, 0x0) fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) keyctl$assume_authority(0x10, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/254, 0xfe}], 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f0000000500)=""/156, &(0x7f00000002c0)=0x3a3c6ac7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000600)={0x20, {{0x2, 0x4e22, @remote}}}, 0x88) 11:37:37 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffded, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept$inet6(r0, &(0x7f0000000700), &(0x7f00000001c0)=0xfffffffc) 11:37:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@srh, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) pipe(&(0x7f0000000500)) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x10, &(0x7f0000000480)={&(0x7f0000000440), 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r1, 0x4) gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x0, 0x964, &(0x7f0000000e00)="8b5d803c108db5d404ae14455706c80cf9dee63c1bc8c0bb84ae632c5a186d372a18d0126aaa24189783414f1fc1", &(0x7f0000000dc0)="8bf3bc7a45726d", 0x2e, 0x7}) r2 = syz_open_dev$dspn(&(0x7f0000000800)='/dev/dsp#\x00', 0x9, 0x208082) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x3f) ioctl(0xffffffffffffffff, 0x7ff, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@loopback, @in=@rand_addr}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40)={0x4fb9d853, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000c00)={0x0, 0xb74, &(0x7f0000000ac0)="ca88b1980fb78ff43e614aad36ddd0cdfdb264b19ad3497d49c4f8845540d97cf54c60ae2a936142a70d3c0a1e33fb6d0c96a2e2767e8df9e2146ac2450d65fb61e8b1b7a43c94dd65296be1d9cf275291675765f48f62203b43a6bb18e57131873af6dcd8fa8b12d342d1a837c2b00125", &(0x7f0000000bc0)="b04b1ae8c69bbf14a914c59396c4fb9128", 0x71, 0x11}) 11:37:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f}}) [ 274.388877] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:37:38 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:38 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f00007a7000)='./control\x00', 0xa4000960) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da05}}, 0x14}}, 0x0) shmget$private(0x0, 0x10000, 0x0, &(0x7f0000003000/0x10000)=nil) 11:37:38 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x4004743b, &(0x7f0000000080)) 11:37:38 executing program 5: mount(&(0x7f0000000240), &(0x7f0000000000)='.', &(0x7f0000000040)="656b2331ddbc7f5a4b4aaab12472611507ecbeb3725ce1609f51866b167d6db06c050b2ea6f164b04cc94f56d1066e0c782c7095755c7a39ad27d6f4d8472264174ab0d428e6b39bf5e006a376fdebd3df05ca987668d701f20fa2f65ca5663601461bdee39fbe218f362ae6b6cc1efebd6f53e181ce2b30762a1e8429156f56b70450e19303e0000000000000000000000000000000", 0x0, &(0x7f0000000700)) 11:37:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb4"], 0x91) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00']) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r1 = timerfd_create(0x0, 0x80800) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) prctl$setendian(0x14, 0x0) fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) keyctl$assume_authority(0x10, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/254, 0xfe}], 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f0000000500)=""/156, &(0x7f00000002c0)=0x3a3c6ac7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000600)={0x20, {{0x2, 0x4e22, @remote}}}, 0x88) 11:37:38 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:38 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="5300000007020046006cef2d73656c662627766d6e65743173656c696e757873656c667b776c616e315b6b657972696e67706f7369785f61636c5f61636365737373656c6624707070312165746830010001001bbfa88c68593e7159d694ab4ac48395dda7b10edab47e0772f5e62fad5009f0155eead7a4f8f7a1b75a8dd25f36dec73d16b50a05052a09d45f03f08bb4"], 0x91) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)="74086e750000000000000000008c00"], &(0x7f0000000300)=[&(0x7f0000000240)='\'\\nodev\x00', &(0x7f0000000280)='/security\x00']) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r1 = timerfd_create(0x0, 0x80800) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) prctl$setendian(0x14, 0x0) fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) keyctl$assume_authority(0x10, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/254, 0xfe}], 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f0000000500)=""/156, &(0x7f00000002c0)=0x3a3c6ac7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000600)={0x20, {{0x2, 0x4e22, @remote}}}, 0x88) 11:37:38 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000002300)=ANY=[]) 11:37:38 executing program 5: 11:37:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@srh, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) pipe(&(0x7f0000000500)) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x10, &(0x7f0000000480)={&(0x7f0000000440), 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r1, 0x4) gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x0, 0x964, &(0x7f0000000e00)="8b5d803c108db5d404ae14455706c80cf9dee63c1bc8c0bb84ae632c5a186d372a18d0126aaa24189783414f1fc1", &(0x7f0000000dc0)="8bf3bc7a45726d", 0x2e, 0x7}) r2 = syz_open_dev$dspn(&(0x7f0000000800)='/dev/dsp#\x00', 0x9, 0x208082) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x3f) ioctl(0xffffffffffffffff, 0x7ff, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@loopback, @in=@rand_addr}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40)={0x4fb9d853, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000c00)={0x0, 0xb74, &(0x7f0000000ac0)="ca88b1980fb78ff43e614aad36ddd0cdfdb264b19ad3497d49c4f8845540d97cf54c60ae2a936142a70d3c0a1e33fb6d0c96a2e2767e8df9e2146ac2450d65fb61e8b1b7a43c94dd65296be1d9cf275291675765f48f62203b43a6bb18e57131873af6dcd8fa8b12d342d1a837c2b00125", &(0x7f0000000bc0)="b04b1ae8c69bbf14a914c59396c4fb9128", 0x71, 0x11}) 11:37:38 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:38 executing program 5: 11:37:38 executing program 2: 11:37:38 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0xfffffffffffffffe, 0x0, 0x0) 11:37:38 executing program 0: socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000002f18)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xffffff2b) 11:37:39 executing program 1: 11:37:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/stat\x00') 11:37:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) 11:37:39 executing program 0: 11:37:39 executing program 1: 11:37:39 executing program 0: 11:37:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@srh, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) pipe(&(0x7f0000000500)) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x10, &(0x7f0000000480)={&(0x7f0000000440), 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r1, 0x4) gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x0, 0x964, &(0x7f0000000e00)="8b5d803c108db5d404ae14455706c80cf9dee63c1bc8c0bb84ae632c5a186d372a18d0126aaa24189783414f1fc1", &(0x7f0000000dc0)="8bf3bc7a45726d", 0x2e, 0x7}) r2 = syz_open_dev$dspn(&(0x7f0000000800)='/dev/dsp#\x00', 0x9, 0x208082) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000000f4, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x3, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x3f) ioctl(0xffffffffffffffff, 0x7ff, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@loopback, @in=@rand_addr}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40)={0x4fb9d853, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000c00)={0x0, 0xb74, &(0x7f0000000ac0)="ca88b1980fb78ff43e614aad36ddd0cdfdb264b19ad3497d49c4f8845540d97cf54c60ae2a936142a70d3c0a1e33fb6d0c96a2e2767e8df9e2146ac2450d65fb61e8b1b7a43c94dd65296be1d9cf275291675765f48f62203b43a6bb18e57131873af6dcd8fa8b12d342d1a837c2b00125", &(0x7f0000000bc0)="b04b1ae8c69bbf14a914c59396c4fb9128", 0x71, 0x11}) 11:37:39 executing program 2: 11:37:39 executing program 5: 11:37:39 executing program 1: 11:37:39 executing program 3: 11:37:39 executing program 0: 11:37:39 executing program 2: 11:37:39 executing program 1: 11:37:39 executing program 5: 11:37:39 executing program 5: 11:37:39 executing program 1: 11:37:39 executing program 2: 11:37:40 executing program 4: 11:37:40 executing program 3: 11:37:40 executing program 0: 11:37:40 executing program 1: 11:37:40 executing program 5: 11:37:40 executing program 0: 11:37:40 executing program 3: 11:37:40 executing program 4: 11:37:40 executing program 2: 11:37:40 executing program 0: 11:37:40 executing program 1: 11:37:40 executing program 5: 11:37:40 executing program 3: 11:37:40 executing program 4: 11:37:40 executing program 2: 11:37:40 executing program 1: 11:37:40 executing program 0: 11:37:40 executing program 3: 11:37:40 executing program 5: 11:37:40 executing program 4: 11:37:40 executing program 2: 11:37:40 executing program 1: 11:37:40 executing program 0: 11:37:40 executing program 5: 11:37:40 executing program 3: 11:37:40 executing program 2: 11:37:40 executing program 4: 11:37:40 executing program 1: 11:37:40 executing program 0: 11:37:40 executing program 3: 11:37:40 executing program 5: 11:37:40 executing program 0: 11:37:40 executing program 4: 11:37:40 executing program 2: 11:37:40 executing program 1: 11:37:40 executing program 0: 11:37:40 executing program 5: 11:37:40 executing program 2: 11:37:40 executing program 3: 11:37:40 executing program 1: 11:37:41 executing program 2: 11:37:41 executing program 0: 11:37:41 executing program 4: 11:37:41 executing program 1: 11:37:41 executing program 5: 11:37:41 executing program 3: 11:37:41 executing program 2: 11:37:41 executing program 0: 11:37:41 executing program 4: 11:37:41 executing program 5: 11:37:41 executing program 3: 11:37:41 executing program 1: 11:37:41 executing program 2: 11:37:41 executing program 5: 11:37:41 executing program 0: 11:37:41 executing program 4: 11:37:41 executing program 3: 11:37:41 executing program 1: mkdir(&(0x7f0000000180)='./control\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r1, 0x10, &(0x7f00000008c0)={&(0x7f0000000800)=""/151, 0x97, 0xffffffffffffffff}}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000780)={0x0, 0x70, 0x80, 0x9, 0x8ab, 0x8000, 0x0, 0xffffffff, 0x80, 0x5, 0x9d, 0x0, 0x5, 0x706966dc, 0x7fffffff, 0x4, 0x401, 0x9bc6, 0x6, 0x1, 0x400, 0x7fffffff, 0x3, 0x3, 0x100000000, 0x7fff, 0x24000000000, 0x29, 0xfffffffffffffffd, 0x7, 0x2, 0xb64d, 0x8001, 0x9, 0x1915, 0x800, 0x0, 0x7, 0x0, 0x5cf0, 0x2, @perf_config_ext={0x1, 0xbdd}, 0x20004, 0x100, 0x0, 0x7, 0x1, 0x5, 0xf0}) 11:37:41 executing program 5: socketpair$inet6(0xa, 0x5, 0x7, &(0x7f0000000300)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x4, @mcast1, 0x800}, {0xa, 0x4e20, 0x100000001, @mcast1, 0x1}, 0x3401, [0x9, 0x2, 0x3, 0x80000001, 0x0, 0x5, 0x0, 0x1000]}, 0x5c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000001bc0)=@random={'trusted.', "2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac"}) clone(0x0, &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)="7ff6d735cd872ec8846648e86ada609c437295eb2e333f551a4ee89f2fd432e1b2b7c4ec24") r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001c00)={0x0}, &(0x7f0000001c40)=0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001c80)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) io_setup(0x100000001, &(0x7f0000000340)) io_submit(0x0, 0x0, &(0x7f0000001b80)) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0x4400) fcntl$addseals(r0, 0x409, 0x8) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000580)=[0x8, 0x1]) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x80, 0x0, 0x6, 0x0, 0x129}, &(0x7f00000004c0)=0x14) 11:37:41 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc5, 0x6c, 0x4c00}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 11:37:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xa5cc554) creat(&(0x7f0000000700)='./bus\x00', 0x0) 11:37:41 executing program 4: r0 = getpgrp(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) 11:37:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000f00)='/dev/loop#\x00', 0x0, 0x100000105082) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x10000}) 11:37:41 executing program 2: socketpair$inet6(0xa, 0x0, 0x7, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)="7ff6d735cd872ec8846648e86ada609c437295eb2e333f551a4ee89f2fd432e1b2b7c4ec24") r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) io_setup(0x100000001, &(0x7f0000000340)) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x3, 0xe2, 0x0, 0x0, 0x40, 0x20000, 0x1, 0x0, 0x20, 0x0, 0x9, 0x4, 0x3fffc00000000, 0x0, 0x7, 0x0, 0x6a67f7b9, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x10001, 0x4, 0xb1b4, 0x62, 0x16a5b899, 0x7fffffff, 0x8, 0x1, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x7ff, 0x81}, 0x2400, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x80000001, 0x9}, r0, 0xf, r0, 0x2) fcntl$addseals(r0, 0x409, 0x8) 11:37:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000380)=""/42, 0xf0) 11:37:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @mcast2, 0x1, 0x0, 0x7, 0x100, 0x3, 0x200, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2ab"]}]}, 0x1c}}, 0x0) 11:37:41 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 11:37:42 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() r1 = socket$unix(0x1, 0x3, 0x0) recvmsg(r1, &(0x7f0000000680)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000640)=""/38, 0x26}, 0x0) ptrace(0x10, r0) tkill(r0, 0x12) ptrace(0x18, r0) writev(0xffffffffffffffff, &(0x7f0000000a80), 0x0) 11:37:42 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fe81007a0af0fff8fffffd79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000008000000b7050000020000006a0a00fe000000078500000032000000b7000000000000009500040000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 11:37:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000001c0), &(0x7f0000000140)=0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@rand_addr, 0x0, 0x4}}, 0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:37:42 executing program 5: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000600)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000001580)) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)=ANY=[]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000400), &(0x7f0000000b40)) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000180)) 11:37:42 executing program 1: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) recvmsg(r1, &(0x7f0000000640)={&(0x7f00000003c0)=@ipx, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)=""/99, 0x63}, {&(0x7f00000004c0)=""/99, 0x63}], 0x2, &(0x7f0000000540)=""/245, 0xf5, 0xd0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0x3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r2, 0x10, &(0x7f00000008c0)={&(0x7f0000000800)=""/151, 0x97, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f00000006c0)={0x0, 0x70, 0x7fffffff, 0xff, 0xfffffffffffffffc, 0x0, 0x0, 0x846, 0x4000, 0x0, 0x0, 0x4352d287, 0x20, 0xfffffffffffffff9, 0x60000000, 0x4, 0x95, 0x80, 0x3, 0x6, 0x701, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x101, 0x4, 0x7, 0x1, 0x32, 0x80000000, 0x2, 0x6, 0x83, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x22802, 0x0, 0x1, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x9, r0, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000780)={0x5, 0x70, 0x80, 0x9, 0x8ab, 0x8000, 0x0, 0x0, 0x80, 0x5, 0x9d, 0x0, 0x5, 0x706966dc, 0x7fffffff, 0x4, 0x401, 0x9bc6, 0x6, 0x1, 0x400, 0x7fffffff, 0x3, 0x3, 0x100000000, 0x7fff, 0x0, 0x29, 0xfffffffffffffffd, 0x7, 0x2, 0xb64d, 0x8001, 0x9, 0x1915, 0x800, 0xd4, 0x7, 0x0, 0x5cf0, 0x2, @perf_config_ext={0x1}, 0x20004, 0x100, 0x7ff, 0x7, 0x1, 0x5}) 11:37:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @mcast2, 0x1, 0x0, 0x7, 0x100, 0x3, 0x200, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2ab"]}]}, 0x1c}}, 0x0) 11:37:42 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000009) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4}]}]}, 0x28}}, 0x0) 11:37:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) [ 279.360615] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.367089] bridge0: port 1(bridge_slave_0) entered forwarding state 11:37:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)) r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) fcntl$addseals(r0, 0x11, 0x8) 11:37:43 executing program 4: 11:37:43 executing program 2: 11:37:43 executing program 2: 11:37:45 executing program 0: 11:37:45 executing program 4: 11:37:45 executing program 1: 11:37:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) 11:37:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @mcast2, 0x1, 0x0, 0x7, 0x100, 0x3, 0x200, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2ab"]}]}, 0x1c}}, 0x0) 11:37:45 executing program 5: 11:37:45 executing program 1: 11:37:45 executing program 0: 11:37:45 executing program 5: 11:37:45 executing program 4: 11:37:45 executing program 0: 11:37:45 executing program 2: 11:37:45 executing program 1: 11:37:45 executing program 4: 11:37:45 executing program 5: 11:37:45 executing program 0: 11:37:45 executing program 3: 11:37:45 executing program 4: 11:37:45 executing program 5: 11:37:45 executing program 1: 11:37:45 executing program 2: 11:37:45 executing program 0: 11:37:45 executing program 4: 11:37:45 executing program 2: 11:37:45 executing program 1: 11:37:45 executing program 0: 11:37:45 executing program 5: 11:37:45 executing program 3: 11:37:45 executing program 4: 11:37:45 executing program 2: 11:37:45 executing program 1: 11:37:45 executing program 3: 11:37:45 executing program 0: 11:37:46 executing program 4: 11:37:46 executing program 5: epoll_create1(0x0) socket$inet6(0x10, 0xe, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000001c0), &(0x7f0000000140)=0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@rand_addr, 0x0, 0x4}}, 0xe8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:37:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) 11:37:46 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff}) readv(r0, &(0x7f00000001c0), 0x20000000000000d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000038000/0x400000)=nil, 0x400000, 0x0, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e) 11:37:46 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) 11:37:46 executing program 0: socketpair$inet6(0xa, 0x5, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)="7ff6d735cd872ec8846648e86ada609c437295") r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001c00)={0x0}, &(0x7f0000001c40)=0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001c80)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) io_setup(0x100000001, &(0x7f0000000340)) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x20000, 0x0, 0x0, 0x20, 0x632, 0x0, 0x4, 0x3fffc00000000, 0x3, 0x0, 0x1, 0x6a67f7b9, 0x0, 0x0, 0x5, 0x7, 0x1ff, 0xf1d8, 0x10001, 0x4, 0x0, 0x62, 0x16a5b899, 0x7fffffff, 0x8, 0x1, 0x0, 0x486, 0xfffffffeffffffff, 0x200, 0x0, 0x1ff, 0x2, @perf_config_ext={0x0, 0x81}, 0x2400, 0x1, 0xdc80, 0x7, 0xffffffffffffff80, 0x80000001, 0x9}, r0, 0xf, r0, 0x2) fcntl$addseals(r0, 0x409, 0x8) 11:37:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 11:37:46 executing program 2: 11:37:46 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) 11:37:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000680)=0x7f, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x4, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:37:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f00000000c0), 0x1, 0x38dbe4ee7a6c881d) 11:37:46 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) 11:37:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x0, 0x309a81) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc}) sendto$inet(r0, &(0x7f0000000480)="b2939d8fed3ba43202ff3f72ff6b5f884aec3f0000000000000091ccc30fa319ad00100000000000005411cf7944", 0x2e, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='bbr\x00', 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r2, &(0x7f0000000440)="77176e9a5e488b08f294252ac24a08ea91fe5620086dfb00", 0x18, 0xc0, &(0x7f0000000400)={0x2, 0x500000000000904, @remote, [0x0, 0x3e8]}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000300)={r4, r5/1000+10000}, 0x8) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="13f47ea6d3a5d995067d10a76bced6fa000000"], 0x13) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r3, 0xa068, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) 11:37:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x2802}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x8000000000}}]}]}, 0x2c}}, 0x0) 11:37:46 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) [ 283.209294] netlink: zone id is out of range [ 283.217846] netlink: del zone limit has 4 unknown bytes [ 283.278637] cgroup: fork rejected by pids controller in /syz3 [ 283.360123] mmap: syz-executor1 (8519) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 11:37:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000600)='.request_key_auth\x00', &(0x7f0000000700), &(0x7f0000000900), 0x0, 0xfffffffffffffffa) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000380)) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f0000000140)=ANY=[@ANYBLOB="05"]) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x140, 0x278, 0x3b0, 0x3b0, 0x278, 0x508, 0x508, 0x508, 0x508, 0x508, 0x5, &(0x7f0000000500), {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'ip6_vti0\x00', 'veth0_to_bond\x00'}, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6, @ipv4=@local, @port=0x4e22}}}, {{@uncond, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@multicast2, @ipv6=@mcast2, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@loopback, @ipv6=@ipv4={[], [], @rand_addr}, @port, @icmp_id}}}, {{@uncond, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv4=@local, @gre_key, @icmp_id=0x68}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) timer_create(0x0, &(0x7f0000000040), &(0x7f0000000340)) dup2(0xffffffffffffffff, 0xffffffffffffffff) 11:37:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x319}, 0x14}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 11:37:47 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 11:37:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x9b2}) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$usbmon(&(0x7f00000004c0)='/dev/usbmon#\x00', 0x3ff, 0x100) setxattr$security_evm(&(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='security.evm\x00', &(0x7f0000000780)=@md5={0x1, "55d412274904d2a83c279c3dbf21ed04"}, 0x11, 0x1) r2 = creat(&(0x7f0000000500)='./file0\x00', 0x4a) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000680)={'broute\x00', 0x0, 0x3, 0xf8, [], 0x1, &(0x7f0000000300)=[{}], &(0x7f0000000580)=""/248}, &(0x7f0000000340)=0x78) r3 = dup2(r1, r2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000540)={r2, 0x7fff, 0x9, r3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x2000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80001000000006, 0x0, 0x6, 0x100000000000}, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x3) unshare(0x40000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r5, 0x0, &(0x7f0000000100)) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000003c0)={{0x2, 0x0, @rand_addr}, {0x306, @local}, 0x0, {0x2, 0x0, @remote}, 'nr0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0}, &(0x7f0000000a80)=0xc) r8 = getuid() stat(&(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() fstat(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() lsetxattr$system_posix_acl(&(0x7f00000007c0)='./file1\x00', &(0x7f0000000a00)='system.posix_acl_default\x00', &(0x7f0000000f40)={{}, {0x1, 0x2}, [{0x2, 0x2, r7}, {0x2, 0x4, r8}, {0x2, 0x1}, {}, {0x2, 0x60f9b56b82c0cb83, r9}, {0x2, 0x1}, {0x2, 0x7}], {}, [{0x8, 0x6, r10}, {0x8, 0x3}, {0x8, 0x0, r11}, {0x8, 0x6, r12}], {0x10, 0x2}}, 0x7c, 0x3) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x2, 0xffffffffffffffa1, [], 0x2, &(0x7f0000000800)=[{}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78) 11:37:47 executing program 0: getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000fe00000000bd4a0000000000009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 11:37:47 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) 11:37:47 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000680)=0x7f, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000180), 0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x4, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) chdir(&(0x7f00000003c0)='./file0\x00') 11:37:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000600)='.request_key_auth\x00', &(0x7f0000000700), &(0x7f0000000900), 0x0, 0xfffffffffffffffa) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000380)) ioctl$KVM_GET_REG_LIST(r0, 0x800452d2, &(0x7f0000000140)=ANY=[@ANYBLOB="05"]) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x140, 0x278, 0x3b0, 0x3b0, 0x278, 0x508, 0x508, 0x508, 0x508, 0x508, 0x5, &(0x7f0000000500), {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'ip6_vti0\x00', 'veth0_to_bond\x00'}, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6, @ipv4=@local, @port=0x4e22}}}, {{@uncond, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@multicast2, @ipv6=@mcast2, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@loopback, @ipv6=@ipv4={[], [], @rand_addr}, @port, @icmp_id}}}, {{@uncond, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv4=@local, @gre_key, @icmp_id=0x68}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) timer_create(0x0, &(0x7f0000000040), &(0x7f0000000340)) dup2(0xffffffffffffffff, 0xffffffffffffffff) 11:37:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000046e000)) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 11:37:47 executing program 2: creat(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2) [ 283.861447] IPVS: ftp: loaded support on port[0] = 21 11:37:47 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) 11:37:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000680)=0x7f, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) fcntl$setown(r0, 0x8, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x4, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:37:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xa3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000080)=[{0x48, 0x0, 0x0, "df89f7a138132c99eae5e6399f8261e5a0e976e666b8bf7c7f3298f41d4711a3402fbdf07069503c84dc0a431dc5a5a73cea85b4"}], 0x48}}], 0x1, 0x0) 11:37:47 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000080)={0xa3}) 11:37:47 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) [ 284.464635] IPVS: ftp: loaded support on port[0] = 21 11:37:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) 11:37:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="000010"]) 11:37:49 executing program 2: add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000600)="e0", 0x1, 0xfffffffffffffffb) 11:37:49 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) 11:37:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@rand_addr, 0x0, 0x4}}, 0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:37:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="0f0170e10f20c06635000000400f22c066b92b08000066b8259b000066ba000000000f3066b9800000c00f326635002000000f3066b9d308000066b80d00000066ba000000000f300f01d1660f7d19260f0059000f23930f30", 0x59}], 0x1, 0x0, &(0x7f00000003c0), 0x100000000000039b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0xe) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040), 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000180)={'irlan0\x00', {0x2, 0x4e21, @local}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:37:49 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x0, 0x6}, 0x0) [ 286.298171] binder: BINDER_SET_CONTEXT_MGR already set 11:37:50 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) 11:37:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@rand_addr, 0x0, 0x4}}, 0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 286.364515] binder: undelivered death notification, 0000000000000000 [ 286.371234] binder: 8605:8606 ioctl 40046207 0 returned -16 11:37:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)) 11:37:50 executing program 5: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40086303}], 0x0, 0x0, &(0x7f00000000c0)}) 11:37:50 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) 11:37:50 executing program 2: 11:37:50 executing program 2: [ 286.632060] binder: 8626:8627 BC_FREE_BUFFER u0000000000000000 no match 11:37:50 executing program 2: 11:37:50 executing program 1: 11:37:50 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) 11:37:50 executing program 5: 11:37:50 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) setfsgid(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r3, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_procfs(r1, &(0x7f0000000280)='uid_map\x00') r4 = mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3000007, 0x1a7830, 0xffffffffffffff9c, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={r4}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000003c00000025bd70000000000060cd6c126d88cd12a633418af503ebd9c879cfe885590c9ea1d2a31a65027c80"], 0x1}], 0x1, &(0x7f0000000200)}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0xf401000000000000, 0x300000003000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11:37:50 executing program 2: 11:37:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x80002, 0x5) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x8000, 0x0) flistxattr(r0, &(0x7f0000000180)=""/56, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0xa2, {{0xa, 0x4e24, 0x493, @local, 0x4060}}}, 0x84) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='veth1_to_team\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000000d000040050000a900000000000000000000004000000000010000000000000025000000ffc65bcd348e6b06ade391ffee469ee3150c0000ac519baacf1ca42274cc894bf835f3525c958ab07642ca06f0"]) 11:37:50 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7, 0x204000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x300, 0x9, 0xffff, 0x2, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 11:37:50 executing program 2: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000240)=0x4) 11:37:50 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) 11:37:50 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000001740)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000001640)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount$9p_rdma(&(0x7f0000001980)='127.0.0/1\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='9p\x00', 0x0, &(0x7f0000001a40)={'trans=rdma,', {'port'}, 0x2c, {[{@rq={'rq', 0x3d, 0x4fdb}}, {@sq={'sq'}}, {@common=@debug={'debug', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001880)={0x0, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x8, 0x0, 0x4, 0x10000, 0x51aa, 0x5, 0xfffffffffffffffd, 0x6, 0xffff, 0x8, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x40, 0x3, 0xa3fe, 0x1, 0xd7, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1, 0x101, 0x1000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x400, 0x9}) [ 287.075221] llc_conn_state_process: llc_conn_service failed 11:37:50 executing program 2: fanotify_init(0x0, 0x40000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000380)={0x0, 0x0, {0x34, 0x2e, 0x0, 0x1b, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000004c0)={0x1, 0x0, {0x38, 0x0, 0x0, 0x4, 0x2, 0x2}}) clock_gettime(0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) 11:37:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x0) 11:37:51 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000001640)="153f6234488dd25d766070") ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc4c85512, &(0x7f0000000140)=0x2) 11:37:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc5, 0x6c}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 11:37:51 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 11:37:51 executing program 4: 11:37:51 executing program 0: prctl$seccomp(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) get_robust_list(0x0, &(0x7f00000005c0)=&(0x7f0000000580)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000500)=0x1e7) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) geteuid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000680)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000700)) r5 = getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000009c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000480)=0x820) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000071fdc4bb1b742392b0b9360178ab0ff7159fa62df4121b661d92c3febb1ffa710b334b392119508fab5b700ee4a401b940df78e56774e35e2bc89291cb67ddb99b0cc9eee315fad1700000000fca661ebe942b9bdeba368744ee1d04544da68c47c70e2fcfe58999ee6f653743ad1f9e3ea1f29c4a7a48eeea982f1ddbda0d7532150afb0d1ddd75936eee5a0aeb21b73438aee0e1db5967bb18a42f3a5f62a8f62d4765a7407fa0c21bc6c"], 0xb0, 0x80}, 0x40000) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) clock_gettime(0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000900)) r6 = getpid() gettid() pipe2(&(0x7f0000000080), 0x0) sched_setscheduler(r6, 0x5, &(0x7f00000004c0)) capset(&(0x7f00000001c0)={0x0, r6}, &(0x7f0000000300)={0x2, 0x8, 0x0, 0x3f, 0x0, 0x51}) r7 = getuid() sendfile(r4, r3, &(0x7f0000000240), 0x2000005) write$FUSE_ATTR(r4, &(0x7f0000000400)={0x78, 0x0, 0x7, {0x81, 0x8001, 0x0, {0x3, 0x0, 0x6, 0x8, 0x7fffffff, 0x0, 0x2, 0xffff, 0x80, 0x20, 0x9, r7, r5, 0x8, 0x54892704}}}, 0x78) fcntl$dupfd(r0, 0x0, r3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) 11:37:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0xa3, 0x6c}) 11:37:51 executing program 2: [ 288.210079] vhci_hcd: invalid port number 108 [ 288.247173] ================================================================== [ 288.254746] BUG: KASAN: slab-out-of-bounds in vhci_hub_control+0x1b6d/0x1be0 [ 288.261955] Read of size 4 at addr ffff8801cdb978bc by task syz-executor1/8705 [ 288.269318] [ 288.270960] CPU: 1 PID: 8705 Comm: syz-executor1 Not tainted 4.19.0-rc7-next-20181012+ #93 [ 288.279366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.288729] Call Trace: [ 288.291336] dump_stack+0x244/0x3ab [ 288.294990] ? dump_stack_print_info.cold.2+0x52/0x52 [ 288.300188] ? printk+0xa7/0xcf [ 288.303480] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 288.308259] print_address_description.cold.7+0x9/0x1ff [ 288.313637] kasan_report.cold.8+0x242/0x309 [ 288.318052] ? vhci_hub_control+0x1b6d/0x1be0 [ 288.322559] __asan_report_load4_noabort+0x14/0x20 [ 288.327494] vhci_hub_control+0x1b6d/0x1be0 [ 288.331828] ? vhci_hcd_probe+0x240/0x240 [ 288.335996] ? rcu_read_lock_sched_held+0x14f/0x180 [ 288.341025] ? __kmalloc+0x5ee/0x760 [ 288.344761] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 288.349362] usb_hcd_submit_urb+0x17bb/0x20a0 [ 288.353859] ? vhci_hcd_probe+0x240/0x240 [ 288.358022] ? usb_create_hcd+0x40/0x40 [ 288.362003] ? do_syscall_64+0x1b9/0x820 [ 288.366070] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.371441] ? __x64_sys_ioctl+0x73/0xb0 [ 288.375509] ? do_syscall_64+0x1b9/0x820 [ 288.379578] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.384959] ? find_held_lock+0x36/0x1c0 [ 288.389050] ? __lockdep_init_map+0x105/0x590 [ 288.393556] ? __lockdep_init_map+0x105/0x590 [ 288.398072] usb_submit_urb+0x893/0x14e0 [ 288.402152] usb_start_wait_urb+0x13d/0x370 [ 288.406481] ? sg_clean+0x240/0x240 [ 288.410130] usb_control_msg+0x332/0x4e0 [ 288.414197] ? usb_start_wait_urb+0x370/0x370 [ 288.418706] ? alloc_pages_current+0x17b/0x350 [ 288.423310] proc_control+0x9ae/0xf00 [ 288.427127] ? proc_bulk+0xa90/0xa90 [ 288.430858] usbdev_do_ioctl+0x1eb8/0x3b50 [ 288.435102] ? parse_usbdevfs_streams+0x4f0/0x4f0 [ 288.439957] ? perf_trace_lock+0x14d/0x7a0 [ 288.444200] ? futex_wait+0x5ec/0xa50 [ 288.448025] ? mark_held_locks+0x130/0x130 [ 288.452273] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 288.457472] ? print_usage_bug+0xc0/0xc0 [ 288.461536] ? zap_class+0x640/0x640 [ 288.465265] ? futex_wake+0x304/0x760 [ 288.469072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.474614] ? check_preemption_disabled+0x48/0x200 [ 288.479641] ? debug_smp_processor_id+0x1c/0x20 [ 288.484313] ? perf_trace_lock+0x14d/0x7a0 [ 288.488557] ? find_held_lock+0x36/0x1c0 [ 288.492628] ? lock_is_held_type+0x210/0x210 [ 288.497049] ? mark_held_locks+0x130/0x130 [ 288.501306] ? zap_class+0x640/0x640 [ 288.505029] ? kasan_check_read+0x11/0x20 [ 288.509183] ? do_raw_spin_unlock+0xa7/0x2f0 [ 288.513598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.519143] ? check_preemption_disabled+0x48/0x200 [ 288.524165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.529712] ? find_held_lock+0x36/0x1c0 [ 288.533803] ? __fget+0x4aa/0x740 [ 288.537265] ? lock_downgrade+0x900/0x900 [ 288.541420] ? check_preemption_disabled+0x48/0x200 [ 288.546452] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 288.551384] ? kasan_check_read+0x11/0x20 [ 288.555556] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 288.560843] ? rcu_softirq_qs+0x20/0x20 [ 288.564845] ? __fget+0x4d1/0x740 [ 288.568312] ? ksys_dup3+0x680/0x680 [ 288.572039] ? __might_fault+0x12b/0x1e0 [ 288.576127] ? lock_downgrade+0x900/0x900 [ 288.580303] usbdev_ioctl+0x25/0x30 [ 288.583941] ? usbdev_compat_ioctl+0x30/0x30 [ 288.588372] do_vfs_ioctl+0x1de/0x1720 [ 288.592278] ? ioctl_preallocate+0x300/0x300 [ 288.596692] ? __fget_light+0x2e9/0x430 [ 288.600679] ? fget_raw+0x20/0x20 [ 288.604137] ? _copy_to_user+0xc8/0x110 [ 288.608125] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 288.613684] ? put_timespec64+0x10f/0x1b0 [ 288.617846] ? up_read_non_owner+0x100/0x100 [ 288.622269] ? nsecs_to_jiffies+0x30/0x30 [ 288.626436] ? do_syscall_64+0x9a/0x820 [ 288.630423] ? do_syscall_64+0x9a/0x820 [ 288.634409] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 288.638997] ? security_file_ioctl+0x94/0xc0 [ 288.643418] ksys_ioctl+0xa9/0xd0 [ 288.646884] __x64_sys_ioctl+0x73/0xb0 [ 288.650780] do_syscall_64+0x1b9/0x820 [ 288.654676] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 288.660048] ? syscall_return_slowpath+0x5e0/0x5e0 [ 288.664981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.669833] ? trace_hardirqs_on_caller+0x310/0x310 [ 288.674855] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 288.679881] ? prepare_exit_to_usermode+0x291/0x3b0 [ 288.684910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.689776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.694968] RIP: 0033:0x457569 [ 288.698168] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.717079] RSP: 002b:00007f6ea4837c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.724800] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 288.732070] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 288.739342] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 288.746615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ea48386d4 [ 288.753884] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 00000000ffffffff [ 288.761174] [ 288.762802] Allocated by task 7776: [ 288.766435] save_stack+0x43/0xd0 [ 288.769892] kasan_kmalloc+0xc7/0xe0 [ 288.773610] kasan_slab_alloc+0x12/0x20 [ 288.777591] kmem_cache_alloc+0x12e/0x730 [ 288.781753] getname_flags+0xd0/0x590 [ 288.785556] getname+0x19/0x20 [ 288.788766] do_sys_open+0x383/0x700 [ 288.792481] __x64_sys_open+0x7e/0xc0 [ 288.796294] do_syscall_64+0x1b9/0x820 [ 288.800185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.805366] [ 288.806993] Freed by task 7776: [ 288.810275] save_stack+0x43/0xd0 [ 288.813740] __kasan_slab_free+0x102/0x150 [ 288.817982] kasan_slab_free+0xe/0x10 [ 288.821793] kmem_cache_free+0x83/0x290 [ 288.825787] putname+0xf2/0x130 [ 288.829070] do_sys_open+0x54d/0x700 [ 288.832785] __x64_sys_open+0x7e/0xc0 [ 288.836592] do_syscall_64+0x1b9/0x820 [ 288.840484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.845664] [ 288.847293] The buggy address belongs to the object at ffff8801cdb967c0 [ 288.847293] which belongs to the cache names_cache of size 4096 [ 288.860055] The buggy address is located 252 bytes to the right of [ 288.860055] 4096-byte region [ffff8801cdb967c0, ffff8801cdb977c0) [ 288.872539] The buggy address belongs to the page: [ 288.877477] page:ffffea000736e580 count:1 mapcount:0 mapping:ffff8801da98ae00 index:0x0 compound_mapcount: 0 [ 288.887458] flags: 0x2fffc0000010200(slab|head) [ 288.892154] raw: 02fffc0000010200 ffffea0006dd2788 ffffea00071cf388 ffff8801da98ae00 [ 288.900042] raw: 0000000000000000 ffff8801cdb967c0 0000000100000001 0000000000000000 [ 288.907919] page dumped because: kasan: bad access detected [ 288.913624] [ 288.915254] Memory state around the buggy address: [ 288.920183] ffff8801cdb97780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 288.927540] ffff8801cdb97800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 288.934903] >ffff8801cdb97880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 288.942289] ^ [ 288.947480] ffff8801cdb97900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 288.954841] ffff8801cdb97980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 288.962194] ================================================================== [ 288.969549] Disabling lock debugging due to kernel taint [ 288.974995] Kernel panic - not syncing: panic_on_warn set ... [ 288.974995] [ 288.982376] CPU: 1 PID: 8705 Comm: syz-executor1 Tainted: G B 4.19.0-rc7-next-20181012+ #93 [ 288.992162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.001507] Call Trace: [ 289.004104] dump_stack+0x244/0x3ab [ 289.007744] ? dump_stack_print_info.cold.2+0x52/0x52 [ 289.012946] ? lock_downgrade+0x900/0x900 [ 289.017118] panic+0x238/0x4e7 [ 289.020318] ? add_taint.cold.5+0x16/0x16 [ 289.024473] ? add_taint.cold.5+0x5/0x16 [ 289.028542] ? trace_hardirqs_off+0xaf/0x310 [ 289.032983] kasan_end_report+0x47/0x4f [ 289.036977] kasan_report.cold.8+0x76/0x309 [ 289.041306] ? vhci_hub_control+0x1b6d/0x1be0 [ 289.045808] __asan_report_load4_noabort+0x14/0x20 [ 289.050749] vhci_hub_control+0x1b6d/0x1be0 [ 289.055081] ? vhci_hcd_probe+0x240/0x240 [ 289.059265] ? rcu_read_lock_sched_held+0x14f/0x180 [ 289.064290] ? __kmalloc+0x5ee/0x760 [ 289.068009] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 289.072595] usb_hcd_submit_urb+0x17bb/0x20a0 [ 289.077092] ? vhci_hcd_probe+0x240/0x240 [ 289.081256] ? usb_create_hcd+0x40/0x40 [ 289.085247] ? do_syscall_64+0x1b9/0x820 [ 289.089315] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.094684] ? __x64_sys_ioctl+0x73/0xb0 [ 289.098775] ? do_syscall_64+0x1b9/0x820 [ 289.102840] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.108213] ? find_held_lock+0x36/0x1c0 [ 289.112284] ? __lockdep_init_map+0x105/0x590 [ 289.116786] ? __lockdep_init_map+0x105/0x590 [ 289.121296] usb_submit_urb+0x893/0x14e0 [ 289.125371] usb_start_wait_urb+0x13d/0x370 [ 289.129695] ? sg_clean+0x240/0x240 [ 289.133341] usb_control_msg+0x332/0x4e0 [ 289.137404] ? usb_start_wait_urb+0x370/0x370 [ 289.141904] ? alloc_pages_current+0x17b/0x350 [ 289.146489] proc_control+0x9ae/0xf00 [ 289.150297] ? proc_bulk+0xa90/0xa90 [ 289.154022] usbdev_do_ioctl+0x1eb8/0x3b50 [ 289.158265] ? parse_usbdevfs_streams+0x4f0/0x4f0 [ 289.163115] ? perf_trace_lock+0x14d/0x7a0 [ 289.167354] ? futex_wait+0x5ec/0xa50 [ 289.171162] ? mark_held_locks+0x130/0x130 [ 289.175402] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 289.180602] ? print_usage_bug+0xc0/0xc0 [ 289.184670] ? zap_class+0x640/0x640 [ 289.188393] ? futex_wake+0x304/0x760 [ 289.192201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.197755] ? check_preemption_disabled+0x48/0x200 [ 289.202780] ? debug_smp_processor_id+0x1c/0x20 [ 289.207453] ? perf_trace_lock+0x14d/0x7a0 [ 289.211693] ? find_held_lock+0x36/0x1c0 [ 289.215770] ? lock_is_held_type+0x210/0x210 [ 289.220185] ? mark_held_locks+0x130/0x130 [ 289.224422] ? zap_class+0x640/0x640 [ 289.228142] ? kasan_check_read+0x11/0x20 [ 289.232290] ? do_raw_spin_unlock+0xa7/0x2f0 [ 289.236704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.242256] ? check_preemption_disabled+0x48/0x200 [ 289.247310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.252863] ? find_held_lock+0x36/0x1c0 [ 289.256936] ? __fget+0x4aa/0x740 [ 289.260393] ? lock_downgrade+0x900/0x900 [ 289.264548] ? check_preemption_disabled+0x48/0x200 [ 289.269574] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 289.274503] ? kasan_check_read+0x11/0x20 [ 289.278654] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 289.283935] ? rcu_softirq_qs+0x20/0x20 [ 289.287921] ? __fget+0x4d1/0x740 [ 289.291387] ? ksys_dup3+0x680/0x680 [ 289.295107] ? __might_fault+0x12b/0x1e0 [ 289.299174] ? lock_downgrade+0x900/0x900 [ 289.303333] usbdev_ioctl+0x25/0x30 [ 289.306960] ? usbdev_compat_ioctl+0x30/0x30 [ 289.311377] do_vfs_ioctl+0x1de/0x1720 [ 289.315272] ? ioctl_preallocate+0x300/0x300 [ 289.319697] ? __fget_light+0x2e9/0x430 [ 289.323683] ? fget_raw+0x20/0x20 [ 289.327142] ? _copy_to_user+0xc8/0x110 [ 289.331121] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 289.336664] ? put_timespec64+0x10f/0x1b0 [ 289.340812] ? up_read_non_owner+0x100/0x100 [ 289.345233] ? nsecs_to_jiffies+0x30/0x30 [ 289.349389] ? do_syscall_64+0x9a/0x820 [ 289.353366] ? do_syscall_64+0x9a/0x820 [ 289.357344] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 289.361934] ? security_file_ioctl+0x94/0xc0 [ 289.366352] ksys_ioctl+0xa9/0xd0 [ 289.369815] __x64_sys_ioctl+0x73/0xb0 [ 289.373710] do_syscall_64+0x1b9/0x820 [ 289.377614] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 289.382984] ? syscall_return_slowpath+0x5e0/0x5e0 [ 289.387918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.392764] ? trace_hardirqs_on_caller+0x310/0x310 [ 289.397800] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 289.402829] ? prepare_exit_to_usermode+0x291/0x3b0 [ 289.407854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.412707] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.417927] RIP: 0033:0x457569 [ 289.421127] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.440031] RSP: 002b:00007f6ea4837c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.447753] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 289.455029] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 289.462299] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 289.469571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ea48386d4 [ 289.476841] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 00000000ffffffff [ 289.485058] Kernel Offset: disabled [ 289.488705] Rebooting in 86400 seconds..